This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
File: rcLQEHTd7bWHQSLy4bisO07c23s.mft (raw, json)
Hash identifier: lTQTU0e0RgsjOFC596EUOqKUO0wUIXaxvAy4Pd9qlR8=
Subject key identifier: 10:00:2F:DA:6C:4B:2C:10:98:2E:5F:B9:C0:4E:6C:31:56:15:67:7E
Authority key identifier: AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B
Certificate issuer: /CN=A9114DAE/serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B
Certificate serial: 0808
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
Manifest number: 0808
Signing time: Fri 26 Dec 2025 20:18:08 +0000
Manifest this update: Fri 26 Dec 2025 20:18:07 +0000
Manifest next update: Fri 02 Jan 2026 20:18:07 +0000
Files and hashes: 1: rcLQEHTd7bWHQSLy4bisO07c23s.crl (hash: Ld6Q8vA+50ZXv9J9rqk2BDv9+Z8BdEi83ac7LEJ9UqE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl
rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 20:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056 (0x808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114DAE, serialNumber=ADC2D01074DDEDB5874122F2E1B8AC3B4EDCDB7B
Validity
Not Before: Dec 26 20:18:07 2025 GMT
Not After : Jan 2 20:18:07 2026 GMT
Subject: CN=694eed80-0355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:48:af:8b:41:2c:85:e0:d1:28:8c:9c:ed:f0:
a4:15:17:45:c1:ee:ca:ad:1e:8f:b9:19:28:74:14:
d5:1b:8d:23:78:3e:ba:98:33:dc:e7:40:98:f4:90:
c8:5e:32:48:c0:75:39:e7:43:5f:2f:bf:38:e0:36:
34:86:13:e1:ad:df:e9:ce:b5:1a:18:90:e8:20:f7:
6e:ab:99:c9:49:2f:26:2e:22:36:8c:7c:c6:82:20:
72:c2:9d:a2:83:3e:72:86:87:40:5f:ce:78:b2:be:
29:62:de:2f:00:c4:3f:ad:72:9a:78:1f:dc:b1:38:
75:34:32:21:f1:c9:7b:13:3b:6f:75:21:09:25:87:
28:50:5a:fc:3f:15:22:5d:09:09:dc:3a:6d:22:ec:
21:a1:31:47:02:56:0f:4c:1a:05:64:f6:10:f9:3b:
b8:c3:45:3d:9d:88:db:11:02:26:d2:4d:f0:32:db:
3b:a0:12:fb:0b:d4:53:3a:67:2b:ac:73:ec:dc:2f:
c3:c8:8b:5d:a1:67:11:46:b5:36:cd:d8:e0:77:eb:
f9:e2:f9:39:8e:bb:b2:cc:67:64:fc:c6:2c:83:59:
5b:07:8f:ac:93:4c:24:ef:7f:93:d5:2a:1f:d6:58:
53:f7:5f:7c:b2:3b:cd:1f:9b:8a:1d:96:97:11:96:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:00:2F:DA:6C:4B:2C:10:98:2E:5F:B9:C0:4E:6C:31:56:15:67:7E
X509v3 Authority Key Identifier:
keyid:AD:C2:D0:10:74:DD:ED:B5:87:41:22:F2:E1:B8:AC:3B:4E:DC:DB:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rcLQEHTd7bWHQSLy4bisO07c23s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DAE/27E93418033011EB8BEC8B0CC4F9AE02/rcLQEHTd7bWHQSLy4bisO07c23s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:9a:fc:cf:76:79:de:34:83:c3:4a:e0:08:12:d6:90:ca:28:
32:7d:34:9b:dc:65:ad:9d:de:7a:76:64:24:2c:f6:58:23:93:
be:25:b8:cf:76:58:44:90:aa:e9:0f:57:8b:29:95:0e:e3:7f:
45:d6:0a:ea:1a:e9:41:af:b6:da:94:40:af:6b:03:d4:20:78:
02:2f:d4:42:4a:8b:6c:bc:c7:58:f8:f4:10:9d:81:a8:4e:85:
6d:19:67:5c:fd:a9:91:c1:92:ef:05:e7:be:a8:0d:d7:9f:25:
2e:f3:2d:f9:88:78:90:06:ab:5b:06:ba:5a:38:63:00:ad:05:
c8:41:09:cf:0d:c9:c6:61:d6:7e:8b:31:52:89:51:e1:c9:18:
e8:1c:50:53:c4:b5:f2:b4:d9:b0:e3:60:3e:ff:05:4b:1e:02:
62:ec:b1:34:e8:01:00:17:fd:aa:4f:eb:fb:41:24:9d:ac:4d:
3d:96:27:1b:d4:87:a6:3e:ce:ea:2d:af:11:fb:05:8e:c9:71:
56:c3:5d:e7:b7:93:3c:2d:b6:c0:12:b2:a9:be:16:2a:f5:ee:
83:ab:e1:e7:ea:e8:24:82:70:39:d6:f3:af:1e:34:8f:83:b4:
a2:f9:80:d5:7f:ca:26:b5:4b:d3:e9:20:e0:4a:73:53:62:2b:
f7:2b:19:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTREQUUxMTAvBgNVBAUTKEFEQzJEMDEwNzREREVEQjU4NzQxMjJGMkUxQjhBQzNC
NEVEQ0RCN0IwHhcNMjUxMjI2MjAxODA3WhcNMjYwMTAyMjAxODA3WjAYMRYwFAYD
VQQDDA02OTRlZWQ4MC0wMzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApkivi0EsheDRKIyc7fCkFRdFwe7KrR6PuRkodBTVG40jeD66mDPc50CY9JDI
XjJIwHU550NfL7844DY0hhPhrd/pzrUaGJDoIPduq5nJSS8mLiI2jHzGgiBywp2i
gz5yhodAX854sr4pYt4vAMQ/rXKaeB/csTh1NDIh8cl7EztvdSEJJYcoUFr8PxUi
XQkJ3DptIuwhoTFHAlYPTBoFZPYQ+Tu4w0U9nYjbEQIm0k3wMts7oBL7C9RTOmcr
rHPs3C/DyItdoWcRRrU2zdjgd+v54vk5jruyzGdk/MYsg1lbB4+sk0wk73+T1Sof
1lhT9198sjvNH5uKHZaXEZYGmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAAL9ps
SywQmC5fucBObDFWFWd+MB8GA1UdIwQYMBaAFK3C0BB03e21h0Ei8uG4rDtO3Nt7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERBRS8yN0U5MzQxODAz
MzAxMUVCOEJFQzhCMENDNEY5QUUwMi9yY0xRRUhUZDdiV0hRU0x5NGJpc08wN2My
M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JjTFFFSFRkN2JXSFFTTHk0YmlzTzA3YzIzcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NERBRS8yN0U5MzQxODAzMzAxMUVCOEJFQzhCMENDNEY5QUUwMi9yY0xRRUhUZDdi
V0hRU0x5NGJpc08wN2MyM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAimvzPdnneNIPDSuAIEtaQyigyfTSb3GWtnd56dmQkLPZYI5O+JbjP
dlhEkKrpD1eLKZUO439F1grqGulBr7balECvawPUIHgCL9RCSotsvMdY+PQQnYGo
ToVtGWdc/amRwZLvBee+qA3XnyUu8y35iHiQBqtbBrpaOGMArQXIQQnPDcnGYdZ+
izFSiVHhyRjoHFBTxLXytNmw42A+/wVLHgJi7LE06AEAF/2qT+v7QSSdrE09licb
1IemPs7qLa8R+wWOyXFWw13nt5M8LbbAErKpvhYq9e6Dq+Hn6ugkgnA51vOvHjSP
g7Si+YDVf8omtUvT6SDgSnNTYiv3KxkP
-----END CERTIFICATE-----
Generated at Sat Dec 27 04:42:29 2025 by rpki-client