This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json)
Hash identifier: IyegUkcRGXcOr3S8eY1FzPkSo18WI1RpPKHfnYlv41E=
Subject key identifier: DC:0C:65:09:7D:40:24:3C:A6:A9:D5:38:D8:CB:65:18:AE:48:9E:3E
Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F
Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F
Certificate serial: 0162
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
Manifest number: 0AE1
Signing time: Thu 18 Dec 2025 19:45:00 +0000
Manifest this update: Thu 18 Dec 2025 19:44:59 +0000
Manifest next update: Thu 25 Dec 2025 19:44:59 +0000
Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: 1wL35AuE29TYbPOGEf9DOmx2YPzeX4aIfClrEvrlqOg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl
rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F
Validity
Not Before: Dec 18 19:44:59 2025 GMT
Not After : Dec 25 19:44:59 2025 GMT
Subject: CN=694459bb-57f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:80:77:47:27:ea:7f:b7:85:6f:ef:c0:15:58:
a8:70:a9:d8:af:d5:10:94:7d:03:64:e4:41:60:07:
0c:2f:41:02:f2:e8:55:54:c4:e1:2e:89:a1:ff:b7:
9d:75:b5:69:ed:19:66:20:9f:4f:c6:ef:20:41:09:
4d:e4:23:e4:15:ff:7b:bd:68:a5:16:aa:c8:74:f5:
1e:21:43:e4:36:e6:be:8f:a7:e2:36:de:9d:f8:5e:
3d:b2:c5:17:b0:e4:87:62:80:8c:b9:27:c7:2e:36:
b8:54:b3:8d:d2:d2:b5:2d:16:bc:08:92:ee:41:ff:
63:47:b3:fe:97:57:01:7f:1d:66:df:cb:a2:f9:24:
b3:8f:8d:7e:07:70:9a:8d:ae:6a:fc:f3:da:a2:1d:
d1:1c:3a:bf:f6:1c:67:dd:46:a9:57:5b:07:a0:1a:
3d:17:c2:a5:6c:40:15:20:88:15:d2:07:73:24:64:
c2:d7:c4:c0:20:6c:cd:d6:8f:33:e0:2f:85:47:c1:
df:b8:1b:cc:c7:e0:df:4f:b4:01:92:fe:8c:3b:c6:
33:a5:0b:eb:16:62:8f:b4:59:42:58:72:8a:77:d1:
7e:a9:df:fd:ef:3e:8c:09:e1:c8:09:0f:3c:02:bc:
43:43:8f:54:df:8a:ab:20:28:22:a1:fa:06:4a:2a:
cf:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0C:65:09:7D:40:24:3C:A6:A9:D5:38:D8:CB:65:18:AE:48:9E:3E
X509v3 Authority Key Identifier:
keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:30:32:a2:92:f1:41:ad:81:9c:f7:e5:f2:3d:00:25:78:00:
0b:28:fa:92:c3:1f:0e:e8:fa:f9:3a:0d:9a:52:33:86:25:9c:
61:8b:2b:5a:75:cd:de:8e:aa:0b:12:df:42:a9:5c:20:31:ef:
11:5d:7d:1d:f9:84:10:e5:94:12:0f:d8:0f:42:28:dc:5d:02:
fe:35:28:62:9a:28:77:88:b2:8e:d9:e1:73:df:4a:be:f8:bf:
63:1e:bd:9b:2d:2e:3b:b2:2c:61:2c:9e:65:7d:5a:72:2f:27:
21:57:fb:9c:cc:9f:d8:b2:b2:1e:ad:af:d2:d6:86:c7:6f:99:
cf:08:5f:5d:8b:32:e9:8b:55:29:a8:b9:f2:8b:d8:5f:c6:d3:
34:f9:14:14:87:3c:62:fa:ce:1b:87:7c:78:65:14:6c:cc:32:
9a:de:8c:09:84:5c:e8:7a:55:6b:e6:39:85:4e:63:74:28:85:
9c:54:b7:45:89:ed:c7:cc:d9:59:75:48:4b:d2:8d:4a:d0:21:
c1:70:fc:81:4f:ca:f3:a7:3b:a6:7f:d0:b5:7f:71:d0:5c:a7:
88:a0:32:b5:7a:67:99:84:62:6b:8f:dc:e9:e3:93:d8:3b:31:
62:ee:98:7c:9d:70:f4:dc:06:e8:8b:05:99:70:b6:fe:47:3d:
a9:cb:82:72
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdCNjgxMTAvBgNVBAUTKDlBQ0I4MDY2NjNGQjBGQ0Y2RUJDNDNDMDEwQjkzNUUw
NTIxNEZDOUYwHhcNMjUxMjE4MTk0NDU5WhcNMjUxMjI1MTk0NDU5WjAYMRYwFAYD
VQQDDA02OTQ0NTliYi01N2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5IB3Ryfqf7eFb+/AFViocKnYr9UQlH0DZORBYAcML0EC8uhVVMThLomh/7ed
dbVp7RlmIJ9Pxu8gQQlN5CPkFf97vWilFqrIdPUeIUPkNua+j6fiNt6d+F49ssUX
sOSHYoCMuSfHLja4VLON0tK1LRa8CJLuQf9jR7P+l1cBfx1m38ui+SSzj41+B3Ca
ja5q/PPaoh3RHDq/9hxn3UapV1sHoBo9F8KlbEAVIIgV0gdzJGTC18TAIGzN1o8z
4C+FR8HfuBvMx+DfT7QBkv6MO8YzpQvrFmKPtFlCWHKKd9F+qd/97z6MCeHICQ88
ArxDQ49U34qrICgiofoGSirPBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwMZQl9
QCQ8pqnVONjLZRiuSJ4+MB8GA1UdIwQYMBaAFJrLgGZj+w/PbrxDwBC5NeBSFPyf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw
QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4OXV2RVBBRUxrMTRGSVVf
SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9KOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4
OXV2RVBBRUxrMTRGSVVfSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCMDKikvFBrYGc9+XyPQAleAALKPqSwx8O6Pr5Og2aUjOGJZxhiyta
dc3ejqoLEt9CqVwgMe8RXX0d+YQQ5ZQSD9gPQijcXQL+NShimih3iLKO2eFz30q+
+L9jHr2bLS47sixhLJ5lfVpyLychV/uczJ/YsrIera/S1obHb5nPCF9dizLpi1Up
qLnyi9hfxtM0+RQUhzxi+s4bh3x4ZRRszDKa3owJhFzoelVr5jmFTmN0KIWcVLdF
ie3HzNlZdUhL0o1K0CHBcPyBT8rzpzumf9C1f3HQXKeIoDK1emeZhGJrj9zp45PY
OzFi7ph8nXD03AboiwWZcLb+Rz2py4Jy
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:43 2025 by rpki-client