This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json)
Hash identifier: c2rpXriavp9DwNAs/1H8OiKJIZQhoyY66RCI7Z7Mw48=
Subject key identifier: C6:5D:7F:9A:EE:A0:49:26:5F:B7:5F:3D:92:F9:C9:DE:B5:33:7B:DC
Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Certificate serial: 05FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
Manifest number: 05ED
Signing time: Thu 18 Dec 2025 22:21:42 +0000
Manifest this update: Thu 18 Dec 2025 22:21:42 +0000
Manifest next update: Thu 25 Dec 2025 22:21:42 +0000
Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: H/ly+SYwECf71bEKYqgmNjo4gzmDmcU1JsHdqLo0zVw=)
2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: qEzwTZZUC4uMW1HAy4f00w0OgM+P5McKSsq6Y4WD9MM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1531 (0x5fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4
Validity
Not Before: Dec 18 22:21:42 2025 GMT
Not After : Dec 25 22:21:42 2025 GMT
Subject: CN=69447e76-2fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:ef:2a:ff:6f:07:79:88:74:dc:8b:4c:23:
05:40:b2:77:08:da:f4:ce:e6:ed:7f:5f:5f:f8:75:
2b:fb:a3:17:96:ad:9f:df:a0:04:29:c8:4e:54:03:
c9:a5:34:e1:eb:23:cb:eb:2b:95:1b:27:07:95:d0:
2f:bb:79:42:47:94:96:01:5f:d1:39:64:ab:dd:0e:
cf:87:6f:9e:b8:1c:33:57:c7:e1:6d:25:ed:76:42:
71:a4:3e:ef:a6:1c:62:d6:e3:1a:c8:a0:ec:c5:ae:
b9:37:a1:5f:5a:7e:f7:63:3a:75:7a:75:22:67:b7:
af:93:24:e0:cf:be:01:7a:c0:09:df:e4:77:50:c0:
a9:77:1d:4f:d4:c2:4d:90:5c:dd:7f:35:88:ba:58:
d0:f0:ae:dd:ca:ac:12:ab:25:98:a1:1c:a6:5b:da:
cd:80:18:bf:6c:e5:9c:c5:39:8e:61:54:23:c8:f9:
07:a3:52:06:c7:a2:c8:07:e1:6c:05:4f:b6:d9:8b:
9a:dd:2e:fd:60:2d:f7:32:ac:9c:09:9f:21:4d:5e:
df:95:55:b0:4c:fd:7e:8d:15:b6:fb:c5:07:9a:bc:
60:17:f1:1a:2e:c8:54:df:a2:17:e1:38:34:62:ea:
3d:cb:3f:d9:d8:aa:06:a4:fb:2f:19:cf:8a:cf:9b:
79:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5D:7F:9A:EE:A0:49:26:5F:B7:5F:3D:92:F9:C9:DE:B5:33:7B:DC
X509v3 Authority Key Identifier:
keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:93:35:92:1c:f9:8e:d0:be:a6:da:66:b5:cb:20:af:c4:35:
a4:aa:40:a4:e0:78:42:58:2f:1c:b2:4f:17:ef:47:cf:aa:b6:
9f:ae:d3:f8:54:41:3b:50:97:6b:0c:14:35:8c:f8:df:35:cf:
ee:24:29:f9:04:ba:f3:5d:ca:8a:7a:e8:55:d6:9f:fb:e9:b0:
1a:09:36:2d:ef:a0:98:a5:62:37:2b:9f:44:2a:7b:71:f6:7e:
6b:27:d5:87:f5:a5:77:91:24:e9:c9:1d:cc:cd:c2:a0:a8:b1:
a4:cc:ee:0c:6e:c7:19:45:c0:e3:80:35:07:f3:99:63:07:b8:
df:bc:8c:9f:f9:12:dd:a1:04:af:4c:ae:36:82:97:3a:c0:d1:
be:39:5f:79:23:bc:73:a3:78:c1:a8:cb:bf:8d:58:4e:88:fb:
93:9f:e0:b4:f4:35:76:64:4b:44:ec:35:1f:42:6e:2d:e2:6b:
4f:40:d3:a0:d4:b2:aa:e8:87:8f:3a:a4:6e:24:42:bf:c8:64:
06:59:4a:c7:50:fe:bc:f9:56:4e:f2:a5:5e:77:81:9f:03:10:
fb:10:4b:30:bd:3e:38:d2:1f:64:87:0b:d3:ef:46:06:b7:10:
97:51:2e:eb:a0:5c:5a:90:10:0c:cd:fb:0e:0b:d3:64:f1:af:
db:9a:53:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD
Q0JBOERBQzQwHhcNMjUxMjE4MjIyMTQyWhcNMjUxMjI1MjIyMTQyWjAYMRYwFAYD
VQQDDA02OTQ0N2U3Ni0yZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlLXvKv9vB3mIdNyLTCMFQLJ3CNr0zubtf19f+HUr+6MXlq2f36AEKchOVAPJ
pTTh6yPL6yuVGycHldAvu3lCR5SWAV/ROWSr3Q7Ph2+euBwzV8fhbSXtdkJxpD7v
phxi1uMayKDsxa65N6FfWn73Yzp1enUiZ7evkyTgz74BesAJ3+R3UMCpdx1P1MJN
kFzdfzWIuljQ8K7dyqwSqyWYoRymW9rNgBi/bOWcxTmOYVQjyPkHo1IGx6LIB+Fs
BU+22Yua3S79YC33MqycCZ8hTV7flVWwTP1+jRW2+8UHmrxgF/EaLshU36IX4Tg0
Yuo9yz/Z2KoGpPsvGc+Kz5t5WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZdf5ru
oEkmX7dfPZL5yd61M3vcMB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG
Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y
c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU
WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPkzWSHPmO0L6m2ma1yyCvxDWkqkCk4HhCWC8csk8X70fPqrafrtP4
VEE7UJdrDBQ1jPjfNc/uJCn5BLrzXcqKeuhV1p/76bAaCTYt76CYpWI3K59EKntx
9n5rJ9WH9aV3kSTpyR3MzcKgqLGkzO4MbscZRcDjgDUH85ljB7jfvIyf+RLdoQSv
TK42gpc6wNG+OV95I7xzo3jBqMu/jVhOiPuTn+C09DV2ZEtE7DUfQm4t4mtPQNOg
1LKq6IePOqRuJEK/yGQGWUrHUP68+VZO8qVed4GfAxD7EEswvT440h9khwvT70YG
txCXUS7roFxakBAMzfsOC9Nk8a/bmlPt
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:27:45 2025 by rpki-client