This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
File: f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json)
Hash identifier: AJud7BDVS3fM1BSdZcKgmFUAESov14GuGqD7ipoKQIU=
Subject key identifier: C3:0E:13:2B:6E:E9:71:D3:82:39:88:CA:D7:83:9C:65:43:74:AB:DB
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
Manifest number: C5
Signing time: Fri 19 Dec 2025 05:03:50 +0000
Manifest this update: Fri 19 Dec 2025 05:03:50 +0000
Manifest next update: Fri 26 Dec 2025 05:03:50 +0000
Files and hashes: 1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: UD0hPFm++qnDI5Oq7KKZnVxkG4KHwU1c3ynnlit9/Kc=)
2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: VWuV3WTDHbFhKXSmycUNk+HMKCNIe035E4JGd1F1GZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Validity
Not Before: Dec 19 05:03:50 2025 GMT
Not After : Dec 26 05:03:50 2025 GMT
Subject: CN=6944dcb6-2d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:52:4f:b5:99:42:10:c7:ec:d4:a1:e5:82:
cd:64:39:d4:43:fe:9f:87:a6:c5:cb:5f:00:72:72:
7a:81:35:d7:d7:a0:0f:3a:a0:79:da:8e:22:f5:d3:
67:75:83:fd:c0:22:ae:ea:00:12:64:b1:72:85:65:
75:3a:6e:a1:6d:76:de:bc:a3:b3:1c:1c:09:5a:ae:
e0:b2:c8:91:36:dc:ad:7f:9d:c1:85:75:b9:49:18:
89:01:a8:f9:ff:15:6c:cd:8b:bb:53:2c:53:fa:8c:
63:ab:46:50:15:35:1b:6b:61:cc:9f:da:8f:b0:c3:
c6:98:f1:d0:13:45:05:2e:04:c7:e3:dc:c0:bf:70:
5d:c7:03:60:d0:1c:5a:13:93:87:55:12:3b:dc:ab:
ff:24:80:41:dc:e5:05:5e:27:e5:44:8a:d5:ee:86:
3a:0f:83:72:d6:62:46:fe:ce:d6:d7:79:b9:35:ff:
83:e7:34:d8:b6:c4:0f:03:64:b2:87:5d:d3:f6:cb:
6b:9a:45:a3:47:2d:b7:de:2a:d0:9a:8e:08:11:0e:
cd:ea:44:49:0a:86:2c:54:7e:83:da:4c:47:49:6a:
0f:29:ac:87:fd:7a:8e:3e:92:0f:f0:44:29:29:84:
62:82:1b:b8:0e:4a:aa:46:2d:41:73:22:ff:63:ac:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0E:13:2B:6E:E9:71:D3:82:39:88:CA:D7:83:9C:65:43:74:AB:DB
X509v3 Authority Key Identifier:
keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d4:aa:7a:1b:6b:83:a8:c2:56:57:b8:c0:8a:26:65:fe:c0:
1a:42:9f:72:f8:49:47:b4:62:89:1f:f3:ae:0d:8a:31:a9:eb:
ea:94:0a:d5:06:82:42:1c:ce:a7:a4:bc:7e:dc:26:3a:03:a9:
93:95:47:21:71:24:b3:73:d4:53:e9:04:e6:7e:b2:96:e6:34:
0e:28:bc:a1:9f:5a:db:09:30:63:d0:cf:74:4b:ef:6b:a2:3e:
f6:bd:6a:da:1b:7f:0c:f7:b0:58:c6:b8:fa:55:4d:23:36:b2:
84:fe:d0:df:32:3c:44:b1:9c:e2:90:69:b4:3a:49:17:66:73:
9f:e2:a8:6e:f1:c0:5a:36:18:43:1b:c5:d0:76:22:88:ac:40:
d7:5a:c9:e7:df:7e:75:14:6d:df:0a:91:28:48:09:e6:7b:e9:
08:1f:19:b3:fa:86:34:66:88:54:02:13:6c:8f:4e:4c:fe:12:
1f:c6:12:c4:36:de:7b:e2:9e:79:77:9e:a1:18:a0:29:7f:77:
e1:3d:40:82:77:c6:1a:75:99:0b:7b:ed:d3:3a:d5:04:45:76:
68:72:16:5f:be:25:1d:f7:40:11:2d:24:ae:89:67:21:d4:b0:
30:df:7a:6f:d7:e2:84:63:40:87:12:a6:d6:04:16:fe:eb:b5:
71:21:ae:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJBNDcxMTAvBgNVBAUTKDdGNzc1OTIwNDJFM0M4N0JFNTZFRUQ4MUQ5Q0NCMEU5
NzQwMkNERDcwHhcNMjUxMjE5MDUwMzUwWhcNMjUxMjI2MDUwMzUwWjAYMRYwFAYD
VQQDDA02OTQ0ZGNiNi0yZDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk89ST7WZQhDH7NSh5YLNZDnUQ/6fh6bFy18AcnJ6gTXX16APOqB52o4i9dNn
dYP9wCKu6gASZLFyhWV1Om6hbXbevKOzHBwJWq7gssiRNtytf53BhXW5SRiJAaj5
/xVszYu7UyxT+oxjq0ZQFTUba2HMn9qPsMPGmPHQE0UFLgTH49zAv3BdxwNg0Bxa
E5OHVRI73Kv/JIBB3OUFXiflRIrV7oY6D4Ny1mJG/s7W13m5Nf+D5zTYtsQPA2Sy
h13T9strmkWjRy233irQmo4IEQ7N6kRJCoYsVH6D2kxHSWoPKayH/XqOPpIP8EQp
KYRighu4DkqqRi1BcyL/Y6zwPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMOEytu
6XHTgjmIyteDnGVDdKvbMB8GA1UdIwQYMBaAFH93WSBC48h75W7tgdnMsOl0As3X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkE0Ny8xNTkwN0MyMkI4
MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlIdmxidTJCMmN5dzZYUUN6
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2YzZFpJRUxqeUh2bGJ1MkIyY3l3NlhRQ3pkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkE0Ny8xNTkwN0MyMkI4MjExMUVGQUFFNkY1NjdDNEY5QUUwMi9mM2RaSUVManlI
dmxidTJCMmN5dzZYUUN6ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCb1Kp6G2uDqMJWV7jAiiZl/sAaQp9y+ElHtGKJH/OuDYoxqevqlArV
BoJCHM6npLx+3CY6A6mTlUchcSSzc9RT6QTmfrKW5jQOKLyhn1rbCTBj0M90S+9r
oj72vWraG38M97BYxrj6VU0jNrKE/tDfMjxEsZzikGm0OkkXZnOf4qhu8cBaNhhD
G8XQdiKIrEDXWsnn3351FG3fCpEoSAnme+kIHxmz+oY0ZohUAhNsj05M/hIfxhLE
Nt574p55d56hGKApf3fhPUCCd8YadZkLe+3TOtUERXZochZfviUd90ARLSSuiWch
1LAw33pv1+KEY0CHEqbWBBb+67VxIa7c
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:10:01 2025 by rpki-client