This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
File: e-IwFTz_kAFkLbybJPhdDMKCNk4.mft (raw, json)
Hash identifier: 3Z2JDqcjhwWK7DZSEE/L2337rYulfou7w25KTpc+Rc8=
Subject key identifier: 5E:06:F7:B0:03:1D:D4:47:D0:90:CD:60:C2:18:2D:AC:B0:17:35:53
Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
Certificate issuer: /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Certificate serial: 019A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
Manifest number: 018C
Signing time: Sun 21 Dec 2025 02:54:05 +0000
Manifest this update: Sun 21 Dec 2025 02:54:05 +0000
Manifest next update: Sun 28 Dec 2025 02:54:05 +0000
Files and hashes: 1: e-IwFTz_kAFkLbybJPhdDMKCNk4.crl (hash: HGgpuXxsSc/9aUc+lUhV2KbAeLb6Y+OrkQYn6Eb+4aU=)
2: 9D3EBEF4921111EE9AD1150CC4F9AE02.roa (hash: H7JonSUtz6tgIVuXpEGUpFZ7fUQBIkEHbO/Cd9DHtNo=)
3: C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (hash: j/6dClTGKIF6Y0W3OQ8vmv5qC35aQkMZjQK9N8GGPFU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 02:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 410 (0x19a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Validity
Not Before: Dec 21 02:54:05 2025 GMT
Not After : Dec 28 02:54:05 2025 GMT
Subject: CN=6947614d-f63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:76:2e:b1:ac:b1:10:bf:9b:7a:49:50:03:
6d:65:32:79:73:13:0f:76:47:f0:f8:74:00:7f:5a:
45:7e:bf:a6:ac:99:9d:49:7d:70:7d:03:88:46:e5:
f7:ee:d4:dc:84:62:f5:6e:3f:88:43:95:9e:c6:6a:
51:84:d2:c5:cb:47:3a:7b:8d:d8:23:3a:63:c9:d1:
e9:5c:9b:1c:16:09:29:b3:cd:5a:cc:59:13:fb:c4:
a0:c3:76:60:c7:da:27:59:a7:f6:2c:65:9a:de:f8:
d0:90:da:7c:86:a3:2b:e9:fa:1b:68:c4:9e:e9:c3:
23:10:8f:46:77:08:7d:82:c8:69:0f:6c:3f:46:1d:
38:dc:73:65:5a:8d:45:f9:d7:2a:8f:14:73:67:3d:
77:0e:06:58:08:4b:c1:b6:e8:60:b8:7b:70:b6:f2:
63:b1:31:1a:bb:8d:c3:d8:0d:49:54:15:aa:87:91:
c4:61:ef:32:2b:36:7f:45:29:dc:6e:f5:2a:a3:4f:
c0:a4:56:c1:25:12:48:91:c7:11:fd:24:c8:d4:58:
35:b9:98:08:6c:e6:5b:a2:19:fc:37:5a:92:4f:28:
3a:91:be:fb:22:a2:a5:ca:39:b2:bd:54:bb:c9:aa:
98:8e:21:69:41:66:b4:75:0e:12:2e:60:3d:1f:e4:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:06:F7:B0:03:1D:D4:47:D0:90:CD:60:C2:18:2D:AC:B0:17:35:53
X509v3 Authority Key Identifier:
keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:ee:e3:f7:c1:50:8b:27:b9:e7:a9:48:75:62:05:f4:10:98:
80:37:0d:f7:67:b4:d6:63:c1:75:f0:6e:ec:f4:63:60:65:6b:
b0:d7:74:17:16:06:77:d2:08:bf:43:ff:a2:6d:42:e8:d6:ca:
22:10:1d:fd:72:97:16:70:1f:ac:2e:4f:da:2d:22:b6:22:25:
2e:64:c9:34:c6:b2:10:69:a9:87:d8:51:3f:71:90:90:7a:e3:
e8:39:25:bb:6a:d0:a4:ad:85:a7:9c:7a:aa:87:85:bf:33:61:
2d:91:69:ed:8d:ac:98:8d:ad:cc:35:ab:95:15:1f:47:a4:25:
c4:bd:a9:f3:7b:0f:28:4a:ac:22:02:d2:11:a3:1b:e2:92:fa:
e5:8b:02:31:5f:db:18:83:ea:b1:5f:b4:16:2e:d4:cc:72:ca:
04:79:c2:72:d6:53:59:ec:16:65:d8:82:2a:6a:02:44:2d:bd:
d9:b8:88:f3:1c:d6:f0:22:ba:81:43:ce:1d:37:4a:53:4c:59:
c4:a2:20:0b:8a:c4:4a:58:c4:6d:45:91:b1:74:db:1e:07:57:
c6:db:60:d2:7c:5b:06:1e:c0:e9:4c:c6:a8:09:f1:4e:96:9e:
97:56:b5:e3:e4:43:25:af:3e:96:fe:af:ad:b5:46:f8:40:c4:
22:39:2c:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjI1REIxMTAvBgNVBAUTKDdCRTIzMDE1M0NGRjkwMDE2NDJEQkM5QjI0Rjg1RDBD
QzI4MjM2NEUwHhcNMjUxMjIxMDI1NDA1WhcNMjUxMjI4MDI1NDA1WjAYMRYwFAYD
VQQDDA02OTQ3NjE0ZC1mNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsmZ2LrGssRC/m3pJUANtZTJ5cxMPdkfw+HQAf1pFfr+mrJmdSX1wfQOIRuX3
7tTchGL1bj+IQ5WexmpRhNLFy0c6e43YIzpjydHpXJscFgkps81azFkT+8Sgw3Zg
x9onWaf2LGWa3vjQkNp8hqMr6fobaMSe6cMjEI9Gdwh9gshpD2w/Rh043HNlWo1F
+dcqjxRzZz13DgZYCEvBtuhguHtwtvJjsTEau43D2A1JVBWqh5HEYe8yKzZ/RSnc
bvUqo0/ApFbBJRJIkccR/STI1Fg1uZgIbOZbohn8N1qSTyg6kb77IqKlyjmyvVS7
yaqYjiFpQWa0dQ4SLmA9H+QuuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF4G97AD
HdRH0JDNYMIYLaywFzVTMB8GA1UdIwQYMBaAFHviMBU8/5ABZC28myT4XQzCgjZO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjVEQi8xMTkzOUQxMDkw
NjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tBRmtMYnliSlBoZERNS0NO
azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UtSXdGVHpfa0FGa0xieWJKUGhkRE1LQ05rNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjVEQi8xMTkzOUQxMDkwNjkxMUVFQjIzRDc0MjVDNEY5QUUwMi9lLUl3RlR6X2tB
RmtMYnliSlBoZERNS0NOazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAz7uP3wVCLJ7nnqUh1YgX0EJiANw33Z7TWY8F18G7s9GNgZWuw13QX
FgZ30gi/Q/+ibULo1soiEB39cpcWcB+sLk/aLSK2IiUuZMk0xrIQaamH2FE/cZCQ
euPoOSW7atCkrYWnnHqqh4W/M2EtkWntjayYja3MNauVFR9HpCXEvanzew8oSqwi
AtIRoxvikvrliwIxX9sYg+qxX7QWLtTMcsoEecJy1lNZ7BZl2IIqagJELb3ZuIjz
HNbwIrqBQ84dN0pTTFnEoiALisRKWMRtRZGxdNseB1fG22DSfFsGHsDpTMaoCfFO
lp6XVrXj5EMlrz6W/q+ttUb4QMQiOSyE
-----END CERTIFICATE-----
Generated at Sun Dec 21 14:40:37 2025 by rpki-client