This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
File: P7ClbiDxlMd0mHnU0iWz-X6evs8.mft (raw, json)
Hash identifier: 0hpXmOJBSDEMxOowoPphgAiKbh8V3nSZhgMxYN0rJiI=
Subject key identifier: A8:C3:98:96:34:8C:B5:61:CD:14:DA:A4:51:8B:93:7E:45:F9:23:8B
Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Certificate issuer: /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Certificate serial: 081B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
Manifest number: 07E3
Signing time: Sat 20 Dec 2025 20:51:15 +0000
Manifest this update: Sat 20 Dec 2025 20:51:15 +0000
Manifest next update: Sat 27 Dec 2025 20:51:15 +0000
Files and hashes: 1: P7ClbiDxlMd0mHnU0iWz-X6evs8.crl (hash: NvAI82Ea0FL6fPd+xm42514kAy7bPSf1uVoZIyhJuIQ=)
2: 4792C69CCB5011F08BC97C80C4F9AE02.roa (hash: ZpwyPiCXkjRXO4ZSTXQ+QaUgc/jpAAvEAS4GzmeP7h8=)
3: 5EB91EB40F9611F0A2F2830DC4F9AE02.roa (hash: tLiTzUDyKzyyz6n9FViLxVBECTwcq4mKzuqGNpHQJM4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 20:51:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2075 (0x81b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Validity
Not Before: Dec 20 20:51:15 2025 GMT
Not After : Dec 27 20:51:15 2025 GMT
Subject: CN=69470c43-6651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:f3:3d:f7:01:1a:ac:99:f1:32:e1:b9:a3:
44:aa:76:8b:92:b9:cd:ec:ad:f7:f9:ac:94:02:66:
4e:b2:2a:54:2a:a2:69:8e:70:f1:12:5a:c9:88:94:
66:93:29:82:8a:bb:e5:d5:48:31:89:1a:1a:da:4d:
9a:4d:0c:ed:e8:95:a2:8b:3a:88:2d:fb:02:62:05:
09:33:11:15:87:00:5d:8a:8d:a1:13:b4:60:2d:37:
d4:e1:3c:dc:bd:33:ec:0b:47:8a:d5:82:bc:1c:87:
8b:60:3a:b9:ba:55:1f:f0:a3:04:d2:fd:bf:3e:2a:
39:03:31:e4:b5:45:5d:f5:b0:f6:f0:0c:a4:2c:78:
c5:8c:99:39:8c:67:19:c0:b8:71:83:4e:ad:a5:ac:
74:84:8c:da:40:23:49:53:2a:dd:1c:f4:04:79:0a:
8d:50:c2:27:80:13:94:57:de:83:42:b0:99:93:03:
5b:1d:d7:e7:5f:e6:9f:90:4f:0d:fa:ae:d0:ab:a7:
9a:7e:f8:0c:79:f8:46:24:5b:e1:ae:1a:aa:a8:f5:
89:8d:fd:17:22:d5:f1:fc:f4:2b:d8:6a:db:ae:55:
84:09:2b:12:fe:22:25:45:ed:6b:a0:3f:d2:20:49:
40:f0:a5:c1:18:7a:ed:bc:32:48:da:0d:7d:65:dd:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C3:98:96:34:8C:B5:61:CD:14:DA:A4:51:8B:93:7E:45:F9:23:8B
X509v3 Authority Key Identifier:
keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:9b:b2:a8:59:1b:fe:7f:40:90:fb:64:06:86:40:3a:24:14:
0f:e8:89:27:e2:74:56:71:5e:c1:4f:82:66:b5:7f:ef:c5:57:
35:a8:e2:1e:9c:b4:2b:cb:e4:f0:f6:00:9e:1f:69:be:d5:c5:
1b:01:6d:fc:d2:d7:13:b1:cc:48:37:04:b5:04:9f:0f:f5:ea:
b0:75:96:51:c3:de:44:6f:60:93:aa:ef:97:61:b2:98:52:7a:
35:fb:4b:5a:d0:3c:49:03:14:64:d1:d3:78:af:9d:c0:9b:8a:
2f:37:83:95:1c:46:3d:9f:f7:94:f4:04:7b:ac:de:53:13:55:
64:3c:c7:dc:de:3f:d6:3a:f5:bc:2c:3e:11:ef:0f:d7:d4:20:
ba:c9:c3:ea:44:4e:4c:ea:15:46:22:d9:b2:60:7e:2c:7b:db:
c0:c8:73:4b:cc:48:ec:06:c5:18:53:fc:85:6a:34:16:fb:69:
d6:e9:a3:8e:5c:62:dc:5a:da:90:48:14:25:7e:9d:98:d0:9f:
66:3b:9d:0d:b6:07:f4:08:8a:4c:1f:cd:1d:35:75:5e:66:e6:
6b:6a:f1:62:cd:06:24:b0:d3:fe:79:87:45:e7:98:ae:ec:97:
4b:c5:34:c0:52:e9:16:03:95:26:de:37:6b:34:31:23:ad:77:
d5:de:6c:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU0NTYxMTAvBgNVBAUTKDNGQjBBNTZFMjBGMTk0Qzc3NDk4NzlENEQyMjVCM0Y5
N0U5RUJFQ0YwHhcNMjUxMjIwMjA1MTE1WhcNMjUxMjI3MjA1MTE1WjAYMRYwFAYD
VQQDDA02OTQ3MGM0My02NjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2h/zPfcBGqyZ8TLhuaNEqnaLkrnN7K33+ayUAmZOsipUKqJpjnDxElrJiJRm
kymCirvl1UgxiRoa2k2aTQzt6JWiizqILfsCYgUJMxEVhwBdio2hE7RgLTfU4Tzc
vTPsC0eK1YK8HIeLYDq5ulUf8KME0v2/Pio5AzHktUVd9bD28AykLHjFjJk5jGcZ
wLhxg06tpax0hIzaQCNJUyrdHPQEeQqNUMIngBOUV96DQrCZkwNbHdfnX+afkE8N
+q7Qq6eafvgMefhGJFvhrhqqqPWJjf0XItXx/PQr2GrbrlWECSsS/iIlRe1roD/S
IElA8KXBGHrtvDJI2g19Zd0SEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjDmJY0
jLVhzRTapFGLk35F+SOLMB8GA1UdIwQYMBaAFD+wpW4g8ZTHdJh51NIls/l+nr7P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ1Ni83NzE5QzcxMDMw
NjYxMUVCODUyNTEzNTVDNEY5QUUwMi9QN0NsYmlEeGxNZDBtSG5VMGlXei1YNmV2
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1A3Q2xiaUR4bE1kMG1IblUwaVd6LVg2ZXZzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTQ1Ni83NzE5QzcxMDMwNjYxMUVCODUyNTEzNTVDNEY5QUUwMi9QN0NsYmlEeGxN
ZDBtSG5VMGlXei1YNmV2czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5m7KoWRv+f0CQ+2QGhkA6JBQP6Ikn4nRWcV7BT4JmtX/vxVc1qOIe
nLQry+Tw9gCeH2m+1cUbAW380tcTscxINwS1BJ8P9eqwdZZRw95Eb2CTqu+XYbKY
Uno1+0ta0DxJAxRk0dN4r53Am4ovN4OVHEY9n/eU9AR7rN5TE1VkPMfc3j/WOvW8
LD4R7w/X1CC6ycPqRE5M6hVGItmyYH4se9vAyHNLzEjsBsUYU/yFajQW+2nW6aOO
XGLcWtqQSBQlfp2Y0J9mO50Ntgf0CIpMH80dNXVeZuZravFizQYksNP+eYdF55iu
7JdLxTTAUukWA5Um3jdrNDEjrXfV3mw9
-----END CERTIFICATE-----
Generated at Sun Dec 21 10:04:50 2025 by rpki-client