This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
File: Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json)
Hash identifier: EZgReOK5bJnxi2uW77Mr4Rhphd54GEKac+CWng4kmCA=
Subject key identifier: 61:CE:01:E6:D8:F7:2E:56:86:2E:CE:0F:C6:66:48:85:98:C6:E3:C8
Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
Certificate issuer: /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
Manifest number: BD
Signing time: Fri 19 Dec 2025 05:05:13 +0000
Manifest this update: Fri 19 Dec 2025 05:05:13 +0000
Manifest next update: Fri 26 Dec 2025 05:05:13 +0000
Files and hashes: 1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: +DIx8HxL1Vx3KkKbmEy/vjMi1muQM+dzc/DsgwITH2g=)
2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: jqm9AvgV4FxQG5X3y3xKe8muOycM02nLSK2i0VaGmmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Validity
Not Before: Dec 19 05:05:13 2025 GMT
Not After : Dec 26 05:05:13 2025 GMT
Subject: CN=6944dd09-1e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:dd:d0:77:0b:1f:be:f0:7d:a4:49:44:c0:
fd:84:19:d1:93:4a:87:75:47:d4:0b:6f:9d:aa:8e:
37:02:64:72:b4:31:15:7c:65:82:71:36:dc:17:c6:
a4:4b:5c:d3:b2:89:bb:76:b8:a9:da:63:25:86:04:
91:9f:92:d0:cd:70:02:84:39:87:81:1e:4d:d3:86:
b0:1e:d4:be:fd:51:d3:11:bc:20:29:f0:3d:bf:84:
4c:e2:a0:e9:b8:0b:3e:46:82:e4:3e:4d:e2:74:cb:
ed:2f:67:14:f0:be:ea:3e:3d:eb:e7:bc:41:40:3c:
51:4b:77:ee:56:52:24:76:8f:7a:00:92:fa:17:93:
56:43:05:ad:2e:bd:11:e9:86:ac:ea:f2:ab:7c:cc:
2b:d3:76:d1:c1:c7:bb:09:b6:43:6b:c1:e5:eb:ae:
be:ba:d9:eb:61:e9:fc:3b:f8:2e:70:f5:d3:0b:7a:
ba:5e:7e:e6:a4:2b:65:fb:22:06:12:de:9c:20:13:
7d:67:9d:59:fe:9a:6b:36:e9:c6:bf:d4:36:5e:0d:
63:25:ed:ce:4c:f0:49:92:fa:96:a4:f5:5b:1c:f7:
fe:00:1c:ba:16:7d:a0:34:4d:87:c4:e9:ea:9e:ad:
31:64:5e:95:45:62:14:02:80:21:67:21:f4:6e:36:
38:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CE:01:E6:D8:F7:2E:56:86:2E:CE:0F:C6:66:48:85:98:C6:E3:C8
X509v3 Authority Key Identifier:
keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e8:b7:24:f8:04:ef:a2:df:ca:c6:67:fc:9b:7c:e5:ba:b9:
ec:99:50:af:7d:37:45:a5:55:02:93:f5:4e:41:fa:d3:5f:1d:
a6:77:f8:60:2a:46:85:c6:bc:21:1b:0f:ce:d2:1f:e5:2d:e1:
f1:1d:41:a3:aa:db:c1:a3:01:25:91:68:89:f1:26:1c:a7:d1:
90:bf:6e:c1:02:d8:61:31:e2:e9:d4:fc:60:8b:45:d0:94:ce:
fc:f3:00:4d:e9:98:6b:a9:87:16:0e:eb:db:8f:15:2a:75:63:
43:4f:df:b9:50:fd:da:ca:6a:a2:af:42:cd:7d:44:ae:27:3a:
87:48:12:ab:de:dd:0d:dd:89:d8:21:90:87:2e:65:a0:0b:d4:
45:36:73:96:ed:b4:0f:88:3b:21:15:66:78:91:cf:8c:50:5d:
1f:05:63:67:d2:4b:23:b9:46:0c:3e:a0:87:64:cf:9d:4a:ee:
35:6a:e7:b7:6e:43:8a:0e:4b:c6:6f:29:0a:4b:39:85:08:21:
2f:dc:c7:a6:cb:3a:a6:20:dd:fa:92:c2:08:9b:e5:49:79:94:
09:b7:f0:6b:b4:80:84:2f:8b:cd:2e:a0:95:b3:e7:d2:43:a8:
d8:0e:65:31:34:58:4a:69:3e:4b:59:54:06:4a:2b:ba:1e:24:
45:99:29:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTNCOTQxMTAvBgNVBAUTKDJBNTczOTZEQ0U3MEVCNTZDMDczREUxQTc2MEI2MkE3
MjJCMDQ3OEUwHhcNMjUxMjE5MDUwNTEzWhcNMjUxMjI2MDUwNTEzWjAYMRYwFAYD
VQQDDA02OTQ0ZGQwOS0xZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwCbd0HcLH77wfaRJRMD9hBnRk0qHdUfUC2+dqo43AmRytDEVfGWCcTbcF8ak
S1zTsom7drip2mMlhgSRn5LQzXAChDmHgR5N04awHtS+/VHTEbwgKfA9v4RM4qDp
uAs+RoLkPk3idMvtL2cU8L7qPj3r57xBQDxRS3fuVlIkdo96AJL6F5NWQwWtLr0R
6Yas6vKrfMwr03bRwce7CbZDa8Hl666+utnrYen8O/gucPXTC3q6Xn7mpCtl+yIG
Et6cIBN9Z51Z/pprNunGv9Q2Xg1jJe3OTPBJkvqWpPVbHPf+ABy6Fn2gNE2HxOnq
nq0xZF6VRWIUAoAhZyH0bjY4bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHOAebY
9y5Whi7OD8ZmSIWYxuPIMB8GA1UdIwQYMBaAFCpXOW3OcOtWwHPeGnYLYqcisEeO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0I5NC9BRjQxQkQxMEJD
RDkxMUVGOTJBQjMzMTNDNEY5QUUwMi9LbGM1YmM1dzYxYkFjOTRhZGd0aXB5S3dS
NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0tsYzViYzV3NjFiQWM5NGFkZ3RpcHlLd1I0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
M0I5NC9BRjQxQkQxMEJDRDkxMUVGOTJBQjMzMTNDNEY5QUUwMi9LbGM1YmM1dzYx
YkFjOTRhZGd0aXB5S3dSNDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA96Lck+ATvot/Kxmf8m3zlurnsmVCvfTdFpVUCk/VOQfrTXx2md/hg
KkaFxrwhGw/O0h/lLeHxHUGjqtvBowElkWiJ8SYcp9GQv27BAthhMeLp1Pxgi0XQ
lM788wBN6ZhrqYcWDuvbjxUqdWNDT9+5UP3aymqir0LNfUSuJzqHSBKr3t0N3YnY
IZCHLmWgC9RFNnOW7bQPiDshFWZ4kc+MUF0fBWNn0ksjuUYMPqCHZM+dSu41aue3
bkOKDkvGbykKSzmFCCEv3MemyzqmIN36ksIIm+VJeZQJt/BrtICEL4vNLqCVs+fS
Q6jYDmUxNFhKaT5LWVQGSiu6HiRFmSnS
-----END CERTIFICATE-----
Generated at Sat Dec 20 00:54:38 2025 by rpki-client