This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json)
Hash identifier: 9PF1wueIEOuxbxv1t+PtRh3RFw32w8N+2bBwLc/SAkg=
Subject key identifier: 55:D7:5B:23:C3:14:D8:A0:8E:59:D1:DF:ED:F4:21:49:78:26:EA:90
Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Certificate serial: 0885
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
Manifest number: 087A
Signing time: Thu 18 Dec 2025 20:07:39 +0000
Manifest this update: Thu 18 Dec 2025 20:07:39 +0000
Manifest next update: Thu 25 Dec 2025 20:07:39 +0000
Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: kokvtQDtvva3UsXblxC0QMt4YtZBb/y9N9dZgoUS8KQ=)
2: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: bmGPH4RhQZKxlLUmaYqMU+RwVlTsBX8WAQ+VbAJVD+E=)
3: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: +U5B9OE0qMYRoG1rt8ratJnPLrr7cjy6lf0aOQepvOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:07:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C
Validity
Not Before: Dec 18 20:07:39 2025 GMT
Not After : Dec 25 20:07:39 2025 GMT
Subject: CN=69445f0b-c54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:87:10:03:2f:02:27:38:bf:83:09:3d:e8:
e6:91:fc:9f:63:18:a7:26:70:b5:05:b1:bb:28:f7:
2d:ce:67:09:d9:ed:5e:d9:74:6e:9a:fb:f9:c1:2d:
f4:7d:58:4f:2f:7c:9b:79:0c:a2:2e:40:01:54:22:
be:e9:e2:27:7a:84:40:4b:0d:3e:c1:25:90:e7:e0:
eb:e2:93:e4:85:e5:17:70:58:01:11:9f:13:c3:ce:
83:51:c9:82:72:1a:3b:9f:8c:ff:3a:a1:65:0e:fe:
d7:a7:dc:ed:a9:b9:18:90:36:b5:bf:da:2e:5f:99:
04:ec:13:2e:d3:26:bd:48:cd:8d:e2:f2:85:f6:42:
45:9e:da:d0:0e:28:e3:a0:63:ce:bc:ed:8e:d6:ff:
2d:a1:8b:77:a0:5d:40:cf:68:c8:a5:af:a8:c0:cc:
df:cf:6e:09:d6:f3:c2:0a:39:67:04:17:3e:10:49:
ad:bc:f5:62:bf:63:79:bc:eb:a8:e9:cc:8f:09:ef:
e9:b8:df:e3:2b:28:5e:37:bf:e6:a0:66:33:ec:83:
ce:db:08:32:d6:12:28:67:0e:ba:78:0b:b8:07:5d:
e0:96:b0:5a:ab:2f:16:27:28:8a:8d:27:7e:a9:b8:
9a:4b:69:84:ac:16:5f:3a:1b:23:94:66:81:c6:4c:
a3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D7:5B:23:C3:14:D8:A0:8E:59:D1:DF:ED:F4:21:49:78:26:EA:90
X509v3 Authority Key Identifier:
keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:1e:3b:51:d4:e7:46:a1:5d:7b:ae:30:ca:95:88:6c:63:48:
28:9a:99:ba:e2:3c:ff:6c:16:25:6b:a4:d0:a2:7b:0c:cb:cd:
a6:27:df:89:e5:39:0a:fc:a3:5a:b8:3f:2f:07:a9:b2:23:60:
1e:0f:8c:91:9f:41:f3:1c:43:6e:70:03:ad:19:9e:ae:2f:9f:
2b:47:84:23:16:10:3b:37:f2:26:3f:ad:2e:94:a3:d6:fe:63:
7c:1f:89:98:66:cf:f9:f4:bf:31:b9:c9:14:30:9e:a5:79:b7:
2a:80:36:69:d8:6c:76:85:7f:12:2f:95:6f:11:e0:d7:ca:e9:
3c:93:7d:91:69:0f:ce:ee:4e:81:94:7f:59:4e:d7:ee:67:e5:
61:1d:d2:48:6d:ea:1a:97:d6:99:29:08:fd:e6:4c:17:0e:b8:
f7:3f:2c:05:07:1a:ea:bf:a8:d9:b8:96:c8:a6:9b:dc:74:0e:
d3:3e:f7:ca:8d:db:e2:d7:85:0a:8f:74:04:f6:0b:9c:98:6e:
e1:0a:7e:38:91:d8:49:84:73:f0:bc:e5:a3:49:e7:4b:d5:10:
53:d8:da:6b:47:c2:98:ec:f7:c6:dd:6f:77:0b:f4:08:71:bb:
83:99:29:11:c5:66:91:33:0e:90:a0:fe:72:cc:4b:80:0d:54:
4d:92:31:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0
NTJGRjQ0MUMwHhcNMjUxMjE4MjAwNzM5WhcNMjUxMjI1MjAwNzM5WjAYMRYwFAYD
VQQDDA02OTQ0NWYwYi1jNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq7mHEAMvAic4v4MJPejmkfyfYxinJnC1BbG7KPctzmcJ2e1e2XRumvv5wS30
fVhPL3ybeQyiLkABVCK+6eIneoRASw0+wSWQ5+Dr4pPkheUXcFgBEZ8Tw86DUcmC
cho7n4z/OqFlDv7Xp9ztqbkYkDa1v9ouX5kE7BMu0ya9SM2N4vKF9kJFntrQDijj
oGPOvO2O1v8toYt3oF1Az2jIpa+owMzfz24J1vPCCjlnBBc+EEmtvPViv2N5vOuo
6cyPCe/puN/jKyheN7/moGYz7IPO2wgy1hIoZw66eAu4B13glrBaqy8WJyiKjSd+
qbiaS2mErBZfOhsjlGaBxkyjmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFXXWyPD
FNigjlnR3+30IUl4JuqQMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC
REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS
M1FUeDFFZHVOWlZGTF9SQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC8HjtR1OdGoV17rjDKlYhsY0gompm64jz/bBYla6TQonsMy82mJ9+J
5TkK/KNauD8vB6myI2AeD4yRn0HzHENucAOtGZ6uL58rR4QjFhA7N/ImP60ulKPW
/mN8H4mYZs/59L8xuckUMJ6lebcqgDZp2Gx2hX8SL5VvEeDXyuk8k32RaQ/O7k6B
lH9ZTtfuZ+VhHdJIbeoal9aZKQj95kwXDrj3PywFBxrqv6jZuJbIppvcdA7TPvfK
jdvi14UKj3QE9gucmG7hCn44kdhJhHPwvOWjSedL1RBT2NprR8KY7PfG3W93C/QI
cbuDmSkRxWaRMw6QoP5yzEuADVRNkjG+
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:40 2025 by rpki-client