This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
File: C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json)
Hash identifier: tMwG+hWEksO6U5O7EgSyVXz9SL/aozZv84qdgrB9oZk=
Subject key identifier: 80:85:47:3C:B3:53:5C:D9:5B:E5:78:4D:43:59:C7:A2:B1:F1:BF:53
Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
Manifest number: 0189
Signing time: Sat 27 Dec 2025 02:33:35 +0000
Manifest this update: Sat 27 Dec 2025 02:33:34 +0000
Manifest next update: Sat 03 Jan 2026 02:33:34 +0000
Files and hashes: 1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: WeuNV5bgJKRBKgdZkpBJkFlmv4UIB4wQRavCKR/CtSE=)
2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 7OzrwZ3Ky/gjMPnFBCcju8Q1dBXI74VmazgiOgPzNsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl
rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 02:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Validity
Not Before: Dec 27 02:33:34 2025 GMT
Not After : Jan 3 02:33:34 2026 GMT
Subject: CN=694f457f-74e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:a8:a0:e8:f5:81:8b:a3:bd:65:e4:6a:41:
13:84:a1:30:44:e7:26:cf:06:6f:f8:34:07:0d:92:
6f:4b:c4:82:b0:ce:04:a5:a1:4a:13:57:26:06:40:
8c:c7:fc:62:e2:fa:01:6a:5e:9f:60:48:c6:b0:9e:
bc:5a:a9:41:e6:01:af:3c:fc:ad:85:60:c7:5a:dd:
33:20:bc:f7:b3:0c:cf:7e:59:5c:cc:5a:a2:5d:7c:
82:a5:34:dd:46:97:0a:b7:ad:a8:b6:ce:9d:f3:00:
fc:e5:23:e3:f1:01:5b:ed:bd:c6:46:c1:77:e9:8e:
80:01:96:68:5b:9d:ce:9f:74:d1:78:0d:77:31:6e:
dc:32:d2:a7:f0:3f:19:a5:af:56:0b:29:c3:7d:51:
5b:b5:40:4a:c0:f4:81:e4:69:62:06:2b:71:dc:1c:
57:78:ba:e6:50:01:f7:e6:66:66:a6:34:7e:0e:56:
9a:d6:7f:94:aa:18:a2:61:50:87:b3:5f:92:4d:a9:
b0:34:53:02:60:5b:31:5d:b9:39:73:93:50:6f:f6:
18:66:e8:d4:83:82:fc:e5:49:a0:12:05:af:61:11:
91:b4:e9:5e:c2:f6:9c:c6:c0:44:d9:21:56:c8:b3:
28:a4:aa:af:45:1f:d0:cb:7c:bc:7c:8a:14:82:61:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:47:3C:B3:53:5C:D9:5B:E5:78:4D:43:59:C7:A2:B1:F1:BF:53
X509v3 Authority Key Identifier:
keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:5c:9e:41:bb:14:d8:8b:6b:93:7e:76:b4:10:1c:5a:e9:56:
93:15:8f:a3:02:2b:66:e3:d9:00:93:ef:49:39:69:ab:c9:db:
99:24:88:6a:56:17:bb:c0:ca:a0:5a:2b:b2:e1:a5:fe:0b:c7:
1b:00:4f:29:ea:c9:7a:ab:6b:75:ea:0b:5d:1f:b2:49:3d:e6:
bf:01:b2:14:b2:62:3d:e0:36:83:3c:26:a2:36:ed:b7:af:81:
ee:6e:53:0c:0f:31:c0:bf:fb:09:bd:8e:42:0a:6a:0b:ce:62:
b5:22:0a:e3:4c:11:a8:41:b1:c7:04:2c:1f:92:4a:ad:b4:0b:
ec:32:9d:f1:bf:48:42:e6:00:39:3b:62:aa:0f:04:cf:bb:ff:
3d:62:a1:3b:48:dc:ad:d2:82:11:2b:2d:85:87:74:e9:74:a0:
6d:89:c6:d8:e0:06:ed:5f:d7:e1:9e:0c:7f:de:4c:5b:f3:fa:
ad:c9:78:eb:aa:7b:97:7d:ed:28:e8:cc:c4:b9:47:34:a3:86:
74:1d:c8:3a:89:90:74:1e:33:d6:3f:ce:ee:ed:cc:b6:0b:7a:
cb:a3:95:60:35:87:ea:10:43:ff:3f:e2:c0:f9:ce:f3:69:1c:
52:6b:ea:2b:47:96:f8:23:cd:85:2b:20:ff:d6:85:30:0d:c5:
a7:e2:37:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 01:50:30 2025 by rpki-client