This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
File: xCoYwre3JR8lBvX6J4oWLoRETaY.mft (raw, json)
Hash identifier: Y2pubHVdqLXgxQIwOwy7TrZF//ccuS6VYZRlur9NsZE=
Subject key identifier: 6B:62:38:EA:42:79:77:DA:D1:85:F9:1B:C2:BD:97:9F:73:D6:4A:ED
Authority key identifier: C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6
Certificate issuer: /CN=A91B7740/serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6
Certificate serial: 0519
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
Manifest number: 0512
Signing time: Thu 18 Dec 2025 22:58:40 +0000
Manifest this update: Thu 18 Dec 2025 22:58:40 +0000
Manifest next update: Thu 25 Dec 2025 22:58:40 +0000
Files and hashes: 1: xCoYwre3JR8lBvX6J4oWLoRETaY.crl (hash: iZBGR7WEnovQAjtKB3zS1G58kZpelU0RIasppsHtoRw=)
2: 980E2450325111EC93E97C35C4F9AE02.roa (hash: NBcgBUuRK2Oc31nKRp+BExXYFoPfjJAOt1Hb95kMeP4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl
rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1305 (0x519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7740, serialNumber=C42A18C2B7B7251F2506F5FA278A162E84444DA6
Validity
Not Before: Dec 18 22:58:40 2025 GMT
Not After : Dec 25 22:58:40 2025 GMT
Subject: CN=69448720-c9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:f7:69:8e:96:a0:4f:6f:df:cf:39:8f:42:
5a:fc:77:dc:75:f4:09:ae:c0:64:13:8d:e8:40:08:
65:43:5d:fc:fe:3e:b0:b6:fa:42:d8:ce:bc:66:c5:
1d:16:3f:4d:63:66:d4:6f:52:26:ff:b7:db:57:32:
42:9e:85:41:3a:aa:e4:58:78:72:5e:f8:e3:4c:24:
f2:6a:3d:3d:da:08:20:f0:4e:78:9d:60:4b:e0:1e:
9f:d9:60:5c:68:fa:cb:52:ee:93:6a:24:f5:ca:41:
36:98:60:78:d2:84:1a:2c:ef:48:63:8e:7e:2c:aa:
80:3c:19:7e:34:d2:52:e6:bb:46:18:bf:89:b9:1d:
e9:e7:d0:cb:1e:c7:67:36:0b:d9:e1:b6:bd:6d:dd:
53:ac:24:1a:95:5e:ec:bc:cf:7b:43:5c:d5:d2:6c:
9d:6b:ee:ee:85:c9:28:1e:2e:79:00:24:8b:48:ca:
48:57:6a:33:ac:81:4c:b1:6d:47:66:43:1c:4d:86:
ae:e8:bf:fd:a7:f8:9b:28:82:b3:3d:44:2c:35:33:
a8:14:1a:76:e3:9f:c9:f0:aa:9c:eb:9b:9a:d5:60:
c1:f1:da:62:37:6d:9c:e0:f0:35:79:6b:8a:0c:16:
82:14:56:d8:51:5c:a1:77:4d:a0:93:f9:75:56:93:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:62:38:EA:42:79:77:DA:D1:85:F9:1B:C2:BD:97:9F:73:D6:4A:ED
X509v3 Authority Key Identifier:
keyid:C4:2A:18:C2:B7:B7:25:1F:25:06:F5:FA:27:8A:16:2E:84:44:4D:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCoYwre3JR8lBvX6J4oWLoRETaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7740/F3A719DE323311ECB2B43463C4F9AE02/xCoYwre3JR8lBvX6J4oWLoRETaY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:ab:30:11:e0:a8:de:71:19:cd:56:a1:b5:d4:70:37:ab:0d:
f2:69:65:a0:c5:9c:38:10:ab:87:57:64:e9:3f:30:d8:08:09:
cc:61:48:4d:e1:11:4b:f7:49:b5:3f:9d:d1:84:3c:60:ba:c4:
a2:77:9a:73:e0:a3:72:ee:02:61:0d:c6:28:f3:84:81:34:66:
a2:58:00:a7:c8:75:8f:98:14:3a:33:99:19:55:34:3d:3d:35:
37:00:69:80:42:7f:34:fd:16:3b:da:a0:b9:b8:71:f4:b5:d5:
de:0c:17:82:1b:1b:61:f3:b1:8c:b6:4d:89:79:de:5f:60:bb:
c0:f7:4e:2e:7b:b4:b8:89:a4:96:e9:f8:39:0a:a2:a0:fc:cd:
36:67:ba:1c:bb:77:d3:cd:f1:bb:58:1a:0c:6a:2f:a8:bd:cb:
ad:d7:9b:a1:c6:40:a4:1a:ec:4d:72:56:7c:fc:78:d8:07:3b:
52:c2:b9:28:38:10:c5:3e:f1:57:1e:f4:83:e7:c7:4a:0e:20:
ed:06:1e:44:c0:61:8c:9b:f3:3d:8f:14:4e:1a:0f:fe:bf:d8:
1c:06:f8:1a:cc:46:5f:6c:aa:72:fc:1b:0f:0e:5d:7f:ba:63:
50:37:30:ca:12:e0:f0:97:93:ae:b5:c5:f4:54:30:21:ea:08:
6b:1e:b2:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3NDAxMTAvBgNVBAUTKEM0MkExOEMyQjdCNzI1MUYyNTA2RjVGQTI3OEExNjJF
ODQ0NDREQTYwHhcNMjUxMjE4MjI1ODQwWhcNMjUxMjI1MjI1ODQwWjAYMRYwFAYD
VQQDDA02OTQ0ODcyMC1jOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAimr3aY6WoE9v3885j0Ja/HfcdfQJrsBkE43oQAhlQ138/j6wtvpC2M68ZsUd
Fj9NY2bUb1Im/7fbVzJCnoVBOqrkWHhyXvjjTCTyaj092ggg8E54nWBL4B6f2WBc
aPrLUu6TaiT1ykE2mGB40oQaLO9IY45+LKqAPBl+NNJS5rtGGL+JuR3p59DLHsdn
NgvZ4ba9bd1TrCQalV7svM97Q1zV0myda+7uhckoHi55ACSLSMpIV2ozrIFMsW1H
ZkMcTYau6L/9p/ibKIKzPUQsNTOoFBp245/J8Kqc65ua1WDB8dpiN22c4PA1eWuK
DBaCFFbYUVyhd02gk/l1VpNpFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtiOOpC
eXfa0YX5G8K9l59z1krtMB8GA1UdIwQYMBaAFMQqGMK3tyUfJQb1+ieKFi6ERE2m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc0MC9GM0E3MTlERTMy
MzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pSOGxCdlg2SjRvV0xvUkVU
YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hDb1l3cmUzSlI4bEJ2WDZKNG9XTG9SRVRhWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Nzc0MC9GM0E3MTlERTMyMzMxMUVDQjJCNDM0NjNDNEY5QUUwMi94Q29Zd3JlM0pS
OGxCdlg2SjRvV0xvUkVUYVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQqzAR4KjecRnNVqG11HA3qw3yaWWgxZw4EKuHV2TpPzDYCAnMYUhN
4RFL90m1P53RhDxgusSid5pz4KNy7gJhDcYo84SBNGaiWACnyHWPmBQ6M5kZVTQ9
PTU3AGmAQn80/RY72qC5uHH0tdXeDBeCGxth87GMtk2Jed5fYLvA904ue7S4iaSW
6fg5CqKg/M02Z7ocu3fTzfG7WBoMai+ovcut15uhxkCkGuxNclZ8/HjYBztSwrko
OBDFPvFXHvSD58dKDiDtBh5EwGGMm/M9jxROGg/+v9gcBvgazEZfbKpy/BsPDl1/
umNQNzDKEuDwl5OutcX0VDAh6ghrHrKx
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:55 2025 by rpki-client