This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
File: 2DvcT6zNnbegvEa0JE6jEHBgS5c.mft (raw, json)
Hash identifier: U/rElNHThI8sGTU3dHwkh1La+NjcExM/VTGFW0c9Csk=
Subject key identifier: D8:63:44:B5:36:63:E6:3B:BE:59:4B:79:E3:34:1D:91:2E:1B:D7:13
Authority key identifier: D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97
Certificate issuer: /CN=A914F870/serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
Manifest number: AA
Signing time: Fri 19 Dec 2025 05:17:34 +0000
Manifest this update: Fri 19 Dec 2025 05:17:33 +0000
Manifest next update: Fri 26 Dec 2025 05:17:33 +0000
Files and hashes: 1: 2DvcT6zNnbegvEa0JE6jEHBgS5c.crl (hash: ls1KAEo47yDq9VS7dHcRu2oHW7WRRckMv2ilzFRpjsQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl
rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F870, serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97
Validity
Not Before: Dec 19 05:17:33 2025 GMT
Not After : Dec 26 05:17:33 2025 GMT
Subject: CN=6944dfee-3648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:5d:d0:fe:e9:b5:4b:14:5f:ee:90:52:c9:
16:92:7c:8c:40:2f:70:f8:de:26:9b:a1:7e:ff:9c:
05:91:52:11:e0:c0:32:7d:00:46:50:6d:8b:78:ed:
6e:f3:d3:01:64:ee:b7:26:c1:49:55:31:82:a2:dd:
a1:2d:33:42:31:1a:75:a9:c6:41:56:69:51:b9:e5:
3f:ec:e5:0d:d3:35:39:87:56:6c:41:67:a2:4f:69:
1e:41:98:de:95:7d:2b:71:71:eb:d9:78:2d:c6:93:
4c:74:5e:c1:1b:bb:8f:b1:4f:0a:e8:d8:b8:c3:00:
43:63:13:72:c2:55:82:50:82:56:41:18:47:5d:63:
e8:da:53:72:10:4d:8a:df:85:3e:73:c3:60:42:c5:
a3:38:5f:e1:94:eb:66:4a:93:22:48:bc:03:ab:c2:
5f:10:7f:f7:dc:9b:2f:f4:1e:69:ce:c8:80:01:45:
29:88:c5:a7:1b:50:f1:63:e0:c0:ab:86:08:91:a5:
e0:5e:90:5b:6e:7f:d0:40:62:07:ae:93:0d:0b:36:
8c:70:33:fb:b0:db:bb:dd:36:b6:da:5f:7b:f7:62:
93:15:63:f1:dd:29:43:10:d0:bf:77:9c:98:60:9a:
7f:9f:32:b5:20:dd:a7:6b:ed:20:4a:49:be:11:bb:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:63:44:B5:36:63:E6:3B:BE:59:4B:79:E3:34:1D:91:2E:1B:D7:13
X509v3 Authority Key Identifier:
keyid:D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:65:6c:82:b4:a3:ef:c1:37:12:fe:ff:d2:db:e5:6e:69:46:
f0:d5:76:b3:4d:ce:5e:d6:84:61:aa:26:e9:64:1a:4e:fa:87:
b4:2c:aa:65:e4:b5:d2:79:4a:ad:20:1c:4d:74:10:f9:11:6c:
f9:bd:7b:c6:ae:9b:fd:75:c7:ba:ba:f9:74:85:61:d4:1a:95:
7d:84:b3:77:92:4a:f0:18:bb:3f:2a:82:25:ae:8e:bd:ac:76:
be:5b:05:ba:a9:eb:73:9a:21:61:49:e0:81:5a:86:7b:9f:44:
4b:e4:47:79:ac:4f:27:49:32:04:ba:f2:58:e5:0e:e8:3a:e2:
fb:ad:77:d7:b6:c4:fa:5d:56:54:d5:dd:3e:51:0a:33:b8:98:
4a:87:95:72:54:37:9f:8a:38:18:de:3d:de:7c:5b:a2:9a:7e:
32:e8:41:4a:bb:d6:2c:73:80:f8:47:7a:17:37:b5:ed:ff:7f:
43:fd:70:1d:f7:55:32:ef:4b:42:b2:5c:24:2b:ec:dd:14:df:
03:f6:f7:1a:60:a3:39:f1:79:5e:73:d1:0d:a7:72:a7:ae:08:
5c:46:36:01:f4:d1:be:e5:8a:67:39:64:81:d6:62:a5:64:c4:
93:28:53:9a:1d:f0:63:58:02:ff:56:8b:b9:2d:53:ea:15:5d:
56:6b:4d:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY4NzAxMTAvBgNVBAUTKEQ4M0JEQzRGQUNDRDlEQjdBMEJDNDZCNDI0NEVBMzEw
NzA2MDRCOTcwHhcNMjUxMjE5MDUxNzMzWhcNMjUxMjI2MDUxNzMzWjAYMRYwFAYD
VQQDDA02OTQ0ZGZlZS0zNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn59d0P7ptUsUX+6QUskWknyMQC9w+N4mm6F+/5wFkVIR4MAyfQBGUG2LeO1u
89MBZO63JsFJVTGCot2hLTNCMRp1qcZBVmlRueU/7OUN0zU5h1ZsQWeiT2keQZje
lX0rcXHr2XgtxpNMdF7BG7uPsU8K6Ni4wwBDYxNywlWCUIJWQRhHXWPo2lNyEE2K
34U+c8NgQsWjOF/hlOtmSpMiSLwDq8JfEH/33Jsv9B5pzsiAAUUpiMWnG1DxY+DA
q4YIkaXgXpBbbn/QQGIHrpMNCzaMcDP7sNu73Ta22l9792KTFWPx3SlDENC/d5yY
YJp/nzK1IN2na+0gSkm+EbsQWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhjRLU2
Y+Y7vllLeeM0HZEuG9cTMB8GA1UdIwQYMBaAFNg73E+szZ23oLxGtCROoxBwYEuX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Rjg3MC9EMkUyNEM5OEQ3
RTIxMUVGQUYwQjNCN0RDNEY5QUUwMi8yRHZjVDZ6Tm5iZWd2RWEwSkU2akVIQmdT
NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJEdmNUNnpObmJlZ3ZFYTBKRTZqRUhCZ1M1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Rjg3MC9EMkUyNEM5OEQ3RTIxMUVGQUYwQjNCN0RDNEY5QUUwMi8yRHZjVDZ6Tm5i
ZWd2RWEwSkU2akVIQmdTNWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMZWyCtKPvwTcS/v/S2+VuaUbw1XazTc5e1oRhqibpZBpO+oe0LKpl
5LXSeUqtIBxNdBD5EWz5vXvGrpv9dce6uvl0hWHUGpV9hLN3kkrwGLs/KoIlro69
rHa+WwW6qetzmiFhSeCBWoZ7n0RL5Ed5rE8nSTIEuvJY5Q7oOuL7rXfXtsT6XVZU
1d0+UQozuJhKh5VyVDefijgY3j3efFuimn4y6EFKu9Ysc4D4R3oXN7Xt/39D/XAd
91Uy70tCslwkK+zdFN8D9vcaYKM58Xlec9ENp3KnrghcRjYB9NG+5YpnOWSB1mKl
ZMSTKFOaHfBjWAL/Vou5LVPqFV1Wa00Y
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:19 2025 by rpki-client