This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
File: PPkWCCJoGcPp2oTRGVtTJvkkn70.mft (raw, json)
Hash identifier: o9n1emW3SYb73Bwk+HQnh4FCA25a4kYM4a3u9hJW8ws=
Subject key identifier: A6:1D:C6:CC:6C:9C:05:35:B9:CF:9A:04:DA:C8:97:C7:74:C6:E2:CF
Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Certificate serial: 0325
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
Manifest number: 030B
Signing time: Sun 21 Dec 2025 00:27:31 +0000
Manifest this update: Sun 21 Dec 2025 00:27:30 +0000
Manifest next update: Sun 28 Dec 2025 00:27:30 +0000
Files and hashes: 1: PPkWCCJoGcPp2oTRGVtTJvkkn70.crl (hash: FL4TmNXe/yH7RwhocI5V785l5Ha+Uc+IHWn7QBqKFFw=)
2: 76494F6E146111ED83A8FB50C4F9AE02.roa (hash: qyVadK6PowhxT5dTxZ86nSTovFJ2RAqG5nfVtu7+2Bg=)
3: 873C98E0DE5911ED826BDB39C4F9AE02.roa (hash: 499SL3b2qo6tqtvUtTvrd1ycmIPTXzG0Kk7YhvDP3Mk=)
4: E8343A14280A11ED80EB7F2FC4F9AE02.roa (hash: HdD/+ld1Uf50ShMo2E2ANBSVseJYDOqUpaCHNPJZLUs=)
5: 807EEE68281011ED9C81C50DC4F9AE02.roa (hash: jD7jiIEoA0zrb6YHgdu7nodN7r96+edv/r/epjKwp04=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 00:27:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 805 (0x325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155AE4, serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD
Validity
Not Before: Dec 21 00:27:30 2025 GMT
Not After : Dec 28 00:27:30 2025 GMT
Subject: CN=69473ef2-5720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:13:ee:c5:98:78:48:09:1a:c3:2c:99:ac:31:
cb:97:c9:9f:94:ec:1a:27:27:cd:fa:19:33:95:b7:
21:ad:f4:02:b9:09:dc:91:ea:76:6c:ed:5e:a5:bf:
59:27:fd:47:ba:b4:71:d2:04:e5:49:1e:55:a6:72:
9c:8e:23:36:12:0f:5a:f8:08:82:3c:a1:c7:66:9f:
a7:7f:c2:49:20:d6:5e:65:eb:5e:df:81:19:f0:11:
3b:bd:66:26:56:c2:d4:c5:c4:99:ff:f2:47:d2:f0:
98:51:d4:d9:aa:1b:46:ec:3e:7b:d9:1c:bb:c8:cf:
ae:bc:81:48:1a:e1:46:e7:03:af:3e:b0:f2:66:8d:
2a:12:9a:3d:f5:fe:ed:ff:0f:26:85:85:39:c6:6c:
64:8e:b0:25:2e:7f:89:e1:e5:1a:99:f6:86:34:de:
08:b3:43:d7:a4:4a:bc:0f:9f:67:fa:c0:b5:a3:39:
34:3b:bf:63:91:af:73:9b:17:7a:8f:5b:a2:c2:09:
48:c7:43:5f:ce:72:ee:10:82:79:17:9a:30:8a:81:
30:7a:c6:5e:94:1c:1a:a2:32:8d:1b:6a:25:9e:29:
65:78:f6:89:3b:0e:c3:05:37:13:e3:6b:e7:91:14:
ef:b8:09:bf:27:40:8f:ed:a4:9a:3f:c1:48:e0:14:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1D:C6:CC:6C:9C:05:35:B9:CF:9A:04:DA:C8:97:C7:74:C6:E2:CF
X509v3 Authority Key Identifier:
keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:13:59:db:df:a5:cd:51:10:31:97:35:88:89:52:b5:c3:d8:
19:49:aa:87:92:53:8e:2e:f2:71:37:bd:74:7d:a2:10:b0:fc:
6c:c6:87:4d:cb:ab:99:97:16:f1:46:00:1b:ed:f7:6d:57:5e:
48:6d:02:6c:95:3f:e5:ca:37:85:13:4c:fb:c8:e8:6f:c3:6e:
57:32:c1:be:fc:ca:78:84:03:86:18:b7:1a:59:9f:b9:71:f4:
24:25:a2:7f:83:3f:f9:e4:4a:24:a1:e4:a2:f1:a4:e0:7c:22:
0c:b0:ce:dd:d8:57:5c:ff:71:fb:09:64:0c:cf:6c:dc:f0:a9:
9b:fe:4d:eb:0e:c7:9d:e6:15:55:5f:8c:96:d1:13:5e:75:d0:
ee:82:f1:ac:ba:4d:43:a7:ab:00:ec:7d:0c:51:8c:08:a2:d7:
7c:f1:2b:dc:ec:37:2d:db:4e:6e:a4:70:86:3c:58:6d:09:e1:
8d:5d:75:5c:32:81:cc:0a:99:f1:51:12:e2:7d:e4:7c:43:ba:
f3:c7:54:39:20:f3:b2:52:d6:4e:3f:7e:cb:50:40:73:49:ae:
98:59:e5:68:24:c4:a1:76:76:6c:59:75:04:23:d0:68:9e:18:
73:fb:73:ad:10:11:36:49:c3:71:5e:ef:32:62:87:13:74:c2:
47:81:d8:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODREMTE5NUI1MzI2
RjkyNDlGQkQwHhcNMjUxMjIxMDAyNzMwWhcNMjUxMjI4MDAyNzMwWjAYMRYwFAYD
VQQDDA02OTQ3M2VmMi01NzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBPuxZh4SAkawyyZrDHLl8mflOwaJyfN+hkzlbchrfQCuQnckep2bO1epb9Z
J/1HurRx0gTlSR5VpnKcjiM2Eg9a+AiCPKHHZp+nf8JJINZeZete34EZ8BE7vWYm
VsLUxcSZ//JH0vCYUdTZqhtG7D572Ry7yM+uvIFIGuFG5wOvPrDyZo0qEpo99f7t
/w8mhYU5xmxkjrAlLn+J4eUamfaGNN4Is0PXpEq8D59n+sC1ozk0O79jka9zmxd6
j1uiwglIx0NfznLuEIJ5F5owioEwesZelBwaojKNG2olnillePaJOw7DBTcT42vn
kRTvuAm/J0CP7aSaP8FI4BT0bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYdxsxs
nAU1uc+aBNrIl8d0xuLPMB8GA1UdIwQYMBaAFDz5FggiaBnD6dqE0RlbUyb5JJ+9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9FNUQ2RDBBQzA2
NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0djUHAyb1RSR1Z0VEp2a2tu
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BQa1dDQ0pvR2NQcDJvVFJHVnRUSnZra243MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NUFFNC9FNUQ2RDBBQzA2NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0dj
UHAyb1RSR1Z0VEp2a2tuNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATE1nb36XNURAxlzWIiVK1w9gZSaqHklOOLvJxN710faIQsPxsxodN
y6uZlxbxRgAb7fdtV15IbQJslT/lyjeFE0z7yOhvw25XMsG+/Mp4hAOGGLcaWZ+5
cfQkJaJ/gz/55EokoeSi8aTgfCIMsM7d2Fdc/3H7CWQMz2zc8Kmb/k3rDsed5hVV
X4yW0RNeddDugvGsuk1Dp6sA7H0MUYwIotd88Svc7Dct205upHCGPFhtCeGNXXVc
MoHMCpnxURLifeR8Q7rzx1Q5IPOyUtZOP37LUEBzSa6YWeVoJMShdnZsWXUEI9Bo
nhhz+3OtEBE2ScNxXu8yYocTdMJHgdiH
-----END CERTIFICATE-----
Generated at Sun Dec 21 08:18:24 2025 by rpki-client