This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
File: 4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json)
Hash identifier: nc2ntwqCPs9QpDfZ1+tXzTx5ORN7i6M68+pBVvGiYQc=
Subject key identifier: 3E:7A:02:2E:3A:B3:B8:98:8D:7E:0D:0C:01:9B:31:C6:C5:DD:81:29
Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE
Certificate issuer: /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE
Certificate serial: 032F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
Manifest number: 0329
Signing time: Fri 19 Dec 2025 00:19:26 +0000
Manifest this update: Fri 19 Dec 2025 00:19:25 +0000
Manifest next update: Fri 26 Dec 2025 00:19:25 +0000
Files and hashes: 1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: LW9ZrYiuoB+birxMtKSdwqJMWas5D+Cow1li7GfRftk=)
2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: z4QSZHsaMIqrT5GqWS+ItSZJBTmn9r2MlyBM2UIg/g4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl
rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 815 (0x32f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE
Validity
Not Before: Dec 19 00:19:25 2025 GMT
Not After : Dec 26 00:19:25 2025 GMT
Subject: CN=69449a0d-c8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:7a:35:fc:d1:43:8c:dc:2c:79:4d:b9:cd:
3f:6f:9c:36:b8:dd:e1:7d:73:ed:81:61:f5:3c:65:
bf:f6:3a:0d:1f:6b:22:3d:03:0b:20:93:34:9c:8d:
83:6f:28:c4:ae:88:31:24:8f:80:16:f5:04:52:72:
31:96:48:8a:92:98:dd:d6:94:39:36:c4:99:5a:5d:
3f:47:1e:02:95:29:83:67:a1:9e:29:85:97:e5:cf:
c9:d4:47:e6:be:42:dd:93:e6:6d:de:38:7f:19:ac:
ef:20:3b:d8:0c:8e:16:10:f7:57:13:74:f0:03:70:
da:87:79:8f:c7:7b:04:69:b6:08:0a:a7:15:85:be:
a7:4d:79:42:81:47:28:54:56:98:d6:f9:1a:2d:84:
c1:c4:e7:d2:8c:bd:54:25:a3:15:d1:fe:a2:8f:b4:
9c:84:3c:91:ad:e6:1e:22:f3:18:c0:d2:72:18:49:
26:b4:b6:58:81:02:94:84:db:2f:84:44:bb:f7:35:
bc:80:ba:87:f0:ae:fa:96:76:a2:e6:67:2c:2c:57:
a3:20:11:8a:89:9a:2c:bc:e3:b6:45:2a:aa:2a:2a:
37:6a:2f:19:62:df:c2:9f:53:ed:fd:b3:9d:de:69:
4e:31:c9:af:6a:9b:72:ab:e9:1e:26:ba:3e:72:9e:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7A:02:2E:3A:B3:B8:98:8D:7E:0D:0C:01:9B:31:C6:C5:DD:81:29
X509v3 Authority Key Identifier:
keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:75:f7:c2:2d:fc:72:4d:11:09:e8:b2:6c:a6:8c:3d:6c:69:
07:17:3b:be:cb:45:a3:b0:bc:94:87:f7:99:e0:f7:80:a4:cb:
f0:4e:9e:ac:4e:42:cf:e2:74:51:74:88:0a:df:0c:c6:4d:61:
5c:05:22:d4:69:c4:32:8d:f6:c9:dc:22:a3:7b:27:3b:bb:52:
d1:6a:53:23:16:64:f9:9e:a2:6e:b8:d0:d5:38:e6:78:6b:a4:
fb:7b:f7:4b:c0:d9:56:15:c2:57:7f:c3:46:ee:4c:73:04:58:
9f:38:92:8e:78:da:05:86:52:ce:af:4c:57:e8:49:55:c0:c2:
15:5f:8b:05:d1:97:f0:68:c0:13:96:47:7b:8f:bc:a9:0f:b3:
4c:c6:dd:c9:5a:37:0a:9e:e6:3a:01:c4:e3:b4:03:78:c6:80:
11:62:97:53:07:da:4c:df:7b:16:65:b4:ab:6b:34:cd:ac:1c:
b2:5d:e8:80:d2:29:ab:f0:5a:9d:84:86:6c:fa:96:4a:b0:ea:
7b:12:19:4a:2f:8e:e8:4b:a8:97:21:58:aa:91:55:aa:0f:69:
cc:4d:e8:4a:27:ba:f8:a9:53:b0:54:7c:75:9a:3a:44:32:d1:
f7:91:a6:89:cc:cf:4b:7c:4d:9b:3e:fe:b3:2e:ae:52:c5:ad:
0a:a8:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:08 2025 by rpki-client