This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
File: n4mmBPRc629oBPtTTq3CQWa9Dyk.mft (raw, json)
Hash identifier: gUCIgUkxzBL1CG2bf0cc5c2MW97d52aUfvOICy07wDw=
Subject key identifier: 87:33:8A:62:A9:25:5C:00:8F:F7:39:30:84:AE:9F:9D:EC:4A:D6:60
Authority key identifier: 9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
Certificate issuer: /CN=A91FD3F6/serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
Manifest number: 9C
Signing time: Sat 27 Dec 2025 05:16:27 +0000
Manifest this update: Sat 27 Dec 2025 05:16:26 +0000
Manifest next update: Sat 03 Jan 2026 05:16:26 +0000
Files and hashes: 1: n4mmBPRc629oBPtTTq3CQWa9Dyk.crl (hash: tYWVP3eitP3EgeVS9StzbLm/HGI7+7XlyFkUCA4fHLI=)
2: 88E11172F99A11EFA825D961C4F9AE02.roa (hash: mh+UCJNFemXmx1rXPNcCjaRpL6VWoi5lGRmYTA/fEi0=)
3: 27B19A58F99911EFB6B7F427C4F9AE02.roa (hash: Q7i85RevnZqkOBdKbp0/e+tjgTQzpkBCM+sWN4N+OW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD3F6, serialNumber=9F89A604F45CEB6F6804FB534EADC24166BD0F29
Validity
Not Before: Dec 27 05:16:26 2025 GMT
Not After : Jan 3 05:16:26 2026 GMT
Subject: CN=694f6bab-adf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:40:7c:05:8d:dd:17:e2:67:67:fe:66:cb:
35:92:34:db:9e:d7:b0:b0:79:be:36:13:61:a2:c6:
cf:35:14:5e:6b:39:af:b4:46:78:7c:e1:4b:7c:df:
2f:10:69:c6:b6:6c:ba:39:f8:34:9b:1f:85:38:44:
a8:58:9c:e8:4d:e1:44:3a:2f:e3:2d:ff:69:c1:ca:
71:0c:6d:30:17:fb:41:55:28:57:39:1d:ad:7b:41:
fd:18:fe:ff:98:2c:84:10:3c:76:1b:bf:d0:6e:e0:
54:b2:41:fd:aa:44:20:35:fb:b0:a9:c0:e7:95:62:
23:1e:d0:da:3c:9c:30:2d:69:5b:86:7d:53:bf:5b:
5f:61:6a:37:39:0c:8d:f4:6e:0d:f8:70:3c:92:14:
ba:3d:8f:16:bf:cd:80:45:d6:ce:33:ba:b1:41:31:
ce:b1:a1:87:dd:51:47:e5:78:9f:d6:01:01:2d:9b:
32:a2:45:f6:a9:67:04:57:26:1a:e7:50:00:34:bf:
9e:f7:c7:de:09:8f:08:48:94:a6:92:98:cc:b6:39:
a5:3b:7d:47:05:d5:68:5e:f0:0e:d9:3a:12:42:06:
e7:0c:36:d4:6e:ca:ad:64:78:7c:cb:15:fa:0c:26:
6a:5a:2d:2a:c2:9b:2c:4b:ec:88:82:49:6c:a4:e1:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:33:8A:62:A9:25:5C:00:8F:F7:39:30:84:AE:9F:9D:EC:4A:D6:60
X509v3 Authority Key Identifier:
keyid:9F:89:A6:04:F4:5C:EB:6F:68:04:FB:53:4E:AD:C2:41:66:BD:0F:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4mmBPRc629oBPtTTq3CQWa9Dyk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD3F6/371681FAF8D311EF9758FB0FC4F9AE02/n4mmBPRc629oBPtTTq3CQWa9Dyk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e6:14:e0:a3:b1:1c:a4:a4:a1:e3:00:e7:26:88:07:c5:64:
00:01:ab:94:7f:ff:4d:a2:75:47:b7:7d:6c:94:21:78:49:62:
9e:ce:25:5f:1e:69:4a:1e:ee:2f:4f:af:9f:9d:d8:e4:61:28:
26:82:9e:9d:85:f6:ca:71:54:32:b7:f5:34:47:8b:e3:bb:14:
88:7d:a0:e0:b7:02:bd:69:96:dc:de:fa:11:1d:94:08:fe:3a:
e1:fa:f9:2a:05:bc:15:7c:ed:df:67:88:9b:d8:44:65:78:3b:
21:9c:1d:5f:07:5b:7c:6a:6a:f7:85:5b:ac:68:72:db:20:9a:
44:95:ef:b9:8d:c5:26:9b:93:34:15:ae:96:6d:be:13:02:c0:
3f:a2:a4:6a:6f:27:f4:de:61:e8:4c:fb:85:b5:d8:76:8a:1e:
de:00:52:e0:2b:8e:2d:13:50:9a:56:c1:e1:41:2e:b4:55:a2:
a0:ad:12:23:02:fc:7c:33:84:8c:4d:5e:a3:15:a7:72:a0:6e:
84:4f:55:c3:03:19:b8:94:e5:e9:82:8a:4a:9c:c5:7b:58:e0:
67:d5:c2:9d:73:4e:9e:0f:74:cc:be:3a:63:00:cc:ab:3b:1e:
85:52:3a:8e:9e:9b:03:e9:fe:a0:38:c1:66:ef:6c:a0:10:9b:
f8:b6:fd:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQzRjYxMTAvBgNVBAUTKDlGODlBNjA0RjQ1Q0VCNkY2ODA0RkI1MzRFQURDMjQx
NjZCRDBGMjkwHhcNMjUxMjI3MDUxNjI2WhcNMjYwMTAzMDUxNjI2WjAYMRYwFAYD
VQQDDA02OTRmNmJhYi1hZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIxAfAWN3RfiZ2f+Zss1kjTbntewsHm+NhNhosbPNRReazmvtEZ4fOFLfN8v
EGnGtmy6Ofg0mx+FOESoWJzoTeFEOi/jLf9pwcpxDG0wF/tBVShXOR2te0H9GP7/
mCyEEDx2G7/QbuBUskH9qkQgNfuwqcDnlWIjHtDaPJwwLWlbhn1Tv1tfYWo3OQyN
9G4N+HA8khS6PY8Wv82ARdbOM7qxQTHOsaGH3VFH5Xif1gEBLZsyokX2qWcEVyYa
51AANL+e98feCY8ISJSmkpjMtjmlO31HBdVoXvAO2ToSQgbnDDbUbsqtZHh8yxX6
DCZqWi0qwpssS+yIgklspOFk4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIczimKp
JVwAj/c5MISun53sStZgMB8GA1UdIwQYMBaAFJ+JpgT0XOtvaAT7U06twkFmvQ8p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDNGNi8zNzE2ODFGQUY4
RDMxMUVGOTc1OEZCMEZDNEY5QUUwMi9uNG1tQlBSYzYyOW9CUHRUVHEzQ1FXYTlE
eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL240bW1CUFJjNjI5b0JQdFRUcTNDUVdhOUR5ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDNGNi8zNzE2ODFGQUY4RDMxMUVGOTc1OEZCMEZDNEY5QUUwMi9uNG1tQlBSYzYy
OW9CUHRUVHEzQ1FXYTlEeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC05hTgo7EcpKSh4wDnJogHxWQAAauUf/9NonVHt31slCF4SWKeziVf
HmlKHu4vT6+fndjkYSgmgp6dhfbKcVQyt/U0R4vjuxSIfaDgtwK9aZbc3voRHZQI
/jrh+vkqBbwVfO3fZ4ib2ERleDshnB1fB1t8amr3hVusaHLbIJpEle+5jcUmm5M0
Fa6Wbb4TAsA/oqRqbyf03mHoTPuFtdh2ih7eAFLgK44tE1CaVsHhQS60VaKgrRIj
Avx8M4SMTV6jFadyoG6ET1XDAxm4lOXpgopKnMV7WOBn1cKdc06eD3TMvjpjAMyr
Ox6FUjqOnpsD6f6gOMFm72ygEJv4tv0d
-----END CERTIFICATE-----
Generated at Sat Dec 27 06:17:02 2025 by rpki-client