This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
File: XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json)
Hash identifier: q7YQFHLl0PmBdNxXfAxGf3Hj4ioPafy8r/R96XW6ASo=
Subject key identifier: 61:E2:37:31:82:31:E2:9A:0D:D1:91:42:ED:64:26:0C:92:3D:2E:E5
Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
Manifest number: 01E3
Signing time: Fri 19 Dec 2025 01:53:22 +0000
Manifest this update: Fri 19 Dec 2025 01:53:21 +0000
Manifest next update: Fri 26 Dec 2025 01:53:21 +0000
Files and hashes: 1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: gApup9ncLTaryTZ78UoF+E7qYm/yZRzhht7o+B2CtjM=)
2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: SO9SbWUjXyJ9Yb5w7Q+6mTlLwT6ktJsJ2PGUdf4nf50=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:53:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4
Validity
Not Before: Dec 19 01:53:21 2025 GMT
Not After : Dec 26 01:53:21 2025 GMT
Subject: CN=6944b012-ae77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:ca:11:76:2c:af:c8:80:53:38:8a:3f:6f:
11:3d:b4:88:e8:68:a5:78:8e:12:07:cb:23:a1:59:
da:fd:49:be:6f:ea:04:db:93:9d:24:1e:f4:2f:fd:
e6:67:b6:ad:b0:e7:b8:77:d3:a6:9f:be:fe:f8:98:
f1:59:bb:07:03:35:ab:04:3d:13:00:60:57:5c:87:
68:04:88:c8:e4:ca:57:f5:10:6a:9f:94:f2:6e:db:
ee:1e:93:07:8f:59:b0:d0:fc:b5:5c:d1:e8:fe:cb:
ec:53:f6:89:73:01:e2:89:29:40:ec:3f:f2:a1:ae:
9d:0e:40:a8:14:20:5a:5e:ec:9d:0a:96:bf:d1:bb:
cb:03:ea:d1:7f:57:d0:d6:ca:4c:6c:65:16:12:92:
e6:19:46:2d:37:55:aa:b2:1b:ca:b1:20:e8:08:ba:
da:de:88:f0:fa:21:30:29:cb:a8:39:2f:7a:f4:1c:
ee:f6:4b:6c:54:ce:1b:ac:b5:23:45:21:e8:5f:26:
b4:9e:24:32:1d:c3:a3:24:ae:d4:45:8b:4b:24:59:
a7:b6:8d:64:39:2e:1f:ee:2f:d9:2b:6e:73:39:3b:
34:b6:79:b1:73:cf:b2:ed:cc:ad:d0:80:8b:a8:db:
9b:95:22:23:ab:83:80:b7:fb:38:ac:e2:28:b5:5b:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E2:37:31:82:31:E2:9A:0D:D1:91:42:ED:64:26:0C:92:3D:2E:E5
X509v3 Authority Key Identifier:
keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:a7:68:a6:ab:4b:14:cc:dd:3f:b9:6c:75:58:84:4b:48:4a:
c9:bd:93:29:13:9a:57:67:bc:72:21:2a:d2:dc:ab:d3:c7:c5:
fe:ac:1d:83:27:e1:cd:ce:2b:17:95:5c:07:42:d6:8b:c1:fc:
96:4a:07:20:e3:67:2e:c5:eb:aa:d3:5a:fd:cd:a4:91:8f:bf:
dc:1c:2c:8c:05:13:e8:32:9f:7e:aa:8d:3c:83:a2:44:93:a5:
5f:7d:b6:11:b6:0e:db:41:5d:03:3a:4e:9d:63:f6:fd:29:a1:
8a:f3:f1:68:46:8f:e0:c2:a6:f0:fd:b0:0e:ed:bd:e3:61:47:
92:7d:f4:46:e0:66:05:06:0e:35:96:dc:cf:7c:f1:4c:cc:17:
ee:cd:39:78:c4:05:bc:7b:62:13:b1:35:b8:62:08:88:16:be:
39:e3:ed:ff:41:3d:82:cf:9c:8c:18:da:17:61:6d:39:7d:62:
6d:3c:ea:cc:c1:06:d7:9a:25:19:6e:93:94:b3:bf:df:d1:ed:
2b:fc:a6:54:47:8a:06:a2:08:07:2e:69:69:1f:1f:7f:6e:ef:
74:99:ce:7f:65:56:fe:fc:4b:da:1a:ec:88:f8:1c:52:b6:d7:
15:68:dc:1a:33:4c:e4:e9:0f:07:90:ef:49:86:01:7c:7a:6c:
8b:91:ce:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTIzQTkxMTAvBgNVBAUTKDVDMTdBRjJFMEFBRjQ5MENFQUE4NEUyQUFBNzE0ODNE
MDM5NUYxRTQwHhcNMjUxMjE5MDE1MzIxWhcNMjUxMjI2MDE1MzIxWjAYMRYwFAYD
VQQDDA02OTQ0YjAxMi1hZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtMrKEXYsr8iAUziKP28RPbSI6GileI4SB8sjoVna/Um+b+oE25OdJB70L/3m
Z7atsOe4d9Omn77++JjxWbsHAzWrBD0TAGBXXIdoBIjI5MpX9RBqn5TybtvuHpMH
j1mw0Py1XNHo/svsU/aJcwHiiSlA7D/yoa6dDkCoFCBaXuydCpa/0bvLA+rRf1fQ
1spMbGUWEpLmGUYtN1WqshvKsSDoCLra3ojw+iEwKcuoOS969Bzu9ktsVM4brLUj
RSHoXya0niQyHcOjJK7URYtLJFmnto1kOS4f7i/ZK25zOTs0tnmxc8+y7cyt0ICL
qNublSIjq4OAt/s4rOIotVtRXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHiNzGC
MeKaDdGRQu1kJgySPS7lMB8GA1UdIwQYMBaAFFwXry4Kr0kM6qhOKqpxSD0DlfHk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNBOS9BNjM4NzY4NEZB
QTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNRenFxRTRxcW5GSVBRT1Y4
ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hCZXZMZ3F2U1F6cXFFNHFxbkZJUFFPVjhlUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjNBOS9BNjM4NzY4NEZBQTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNR
enFxRTRxcW5GSVBRT1Y4ZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4p2imq0sUzN0/uWx1WIRLSErJvZMpE5pXZ7xyISrS3KvTx8X+rB2D
J+HNzisXlVwHQtaLwfyWSgcg42cuxeuq01r9zaSRj7/cHCyMBRPoMp9+qo08g6JE
k6VffbYRtg7bQV0DOk6dY/b9KaGK8/FoRo/gwqbw/bAO7b3jYUeSffRG4GYFBg41
ltzPfPFMzBfuzTl4xAW8e2ITsTW4YgiIFr454+3/QT2Cz5yMGNoXYW05fWJtPOrM
wQbXmiUZbpOUs7/f0e0r/KZUR4oGoggHLmlpHx9/bu90mc5/ZVb+/EvaGuyI+BxS
ttcVaNwaM0zk6Q8HkO9JhgF8emyLkc5P
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:39 2025 by rpki-client