This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
File: 98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json)
Hash identifier: a32ZMdAJiqBDLtGfnd9nvSw6CA0CxBayB7uxWupUekw=
Subject key identifier: 17:8C:F2:76:03:6B:E0:B4:BD:F6:1F:BC:6C:5B:72:D8:F8:FF:B3:FD
Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B
Certificate issuer: /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
Manifest number: E5
Signing time: Fri 19 Dec 2025 04:33:44 +0000
Manifest this update: Fri 19 Dec 2025 04:33:44 +0000
Manifest next update: Fri 26 Dec 2025 04:33:44 +0000
Files and hashes: 1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: OKZ0K0UbRnv+x+c+cyR+ZIx6EbpIB9XKHtLpEe3GMdg=)
2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: mh3i+eoWpCQ7ATsRcfbcAmbVbj1O3ZcB7aHSJUdU7dU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl
rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
Validity
Not Before: Dec 19 04:33:44 2025 GMT
Not After : Dec 26 04:33:44 2025 GMT
Subject: CN=6944d5a8-ffbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d0:1f:21:cd:5b:62:f0:b7:06:b2:d8:66:1d:
ca:3d:76:f9:f2:5b:b4:30:5c:3e:20:1a:bf:36:15:
0f:bb:7c:b8:ed:5b:7c:dd:25:3a:fb:c7:94:da:49:
4c:db:a3:7d:cd:c8:5d:20:5c:ae:38:7d:f3:c5:76:
18:6d:79:d0:e0:7e:23:98:08:d3:d4:b8:53:1f:30:
94:94:93:49:71:a0:34:3e:3f:bb:3a:30:03:bd:ea:
96:38:81:c7:1f:63:7d:2c:22:64:e5:58:90:cd:a0:
c1:d1:d9:f7:be:da:31:cc:64:24:b4:c0:73:4c:d6:
46:9e:f4:2a:45:ad:76:c7:39:6f:f6:14:5f:93:ee:
6b:25:33:e9:e5:b3:a3:f1:62:44:d3:ba:92:73:d8:
8d:40:fb:bf:52:2a:ed:f6:4c:e6:26:0b:4d:bb:df:
98:12:2a:a6:a0:f9:6b:eb:22:8f:df:ee:2c:ef:d3:
82:56:24:70:ac:68:c8:03:67:a1:37:14:86:b6:38:
00:a4:05:3b:ae:05:57:e2:19:56:a9:8a:c7:be:bb:
6f:37:da:2d:3c:bf:25:0f:2d:da:84:90:8a:d6:9a:
b6:39:dc:f6:8f:9f:41:07:01:6e:ed:5e:16:ca:35:
75:f6:8c:d0:dd:db:c3:0f:b4:c4:0b:be:47:4c:c9:
c5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8C:F2:76:03:6B:E0:B4:BD:F6:1F:BC:6C:5B:72:D8:F8:FF:B3:FD
X509v3 Authority Key Identifier:
keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b6:41:60:d3:eb:7a:52:df:f4:f7:28:0f:19:45:62:e2:a9:
ed:f5:92:98:be:c1:c2:17:a7:eb:45:74:a0:62:b9:b9:ec:1c:
da:a8:fa:df:0d:47:ea:64:52:c0:d2:ce:8a:d3:9b:79:85:f0:
f6:ea:b9:af:a2:cc:2c:b6:00:11:d4:65:a5:1d:08:0c:6c:b1:
d5:0c:1b:a8:40:66:dc:be:20:26:80:f0:b7:9b:6f:e9:30:88:
48:12:d2:60:d3:1e:58:d6:05:7b:18:a0:5c:bf:68:91:40:5b:
73:26:16:3a:27:70:3c:78:8c:80:9d:30:bc:ac:d3:c9:fc:59:
09:a0:b9:2f:d7:7e:dc:71:61:c1:bb:17:1f:19:87:28:84:57:
70:47:ea:06:c1:fb:f8:36:52:ef:d1:b8:b4:ba:c6:28:8b:2a:
99:52:5f:85:da:d9:48:5d:c8:38:ee:6d:18:ab:04:61:4a:b8:
f9:45:7a:e3:c7:0f:26:98:c0:4a:ed:8c:0a:11:a7:21:6e:2e:
b0:80:0c:4b:9a:c2:31:06:6f:19:f0:dd:2c:3b:0a:f7:14:de:
24:8d:15:04:b0:3e:66:97:f6:0d:ef:49:1c:4c:e6:e4:02:89:
6c:a7:52:22:d5:d9:1e:c1:96:0f:f0:51:2b:4e:2d:d0:c4:cb:
20:33:c2:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVENEUxMTAvBgNVBAUTKEY3QzRGNUM3MjhEMEMwNDc2QzUzMkVBQzE4QzI5MjdD
MUQ1QjgzM0IwHhcNMjUxMjE5MDQzMzQ0WhcNMjUxMjI2MDQzMzQ0WjAYMRYwFAYD
VQQDDA02OTQ0ZDVhOC1mZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz9AfIc1bYvC3BrLYZh3KPXb58lu0MFw+IBq/NhUPu3y47Vt83SU6+8eU2klM
26N9zchdIFyuOH3zxXYYbXnQ4H4jmAjT1LhTHzCUlJNJcaA0Pj+7OjADveqWOIHH
H2N9LCJk5ViQzaDB0dn3vtoxzGQktMBzTNZGnvQqRa12xzlv9hRfk+5rJTPp5bOj
8WJE07qSc9iNQPu/Uirt9kzmJgtNu9+YEiqmoPlr6yKP3+4s79OCViRwrGjIA2eh
NxSGtjgApAU7rgVX4hlWqYrHvrtvN9otPL8lDy3ahJCK1pq2Odz2j59BBwFu7V4W
yjV19ozQ3dvDD7TEC75HTMnFnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeM8nYD
a+C0vfYfvGxbctj4/7P9MB8GA1UdIwQYMBaAFPfE9cco0MBHbFMurBjCknwdW4M7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ0RS81Qjg0NDIwMjdG
RjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdFZHNVeTZzR01LU2ZCMWJn
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzk4VDF4eWpRd0Vkc1V5NnNHTUtTZkIxYmd6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUQ0RS81Qjg0NDIwMjdGRjIxMUVGOTBFMTRGNjBDNEY5QUUwMi85OFQxeHlqUXdF
ZHNVeTZzR01LU2ZCMWJnenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAMtkFg0+t6Ut/09ygPGUVi4qnt9ZKYvsHCF6frRXSgYrm57BzaqPrf
DUfqZFLA0s6K05t5hfD26rmvoswstgAR1GWlHQgMbLHVDBuoQGbcviAmgPC3m2/p
MIhIEtJg0x5Y1gV7GKBcv2iRQFtzJhY6J3A8eIyAnTC8rNPJ/FkJoLkv137ccWHB
uxcfGYcohFdwR+oGwfv4NlLv0bi0usYoiyqZUl+F2tlIXcg47m0YqwRhSrj5RXrj
xw8mmMBK7YwKEachbi6wgAxLmsIxBm8Z8N0sOwr3FN4kjRUEsD5ml/YN70kcTObk
Aolsp1Ii1dkewZYP8FErTi3QxMsgM8Lw
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:48 2025 by rpki-client