This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
File: MJk4cOkSzRkdgKzvMDV6VP80-C4.mft (raw, json)
Hash identifier: sOYhOfmDAT9Hkz7DRRyeaafdoitxl/4UEb5lrqZgNiY=
Subject key identifier: 8B:0C:2D:AD:95:D2:15:76:A1:6E:E9:69:69:A4:33:58:EA:19:D3:4F
Authority key identifier: 30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
Certificate issuer: /CN=A91E84A9/serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Certificate serial: 127A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
Manifest number: 1272
Signing time: Thu 18 Dec 2025 16:57:06 +0000
Manifest this update: Thu 18 Dec 2025 16:57:06 +0000
Manifest next update: Thu 25 Dec 2025 16:57:06 +0000
Files and hashes: 1: MJk4cOkSzRkdgKzvMDV6VP80-C4.crl (hash: Wa4jE8AU0+9NDM1QdnXFfZHVbjjCKcAqdRLKxlmlvjk=)
2: DA7E3CA6E19811E8822B8E5CC4F9AE02.roa (hash: jn5qhVbEoategN8Wb9SpBQEDedH4bKopl8YHB2oNVaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4730 (0x127a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E84A9, serialNumber=30993870E912CD191D80ACEF30357A54FF34F82E
Validity
Not Before: Dec 18 16:57:06 2025 GMT
Not After : Dec 25 16:57:06 2025 GMT
Subject: CN=69443262-260c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:52:8d:4d:ec:c6:2d:dc:a1:97:15:b4:8c:
7e:49:8b:fe:11:fb:32:e6:8a:31:03:2a:45:3e:09:
e0:4e:59:ca:c8:5f:fe:e6:03:ae:c5:96:ae:23:01:
59:3c:b7:16:e5:e4:32:b9:63:94:75:0e:b1:9e:ad:
60:3a:b3:6c:71:2d:89:e9:33:8c:2b:44:90:b8:d7:
f2:5d:96:ac:ee:d0:e2:60:89:2d:4e:52:f8:20:a9:
9c:49:65:b2:d0:61:07:c6:f8:8d:a4:c9:c8:b8:3d:
84:60:ef:d0:76:84:7f:d8:58:e4:f8:fd:0d:4a:35:
48:53:b2:94:64:4e:c4:e8:aa:92:ca:26:ec:c1:35:
68:a6:55:81:0b:1c:db:49:44:9c:fe:34:e6:33:29:
4b:ad:11:e8:ae:38:b4:41:cc:27:7d:13:6c:05:56:
8f:93:7e:3e:03:c6:ea:17:19:cc:93:fd:73:f1:53:
aa:87:bb:b5:53:98:07:ff:42:3e:24:fc:3a:d3:8f:
3b:53:62:f7:62:9c:ad:fd:09:07:07:6f:02:c6:84:
1f:19:ce:51:21:7c:14:41:2d:73:51:45:4c:3e:65:
68:cd:b9:31:f1:fb:26:5c:86:80:8e:38:55:83:1c:
cb:20:4a:49:fb:77:f4:2c:ff:2a:f3:e8:ce:65:19:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0C:2D:AD:95:D2:15:76:A1:6E:E9:69:69:A4:33:58:EA:19:D3:4F
X509v3 Authority Key Identifier:
keyid:30:99:38:70:E9:12:CD:19:1D:80:AC:EF:30:35:7A:54:FF:34:F8:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJk4cOkSzRkdgKzvMDV6VP80-C4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E84A9/6A90A9C0E19711E8B94C0558C4F9AE02/MJk4cOkSzRkdgKzvMDV6VP80-C4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ed:d9:5f:0c:49:18:1e:57:58:c0:bb:73:76:87:44:ef:c5:
7f:69:39:b6:76:67:02:ab:1b:7c:71:54:b9:35:df:96:92:78:
e2:25:2c:23:b3:ed:4d:34:d2:b9:6a:4d:3c:19:39:1a:03:f7:
e6:b3:ba:d7:8a:8f:87:51:1d:16:62:70:4c:a5:d2:78:ab:14:
7c:c8:cc:6d:87:71:bf:86:64:0d:44:42:1b:1b:24:c8:be:93:
a9:4d:e4:5c:ad:69:e7:ee:16:1f:fa:f5:b2:66:92:02:b9:bf:
d1:23:df:b0:94:10:e9:57:d0:42:03:40:ad:47:ea:76:35:3e:
cf:c8:32:7a:ea:2a:d2:53:29:fb:44:7e:d0:02:65:d1:52:29:
7f:6c:d2:1d:5f:1d:85:61:ba:2e:f0:a3:6a:2a:df:71:d7:87:
fc:02:5e:74:4c:e2:fd:6e:09:bb:3d:4a:02:a9:96:e0:c0:ac:
ab:06:12:fa:76:d5:f9:d3:15:b0:c0:bc:bd:c0:3e:eb:a0:b4:
d4:8a:be:3b:e0:e5:36:4b:c9:22:df:4e:ff:bf:fa:5c:f3:d7:
8b:b9:ce:5d:5b:bb:77:66:a6:ee:56:72:69:c7:07:f7:3d:e1:
ef:ff:50:a9:79:66:19:04:24:02:f6:dc:84:30:b2:07:92:5a:
8f:e3:fa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:46:52 2025 by rpki-client