This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json)
Hash identifier: /3HafjbC3bQOUoPyZREnp5VCSMTB8g5s/7CAwPHRP5w=
Subject key identifier: 42:5A:46:4F:E8:A6:0D:C6:95:51:EF:3D:EF:04:F9:C4:19:33:38:D7
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial: 09B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
Manifest number: 098F
Signing time: Thu 18 Dec 2025 19:42:24 +0000
Manifest this update: Thu 18 Dec 2025 19:42:24 +0000
Manifest next update: Thu 25 Dec 2025 19:42:24 +0000
Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: 6xUh5qsJofvyurQ/Vx2WPWG0uNultCQak1yx6cFRdDw=)
2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: lb657OxiZdu7OS/rkuzqIPL5kfvM5EeZVQrmP0Hrb44=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2484 (0x9b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Validity
Not Before: Dec 18 19:42:24 2025 GMT
Not After : Dec 25 19:42:24 2025 GMT
Subject: CN=69445920-79a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:34:43:2a:1c:36:f7:39:43:25:83:9a:21:
c1:80:0a:18:03:d7:ac:03:92:da:94:b4:c8:3d:75:
14:16:0a:46:6e:cd:f8:fe:d9:10:c0:fd:df:43:32:
a7:69:73:94:a6:65:f1:9c:4a:ac:a9:47:43:02:8c:
9e:95:bb:78:e3:ff:a9:bd:4a:b1:1f:0c:81:e5:3f:
8c:0c:b3:b3:75:a7:f5:1e:ce:22:a6:1c:8d:67:b8:
66:0b:7e:da:b7:56:07:c1:97:82:04:da:7d:b8:29:
1d:3c:ae:38:9b:95:ec:56:65:2a:75:a2:e6:7f:1b:
c2:94:1d:29:1c:79:8d:24:6c:72:b0:c9:c1:60:ef:
94:48:65:6c:c9:4f:71:bc:30:29:e4:39:5b:c9:87:
7c:cd:db:36:8a:84:b1:41:b9:12:2b:f8:ad:dd:3b:
a2:87:26:79:d4:95:dd:21:25:10:8e:00:e9:96:eb:
27:d6:ed:d9:c2:b5:af:00:d3:76:59:1b:49:56:47:
e4:1e:ea:60:eb:b1:59:5c:9d:38:3f:89:09:c8:7a:
1c:d1:f6:6a:fd:de:db:4c:99:f6:3d:07:b9:80:d8:
96:a0:ed:61:bb:c3:79:b0:36:9a:1e:1c:5d:84:d2:
3d:65:f9:ed:58:9a:07:6e:09:e9:9e:01:49:bc:c4:
fb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5A:46:4F:E8:A6:0D:C6:95:51:EF:3D:EF:04:F9:C4:19:33:38:D7
X509v3 Authority Key Identifier:
keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:29:16:a2:60:01:9c:21:bb:fc:72:4c:b8:43:67:b9:a2:c9:
19:d1:a5:ba:e6:7b:8e:a6:41:8a:13:d8:cf:5f:fd:0f:32:43:
88:1c:d8:84:19:df:72:89:29:d8:72:d5:d8:6b:cd:f0:d3:ea:
f6:32:82:ed:73:e3:38:23:a2:e2:64:f3:a8:de:0a:a3:e8:f9:
74:40:02:4c:60:9d:85:74:8c:65:0b:e7:fa:a2:f1:8a:ed:7b:
9f:20:17:f6:d3:c1:4d:32:d1:00:30:ba:b9:87:78:b8:14:6c:
80:fa:e6:b0:68:b2:a1:a4:63:0a:94:bc:6c:24:8f:24:58:cd:
a7:96:cc:66:5e:02:8f:ae:b9:56:4d:77:f0:15:b8:84:bd:bc:
79:ac:27:02:b7:cb:a0:04:98:29:1f:3d:80:d2:7b:e6:66:39:
43:76:6e:e6:47:0c:de:9f:ec:ed:ac:33:64:91:6a:7f:09:ad:
f5:5d:6a:05:da:29:ef:65:bc:26:21:3d:53:9e:25:7b:b8:f0:
ea:a5:b0:83:81:25:d4:63:d5:95:e5:48:00:91:11:7c:5e:b7:
b1:13:3c:df:cb:17:f4:a6:30:e0:92:04:c0:b5:57:54:d3:5d:
44:c6:c5:53:31:d1:e6:4b:56:5c:f0:78:e8:07:1a:9d:27:ac:
ef:95:0e:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4
MzBGQkU5NDIwHhcNMjUxMjE4MTk0MjI0WhcNMjUxMjI1MTk0MjI0WjAYMRYwFAYD
VQQDDA02OTQ0NTkyMC03OWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtJo0QyocNvc5QyWDmiHBgAoYA9esA5LalLTIPXUUFgpGbs34/tkQwP3fQzKn
aXOUpmXxnEqsqUdDAoyelbt44/+pvUqxHwyB5T+MDLOzdaf1Hs4iphyNZ7hmC37a
t1YHwZeCBNp9uCkdPK44m5XsVmUqdaLmfxvClB0pHHmNJGxysMnBYO+USGVsyU9x
vDAp5DlbyYd8zds2ioSxQbkSK/it3TuihyZ51JXdISUQjgDplusn1u3ZwrWvANN2
WRtJVkfkHupg67FZXJ04P4kJyHoc0fZq/d7bTJn2PQe5gNiWoO1hu8N5sDaaHhxd
hNI9ZfntWJoHbgnpngFJvMT7CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJaRk/o
pg3GlVHvPe8E+cQZMzjXMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD
NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2
VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI
LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvKRaiYAGcIbv8cky4Q2e5oskZ0aW65nuOpkGKE9jPX/0PMkOIHNiE
Gd9yiSnYctXYa83w0+r2MoLtc+M4I6LiZPOo3gqj6Pl0QAJMYJ2FdIxlC+f6ovGK
7XufIBf208FNMtEAMLq5h3i4FGyA+uawaLKhpGMKlLxsJI8kWM2nlsxmXgKPrrlW
TXfwFbiEvbx5rCcCt8ugBJgpHz2A0nvmZjlDdm7mRwzen+ztrDNkkWp/Ca31XWoF
2invZbwmIT1TniV7uPDqpbCDgSXUY9WV5UgAkRF8XrexEzzfyxf0pjDgkgTAtVdU
011ExsVTMdHmS1Zc8HjoBxqdJ6zvlQ4B
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:11 2025 by rpki-client