This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
File: TnVPewjIAAZ84HEJetOUaJDao2U.mft (raw, json)
Hash identifier: Mg9vcJHKX4hirNpf6i6aZF3TfS52di7//7MB4bh30Yc=
Subject key identifier: DD:72:9C:92:30:B5:EB:9A:6F:B7:BA:B8:08:B9:11:02:76:4E:41:CF
Authority key identifier: 4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65
Certificate issuer: /CN=A91F4B3F/serialNumber=4E754F7B08C800067CE071097AD3946890DAA365
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
Manifest number: 01B0
Signing time: Wed 31 Dec 2025 02:18:44 +0000
Manifest this update: Wed 31 Dec 2025 02:18:43 +0000
Manifest next update: Wed 07 Jan 2026 02:18:43 +0000
Files and hashes: 1: TnVPewjIAAZ84HEJetOUaJDao2U.crl (hash: lhBxCGemS+nELmH2DN8tybiN3R+BNeRyRdu32CCieWc=)
2: D875D57EF30611EEAFFC0C66C4F9AE02.roa (hash: qatvyS4SyJTNURVM2FsClClDPfP+4FEBMIeJZ8wIqMA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl
rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 02:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4B3F, serialNumber=4E754F7B08C800067CE071097AD3946890DAA365
Validity
Not Before: Dec 31 02:18:43 2025 GMT
Not After : Jan 7 02:18:43 2026 GMT
Subject: CN=69548804-f953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:64:62:7c:4e:7d:0c:be:cf:32:03:31:b7:
91:6f:09:ec:eb:7a:a6:fc:57:31:f1:15:85:d6:4b:
5d:c0:35:55:b6:66:06:de:82:90:c8:32:63:6e:48:
ae:b3:67:1f:2d:03:0c:10:5e:a4:0c:7e:61:c5:99:
77:5a:ca:3f:b5:d9:cb:04:26:97:b3:f5:34:23:47:
dc:72:ad:5e:1a:fb:60:fe:58:a4:8d:54:a9:0e:4d:
37:1b:e8:36:51:67:8e:51:a6:3b:13:bb:f0:f0:fe:
8b:0a:f3:f5:1e:6e:c8:7c:cc:d1:d3:d6:34:b2:0b:
52:9d:a7:98:66:2e:32:39:d2:6d:ba:6b:5e:59:ab:
02:b7:cc:0e:21:44:69:cf:70:eb:62:68:25:69:9d:
9e:83:a8:c0:cb:c1:ec:03:22:18:35:7d:11:31:4c:
1e:ce:90:a1:ae:19:fd:4b:cd:a5:d0:cf:06:bb:9d:
51:66:b9:77:be:69:f5:dd:d2:0d:b8:55:4a:01:79:
92:76:52:9f:61:7a:3e:4e:36:b1:51:c6:5b:20:26:
24:12:e2:fa:8f:f8:67:c1:6e:e3:2b:49:61:0b:2b:
2b:aa:35:df:b2:f8:10:d5:80:b7:14:bd:32:b1:8c:
9c:5e:73:25:e1:86:08:14:e5:cb:eb:4c:6b:3f:1a:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:72:9C:92:30:B5:EB:9A:6F:B7:BA:B8:08:B9:11:02:76:4E:41:CF
X509v3 Authority Key Identifier:
keyid:4E:75:4F:7B:08:C8:00:06:7C:E0:71:09:7A:D3:94:68:90:DA:A3:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TnVPewjIAAZ84HEJetOUaJDao2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4B3F/1CDF87E4516011EEB0A5826AC4F9AE02/TnVPewjIAAZ84HEJetOUaJDao2U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:b2:4b:99:ab:9f:dd:a0:19:cd:da:18:4d:f9:be:95:5a:ba:
9a:a9:1a:d2:a5:e5:f5:15:41:58:9b:c0:bd:7c:8f:03:5e:95:
77:16:25:05:f2:c1:76:b6:fc:e9:9f:e4:66:ee:92:b3:be:36:
08:96:7f:45:6f:78:60:68:0b:33:8d:ba:4c:8a:36:48:8f:51:
ef:33:09:96:49:be:6e:11:ef:f3:c7:55:46:49:8c:d9:b0:72:
68:a0:d2:28:45:94:fd:c2:a6:c5:61:dc:d7:ba:71:c9:9d:90:
7b:42:a6:2f:e0:1e:66:c4:f4:e6:0a:eb:6c:54:14:76:d4:ed:
01:7e:5a:f6:cc:96:46:aa:cd:73:fa:63:79:37:a5:f9:d4:61:
0f:a2:05:49:41:6b:2b:3e:5f:f7:1e:f9:03:09:07:e3:75:f2:
67:f8:1a:86:a1:2a:9b:11:d0:19:48:c3:88:7c:97:20:4e:f8:
55:2a:9e:e2:1b:be:51:9b:b8:73:04:df:4a:4c:da:6a:da:9a:
e5:9b:96:52:b3:b9:ec:a6:e6:09:91:80:53:41:43:d1:0b:cc:
2e:e1:92:b8:ab:c0:74:c4:89:bd:fd:a4:d7:a7:27:99:02:ea:
b1:21:ed:95:ca:fe:ec:64:00:db:3a:f6:56:f5:f1:98:3c:68:
f7:eb:fd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 01:07:03 2026 by rpki-client