This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
File: PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json)
Hash identifier: UJLrwptd1S6lqcW92HfCNox8QFx7FOFOVb/lAwo59xg=
Subject key identifier: 22:D4:BA:ED:15:7F:88:BE:8C:3F:3C:3E:20:0D:83:3E:59:49:7B:F1
Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
Certificate issuer: /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Certificate serial: 08EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
Manifest number: 08E6
Signing time: Sun 28 Dec 2025 19:47:46 +0000
Manifest this update: Sun 28 Dec 2025 19:47:45 +0000
Manifest next update: Sun 04 Jan 2026 19:47:45 +0000
Files and hashes: 1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: yKimjW3ppbTyyQVi7rgfBjLmRzDKTy9Acx7lX/DmhhA=)
2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: /a+ZA2ERE3wFJg9UM9vnT7hTqkW6cEzxlPnScilW2Xc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl
rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 19:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2287 (0x8ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Validity
Not Before: Dec 28 19:47:45 2025 GMT
Not After : Jan 4 19:47:45 2026 GMT
Subject: CN=69518962-0f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:4f:fd:44:f3:99:4a:82:6c:79:bc:dc:ea:
90:76:f7:c4:f0:c1:31:88:16:9b:96:bf:d4:6a:d5:
47:34:fa:50:43:fc:80:a8:aa:03:89:68:d8:9d:92:
a1:47:a8:86:38:a4:de:62:24:f0:57:0f:c2:7e:a9:
e2:75:da:4a:ef:c1:7b:18:ec:f8:2c:c0:45:b6:d3:
84:bd:dd:5b:ec:1b:99:4e:cc:e3:c3:71:0b:9c:52:
3a:5c:2c:61:2a:8b:a8:35:cd:55:b0:f9:a8:ed:40:
28:c5:d8:bf:c7:0a:aa:22:cb:3b:3c:87:44:b0:b9:
ae:34:93:6c:f3:86:47:3e:82:e8:9d:7e:5d:cb:c8:
d1:35:41:ce:e5:47:a2:ac:63:e7:0a:ab:5d:c4:77:
bd:7f:30:5f:3a:9d:e1:60:17:7a:28:e1:43:52:29:
20:bc:a8:73:16:d6:56:0b:7d:58:7c:8f:45:e6:f7:
84:6d:ea:75:46:21:7a:c4:1c:46:e4:b5:0b:fa:e7:
6e:18:35:ef:37:2d:d4:01:ef:d4:11:97:e1:d7:e3:
62:34:d2:07:7c:e6:84:d0:dc:2d:db:54:a6:a5:96:
7c:3e:05:fe:4f:c0:7a:a8:b5:3e:3c:48:41:12:89:
a0:fc:53:a2:b4:d3:1e:72:89:2b:39:b6:7c:e8:91:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D4:BA:ED:15:7F:88:BE:8C:3F:3C:3E:20:0D:83:3E:59:49:7B:F1
X509v3 Authority Key Identifier:
keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:85:29:a6:4f:20:fb:ab:93:1f:a9:bb:73:a5:1c:7b:3f:40:
bb:c5:de:45:2f:14:94:3b:09:97:51:c3:21:2d:2d:12:b7:d6:
fd:80:6f:cd:70:3c:78:c7:9e:79:50:06:38:43:f2:6a:99:18:
c8:3c:f2:07:d5:b6:83:48:93:ce:b7:27:c9:30:f7:5c:87:a8:
87:92:63:0f:11:fb:28:98:6f:1c:58:3d:2b:71:a3:fd:fb:06:
04:89:c4:a7:44:6f:69:6f:5e:7d:30:4a:41:bc:e4:cc:b2:c7:
d7:4e:e8:15:98:5f:48:8e:05:7c:ce:f3:f0:81:8a:33:57:52:
36:1d:5d:48:19:17:4b:6f:ce:02:0e:43:d4:77:f7:1b:aa:90:
c7:85:79:c0:a0:3d:83:5d:33:e3:8f:67:a7:38:98:de:4e:58:
4d:1a:4d:18:77:ee:36:af:8c:45:0a:e8:b5:ca:e0:78:1c:2e:
a5:ef:0a:ca:77:6a:df:69:46:4e:5a:05:fa:bb:4a:78:c1:a8:
17:56:a6:33:c0:ae:97:25:9f:f6:2c:a4:f0:97:d0:a0:3e:05:
c5:59:ab:ce:48:6f:1a:23:f4:22:b5:b3:a0:17:8c:e3:26:53:
4b:6a:ec:4b:2f:13:36:95:57:69:cf:03:cb:10:03:0d:67:3d:
e3:aa:ca:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFQzIxMTAvBgNVBAUTKDNEMzg5MUE0NkNCQ0JBQjQ3NDc4REVBNDBEMjkwOEY2
N0NDRTNCMkEwHhcNMjUxMjI4MTk0NzQ1WhcNMjYwMTA0MTk0NzQ1WjAYMRYwFAYD
VQQDDA02OTUxODk2Mi0wZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7RP/UTzmUqCbHm83OqQdvfE8MExiBablr/UatVHNPpQQ/yAqKoDiWjYnZKh
R6iGOKTeYiTwVw/CfqniddpK78F7GOz4LMBFttOEvd1b7BuZTszjw3ELnFI6XCxh
KouoNc1VsPmo7UAoxdi/xwqqIss7PIdEsLmuNJNs84ZHPoLonX5dy8jRNUHO5Uei
rGPnCqtdxHe9fzBfOp3hYBd6KOFDUikgvKhzFtZWC31YfI9F5veEbep1RiF6xBxG
5LUL+uduGDXvNy3UAe/UEZfh1+NiNNIHfOaE0Nwt21SmpZZ8PgX+T8B6qLU+PEhB
Eomg/FOitNMecokrObZ86JGc4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLUuu0V
f4i+jD88PiANgz5ZSXvxMB8GA1UdIwQYMBaAFD04kaRsvLq0dHjepA0pCPZ8zjsq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVDMi8yRERERDI2Q0My
QzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVyUjBlTjZrRFNrSTluek9P
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BUaVJwR3k4dXJSMGVONmtEU2tJOW56T095by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QUVDMi8yRERERDI2Q0MyQzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVy
UjBlTjZrRFNrSTluek9PeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCehSmmTyD7q5MfqbtzpRx7P0C7xd5FLxSUOwmXUcMhLS0St9b9gG/N
cDx4x555UAY4Q/JqmRjIPPIH1baDSJPOtyfJMPdch6iHkmMPEfsomG8cWD0rcaP9
+wYEicSnRG9pb159MEpBvOTMssfXTugVmF9IjgV8zvPwgYozV1I2HV1IGRdLb84C
DkPUd/cbqpDHhXnAoD2DXTPjj2enOJjeTlhNGk0Yd+42r4xFCui1yuB4HC6l7wrK
d2rfaUZOWgX6u0p4wagXVqYzwK6XJZ/2LKTwl9CgPgXFWavOSG8aI/QitbOgF4zj
JlNLauxLLxM2lVdpzwPLEAMNZz3jqsrZ
-----END CERTIFICATE-----
Generated at Tue Dec 30 07:04:34 2025 by rpki-client