This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
File: xC_x0v81KYG8X4IkDsk5TvqzEYY.mft (raw, json)
Hash identifier: X3SJEf5inQpoafrvFlS03eVcI52I452uulaVcgQpFgQ=
Subject key identifier: B7:72:64:5E:0B:C3:DF:A1:F1:A9:C6:1F:AF:19:BB:4B:1A:D3:A0:EF
Authority key identifier: C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
Certificate issuer: /CN=A91814E9/serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Certificate serial: 080F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
Manifest number: 0802
Signing time: Thu 18 Dec 2025 20:31:43 +0000
Manifest this update: Thu 18 Dec 2025 20:31:42 +0000
Manifest next update: Thu 25 Dec 2025 20:31:42 +0000
Files and hashes: 1: xC_x0v81KYG8X4IkDsk5TvqzEYY.crl (hash: 4P3Wad8kpFdXqIlh2xLXTAJdO3leV9sk8FPen7+G7KE=)
2: 24D4F9F0E61B11EBBAE35771C4F9AE02.roa (hash: odhqLjFi/gNl1kTD0Ic54V4mME2y8CTdKUAbvxdHwi4=)
3: 21EE9510083211EB81509633C4F9AE02.roa (hash: ZfvnXdczblwrDF4Ejj/73M+zlN7DQoj1HAdYgFet7TY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2063 (0x80f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91814E9, serialNumber=C42FF1D2FF352981BC5F82240EC9394EFAB31186
Validity
Not Before: Dec 18 20:31:42 2025 GMT
Not After : Dec 25 20:31:42 2025 GMT
Subject: CN=694464af-99c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:fe:a8:79:97:8c:04:40:96:02:ef:12:a2:
bb:17:f8:f0:eb:03:17:5b:1b:de:0a:70:a1:b2:3b:
67:63:74:94:a0:7d:fb:23:f8:76:13:60:7e:2d:c2:
52:9f:5a:d6:15:db:2b:20:aa:2a:38:e8:1b:69:cd:
05:0e:3b:a6:af:0e:a7:0d:24:21:12:70:ea:3d:61:
ce:91:74:8a:b8:06:d1:5f:3e:ea:81:48:e8:eb:6a:
fc:9b:0c:fe:8f:d3:ae:1a:9e:65:59:03:db:4b:5b:
46:be:46:44:43:7c:ee:95:55:b4:3e:c6:a3:19:31:
2e:4c:9a:60:21:55:f9:a2:93:33:88:f7:25:b0:db:
39:ec:7c:96:bd:29:33:f5:1a:a6:fc:73:d4:00:30:
33:7b:08:30:10:04:0f:c4:86:4a:14:22:75:6b:20:
d8:b8:13:e5:bf:5b:cd:3d:b9:9a:24:84:04:10:3a:
71:51:c9:aa:1f:fd:fb:3f:6d:1b:32:1a:b8:85:f5:
4b:b0:bf:fe:cc:be:b8:4c:cf:31:b9:68:61:1a:81:
bc:31:7c:c4:93:04:51:d1:bb:81:29:23:69:35:74:
d5:d4:9c:9f:38:99:9a:48:f4:82:58:00:44:a0:7c:
2a:39:8d:68:7c:ae:54:2c:74:21:24:f8:c9:7b:1c:
98:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:72:64:5E:0B:C3:DF:A1:F1:A9:C6:1F:AF:19:BB:4B:1A:D3:A0:EF
X509v3 Authority Key Identifier:
keyid:C4:2F:F1:D2:FF:35:29:81:BC:5F:82:24:0E:C9:39:4E:FA:B3:11:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xC_x0v81KYG8X4IkDsk5TvqzEYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814E9/FE57C2BC083011EBBFE4C732C4F9AE02/xC_x0v81KYG8X4IkDsk5TvqzEYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5c:34:71:21:5a:44:cb:4e:95:d8:ae:5f:6a:6f:5e:80:f3:
47:b4:d3:53:37:20:6c:18:8b:31:89:89:d2:e8:0b:eb:09:0c:
50:09:10:e3:95:88:62:4b:ec:e2:f4:b1:11:fe:5d:1a:15:f1:
88:ed:16:e1:d5:ba:4d:4b:d1:48:d6:a5:f7:06:78:ea:67:58:
7c:98:08:78:81:a2:fe:c7:df:c0:8c:41:17:0f:84:b1:59:32:
e7:60:90:29:29:c7:e9:a9:5e:79:24:68:b4:b0:ab:ac:84:34:
4f:1d:d7:2f:64:12:76:de:e4:c8:fd:f1:a7:3f:48:a5:98:17:
9c:b1:d8:24:f3:a0:e3:66:f8:16:d5:82:19:fe:b4:f3:21:d4:
6c:ff:e1:c6:37:ca:e4:52:d6:10:d7:64:23:b5:1f:5b:19:35:
11:ce:6c:57:98:17:a8:e7:69:e2:ae:0e:50:89:a2:63:8c:b4:
6b:db:c5:8f:a9:0f:77:42:4b:5a:18:20:8e:3f:3d:69:54:79:
68:ba:0a:2f:70:6d:0e:f8:74:79:c4:3e:84:b4:79:5e:5f:3f:
ff:a4:cc:c5:87:9d:c1:76:b0:51:19:81:80:6d:f3:05:92:9f:
06:64:1d:87:f7:12:aa:c5:30:af:7f:e2:40:98:b9:81:65:82:
2d:9b:44:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODE0RTkxMTAvBgNVBAUTKEM0MkZGMUQyRkYzNTI5ODFCQzVGODIyNDBFQzkzOTRF
RkFCMzExODYwHhcNMjUxMjE4MjAzMTQyWhcNMjUxMjI1MjAzMTQyWjAYMRYwFAYD
VQQDDA02OTQ0NjRhZi05OWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvH+qHmXjARAlgLvEqK7F/jw6wMXWxveCnChsjtnY3SUoH37I/h2E2B+LcJS
n1rWFdsrIKoqOOgbac0FDjumrw6nDSQhEnDqPWHOkXSKuAbRXz7qgUjo62r8mwz+
j9OuGp5lWQPbS1tGvkZEQ3zulVW0PsajGTEuTJpgIVX5opMziPclsNs57HyWvSkz
9Rqm/HPUADAzewgwEAQPxIZKFCJ1ayDYuBPlv1vNPbmaJIQEEDpxUcmqH/37P20b
Mhq4hfVLsL/+zL64TM8xuWhhGoG8MXzEkwRR0buBKSNpNXTV1JyfOJmaSPSCWABE
oHwqOY1ofK5ULHQhJPjJexyYCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdyZF4L
w9+h8anGH68Zu0sa06DvMB8GA1UdIwQYMBaAFMQv8dL/NSmBvF+CJA7JOU76sxGG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRFOS9GRTU3QzJCQzA4
MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZRzhYNElrRHNrNVR2cXpF
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDX3gwdjgxS1lHOFg0SWtEc2s1VHZxekVZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MTRFOS9GRTU3QzJCQzA4MzAxMUVCQkZFNEM3MzJDNEY5QUUwMi94Q194MHY4MUtZ
RzhYNElrRHNrNVR2cXpFWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtXDRxIVpEy06V2K5fam9egPNHtNNTNyBsGIsxiYnS6AvrCQxQCRDj
lYhiS+zi9LER/l0aFfGI7Rbh1bpNS9FI1qX3BnjqZ1h8mAh4gaL+x9/AjEEXD4Sx
WTLnYJApKcfpqV55JGi0sKushDRPHdcvZBJ23uTI/fGnP0ilmBecsdgk86DjZvgW
1YIZ/rTzIdRs/+HGN8rkUtYQ12QjtR9bGTURzmxXmBeo52nirg5QiaJjjLRr28WP
qQ93QktaGCCOPz1pVHlougovcG0O+HR5xD6EtHleXz//pMzFh53BdrBRGYGAbfMF
kp8GZB2H9xKqxTCvf+JAmLmBZYItm0Sl
-----END CERTIFICATE-----
Generated at Sat Dec 20 04:58:27 2025 by rpki-client