This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
File: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft (raw, json)
Hash identifier: 0pOOWLklMiXHcFKDP2OD/O8R//YBP8LYVu+O/bXeWJE=
Subject key identifier: 6D:99:BD:21:A7:02:A9:8B:86:7C:26:03:BD:12:8D:7D:69:33:E6:98
Authority key identifier: 15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
Certificate issuer: /CN=A918B0C4/serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Certificate serial: 023E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
Manifest number: 0238
Signing time: Fri 19 Dec 2025 01:11:28 +0000
Manifest this update: Fri 19 Dec 2025 01:11:27 +0000
Manifest next update: Fri 26 Dec 2025 01:11:27 +0000
Files and hashes: 1: FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl (hash: EcPBw0kNrwtpUbEa407Ic+3lLzSKYFVTmOWVFJpKTT8=)
2: F59959807A0511EDA112EF32C4F9AE02.roa (hash: hlcOiwDISzas5tiOnv5T5pSK2UpZ6cfJveUb3LnTEYo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 574 (0x23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B0C4, serialNumber=15F0A40685E69A641DB70E82BF780A9ABFE3F159
Validity
Not Before: Dec 19 01:11:27 2025 GMT
Not After : Dec 26 01:11:27 2025 GMT
Subject: CN=6944a640-1e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:15:0c:47:e7:62:6b:57:17:08:14:24:be:
b6:8a:b9:97:27:14:77:24:53:ac:d5:ee:a5:79:6b:
97:8e:51:ed:58:c6:a9:64:98:f5:05:92:cf:e2:94:
c3:91:f3:89:25:a2:01:e0:16:5a:8a:62:df:99:ff:
63:1d:a4:9f:a2:42:76:4f:0c:a0:1c:b6:a9:c0:c1:
99:39:b1:1f:c3:54:3c:f1:e0:11:7e:e8:e6:bb:cc:
9e:52:2d:4b:85:b1:70:39:84:8d:fb:a1:fb:35:57:
80:37:45:d2:99:3b:12:36:fe:7c:68:ae:e1:49:5f:
e0:43:14:7b:f3:d1:7c:45:ee:80:61:bf:52:e6:e2:
c5:ca:78:4a:aa:f2:4c:56:41:0d:33:18:f4:5d:d2:
98:f3:99:e0:02:4d:54:ec:19:d8:be:ac:13:c6:3d:
43:d6:fc:69:95:2b:51:50:06:cc:76:59:5e:c9:e5:
f6:57:a0:21:63:ef:ec:f6:4d:36:e8:69:e2:1e:c2:
75:46:30:3d:64:83:9c:b3:4f:a8:f3:39:ff:35:8a:
6d:fd:ba:48:3b:8b:6c:24:27:51:73:60:4d:7c:b1:
06:ff:2c:85:3e:d0:d1:2c:e8:94:d0:10:ec:47:36:
9e:8e:d7:c8:b7:2c:6a:18:6b:d3:8d:dc:0d:d2:73:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:99:BD:21:A7:02:A9:8B:86:7C:26:03:BD:12:8D:7D:69:33:E6:98
X509v3 Authority Key Identifier:
keyid:15:F0:A4:06:85:E6:9A:64:1D:B7:0E:82:BF:78:0A:9A:BF:E3:F1:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B0C4/F3A872DA7A0211EDBB36DB2EC4F9AE02/FfCkBoXmmmQdtw6Cv3gKmr_j8Vk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:46:1a:8f:36:7a:c1:cb:2b:1e:ce:a1:ea:49:85:1f:67:a5:
77:e9:63:9c:70:70:ac:b6:63:2f:c4:fd:fe:22:0e:59:6e:10:
b8:ea:30:6c:65:60:7c:7f:d1:d7:5d:39:b0:49:17:5c:e0:b4:
f4:f3:7b:4a:2c:7a:9a:a8:ad:68:95:9d:f7:f8:af:4e:53:4d:
db:a5:ac:8f:69:a4:7a:5d:7d:5c:74:0b:70:6d:a7:e4:2e:69:
15:73:88:f9:76:2e:71:4c:d6:ef:f7:db:8b:d3:4b:3a:05:9f:
8a:0d:5b:b8:1b:aa:87:b6:00:73:8d:f4:d1:cc:6d:a0:b6:15:
c3:12:02:d8:87:84:10:7a:4a:cc:ea:48:2c:e0:c3:22:3c:17:
c5:b5:fe:bf:17:b6:3f:68:0d:06:8c:e7:85:f2:23:d3:c9:0d:
c5:56:d0:9a:7f:8a:52:94:c0:6d:03:fd:6b:1c:6d:93:79:6c:
42:ec:f0:f5:09:60:90:4b:88:4f:36:24:a5:99:ce:cd:3e:c3:
f4:d3:70:28:dc:d4:b3:67:20:9c:4e:96:0d:cf:ac:19:74:e8:
62:b2:bc:ca:5c:5a:c6:cc:0d:b8:55:a5:52:65:29:ca:c5:6d:
f1:1b:d2:6a:40:62:43:40:e4:bd:c7:a1:23:3c:73:7d:1a:59:
04:b5:71:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEIwQzQxMTAvBgNVBAUTKDE1RjBBNDA2ODVFNjlBNjQxREI3MEU4MkJGNzgwQTlB
QkZFM0YxNTkwHhcNMjUxMjE5MDExMTI3WhcNMjUxMjI2MDExMTI3WjAYMRYwFAYD
VQQDDA02OTQ0YTY0MC0xZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0/0VDEfnYmtXFwgUJL62irmXJxR3JFOs1e6leWuXjlHtWMapZJj1BZLP4pTD
kfOJJaIB4BZaimLfmf9jHaSfokJ2TwygHLapwMGZObEfw1Q88eARfujmu8yeUi1L
hbFwOYSN+6H7NVeAN0XSmTsSNv58aK7hSV/gQxR789F8Re6AYb9S5uLFynhKqvJM
VkENMxj0XdKY85ngAk1U7BnYvqwTxj1D1vxplStRUAbMdlleyeX2V6AhY+/s9k02
6GniHsJ1RjA9ZIOcs0+o8zn/NYpt/bpIO4tsJCdRc2BNfLEG/yyFPtDRLOiU0BDs
RzaejtfItyxqGGvTjdwN0nOVzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2ZvSGn
AqmLhnwmA70SjX1pM+aYMB8GA1UdIwQYMBaAFBXwpAaF5ppkHbcOgr94Cpq/4/FZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjBDNC9GM0E4NzJEQTdB
MDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1tUWR0dzZDdjNnS21yX2o4
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZmQ2tCb1htbW1RZHR3NkN2M2dLbXJfajhWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjBDNC9GM0E4NzJEQTdBMDIxMUVEQkIzNkRCMkVDNEY5QUUwMi9GZkNrQm9YbW1t
UWR0dzZDdjNnS21yX2o4VmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCnRhqPNnrByysezqHqSYUfZ6V36WOccHCstmMvxP3+Ig5ZbhC46jBs
ZWB8f9HXXTmwSRdc4LT083tKLHqaqK1olZ33+K9OU03bpayPaaR6XX1cdAtwbafk
LmkVc4j5di5xTNbv99uL00s6BZ+KDVu4G6qHtgBzjfTRzG2gthXDEgLYh4QQekrM
6kgs4MMiPBfFtf6/F7Y/aA0GjOeF8iPTyQ3FVtCaf4pSlMBtA/1rHG2TeWxC7PD1
CWCQS4hPNiSlmc7NPsP003Ao3NSzZyCcTpYNz6wZdOhisrzKXFrGzA24VaVSZSnK
xW3xG9JqQGJDQOS9x6EjPHN9GlkEtXFL
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:02:56 2025 by rpki-client