This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
File: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft (raw, json)
Hash identifier: 83vKNxASq00HqLiqKkVBzbC97/7o1Jw8F5V+jPtRkJ8=
Subject key identifier: C7:A1:A0:1A:A7:CF:36:2E:44:91:ED:E9:D8:8E:28:96:0F:21:93:67
Authority key identifier: C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
Certificate issuer: /CN=A91243FE/serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7
Certificate serial: 0414
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
Manifest number: 0410
Signing time: Thu 18 Dec 2025 23:42:37 +0000
Manifest this update: Thu 18 Dec 2025 23:42:37 +0000
Manifest next update: Thu 25 Dec 2025 23:42:37 +0000
Files and hashes: 1: xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl (hash: fnOVMrpzudj/vcCO14c997bc+KMBDN2t71DMrOF4JM0=)
2: 5ADF4C92956811EC9028F155C4F9AE02.roa (hash: 6C9pOBCK4sWDlaS78t/pprsEcl/8A0s9Wlk6KVMoAhE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl
rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91243FE, serialNumber=C70BF3DFF45023D41AF4C4DF5D765040B9241AC7
Validity
Not Before: Dec 18 23:42:37 2025 GMT
Not After : Dec 25 23:42:37 2025 GMT
Subject: CN=6944916d-e282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:cf:82:2b:63:fb:ec:de:9e:8c:0b:9c:b0:
1f:60:05:22:df:75:90:be:09:8c:db:2e:cc:04:87:
9c:2d:c5:5a:e5:26:87:f8:b5:55:88:b9:45:c9:b9:
8c:e9:5a:27:54:b2:67:ab:31:77:7e:fe:3c:d5:f2:
4a:2d:4a:76:bf:44:9e:a3:d9:cf:05:27:9e:01:b6:
dc:76:eb:06:77:38:68:5f:9f:02:60:cd:b9:6b:ec:
f3:2c:6e:32:13:78:ce:7f:77:41:e4:20:f6:85:3f:
c4:1e:af:6b:6c:d3:cc:f2:eb:76:18:b8:13:c9:89:
46:fe:3b:cd:62:37:b6:7e:90:8b:2e:49:26:75:b8:
61:0b:f4:b9:bf:8d:19:30:c0:2c:3c:51:48:f4:87:
56:b6:01:56:b2:c1:04:fd:e6:c7:ac:8c:04:08:b1:
9d:c7:ff:08:dd:64:47:db:39:59:99:53:7d:f9:eb:
67:90:c7:73:46:fe:95:55:9b:5b:d6:88:00:0b:ef:
ef:5a:9d:a2:56:53:ba:d5:0a:0e:e0:8e:9f:b7:0d:
c1:ec:60:e3:97:45:33:3b:f7:b1:a0:68:89:ee:4e:
8e:69:1c:99:a9:36:7a:74:e6:97:3f:63:40:6f:8e:
97:78:7f:8b:08:88:05:cb:cd:86:b2:97:1f:b1:b1:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A1:A0:1A:A7:CF:36:2E:44:91:ED:E9:D8:8E:28:96:0F:21:93:67
X509v3 Authority Key Identifier:
keyid:C7:0B:F3:DF:F4:50:23:D4:1A:F4:C4:DF:5D:76:50:40:B9:24:1A:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91243FE/98148062956511EC9183BE53C4F9AE02/xwvz3_RQI9Qa9MTfXXZQQLkkGsc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:56:ac:a0:c8:eb:62:6c:6b:b7:48:24:98:69:0f:d0:c7:a5:
e1:75:a0:8d:9b:26:34:8a:38:55:56:54:cf:d8:8f:93:64:41:
eb:c3:72:f2:4e:a4:f9:da:a4:07:a9:ed:b7:3f:4b:f8:ea:89:
46:23:56:0d:42:8e:27:b8:6a:99:03:68:30:62:6c:1b:df:53:
2b:89:95:ea:18:f4:b7:19:d2:b3:b1:1c:c2:1e:ad:d5:f5:db:
ba:79:8d:61:14:ab:97:47:db:5a:de:fe:0e:ad:e0:59:b9:48:
ef:40:5f:20:75:21:4c:ee:05:8a:23:a0:f4:de:b8:46:df:4d:
aa:7d:41:38:fb:10:b5:e6:b5:bd:40:26:4e:85:f7:b6:13:4c:
ce:d8:2e:3a:e9:40:c9:13:05:a6:a5:01:8c:d7:ca:df:d8:34:
12:b4:3b:dc:f6:1e:b6:ee:96:2d:42:58:a8:04:1f:b2:c8:66:
f5:f0:74:f2:fb:77:66:e3:de:f1:51:4e:26:c5:df:82:7b:b0:
87:3f:54:eb:85:02:da:47:b2:20:76:ce:f8:3b:37:0e:6b:f7:
59:cb:d4:1b:a7:ff:6f:91:d7:ff:e2:a5:4b:3c:21:91:de:69:
4c:59:f2:d8:aa:d7:f4:69:87:a6:47:48:2d:0f:ec:a3:dc:4c:
fb:08:ce:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQzRkUxMTAvBgNVBAUTKEM3MEJGM0RGRjQ1MDIzRDQxQUY0QzRERjVENzY1MDQw
QjkyNDFBQzcwHhcNMjUxMjE4MjM0MjM3WhcNMjUxMjI1MjM0MjM3WjAYMRYwFAYD
VQQDDA02OTQ0OTE2ZC1lMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwB/Pgitj++zenowLnLAfYAUi33WQvgmM2y7MBIecLcVa5SaH+LVViLlFybmM
6VonVLJnqzF3fv481fJKLUp2v0Seo9nPBSeeAbbcdusGdzhoX58CYM25a+zzLG4y
E3jOf3dB5CD2hT/EHq9rbNPM8ut2GLgTyYlG/jvNYje2fpCLLkkmdbhhC/S5v40Z
MMAsPFFI9IdWtgFWssEE/ebHrIwECLGdx/8I3WRH2zlZmVN9+etnkMdzRv6VVZtb
1ogAC+/vWp2iVlO61QoO4I6ftw3B7GDjl0UzO/exoGiJ7k6OaRyZqTZ6dOaXP2NA
b46XeH+LCIgFy82GspcfsbGj5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMehoBqn
zzYuRJHt6diOKJYPIZNnMB8GA1UdIwQYMBaAFMcL89/0UCPUGvTE3112UEC5JBrH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDNGRS85ODE0ODA2Mjk1
NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5UWE5TVRmWFhaUVFMa2tH
c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h3dnozX1JRSTlRYTlNVGZYWFpRUUxra0dzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDNGRS85ODE0ODA2Mjk1NjUxMUVDOTE4M0JFNTNDNEY5QUUwMi94d3Z6M19SUUk5
UWE5TVRmWFhaUVFMa2tHc2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCxVqygyOtibGu3SCSYaQ/Qx6XhdaCNmyY0ijhVVlTP2I+TZEHrw3Ly
TqT52qQHqe23P0v46olGI1YNQo4nuGqZA2gwYmwb31MriZXqGPS3GdKzsRzCHq3V
9du6eY1hFKuXR9ta3v4OreBZuUjvQF8gdSFM7gWKI6D03rhG302qfUE4+xC15rW9
QCZOhfe2E0zO2C466UDJEwWmpQGM18rf2DQStDvc9h627pYtQlioBB+yyGb18HTy
+3dm497xUU4mxd+Ce7CHP1TrhQLaR7Igds74OzcOa/dZy9Qbp/9vkdf/4qVLPCGR
3mlMWfLYqtf0aYemR0gtD+yj3Ez7CM4D
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:46 2025 by rpki-client