This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
File: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft (raw, json)
Hash identifier: O3ytKSqSwCt3dvDvp34p7rRBG58kkJr1lgY/jOX/YNA=
Subject key identifier: 9E:09:93:18:F2:C4:8C:E7:D3:45:C4:5C:B5:B8:E7:21:85:3F:58:32
Authority key identifier: D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
Certificate issuer: /CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Certificate serial: 01AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
Manifest number: 01A1
Signing time: Fri 19 Dec 2025 02:34:08 +0000
Manifest this update: Fri 19 Dec 2025 02:34:08 +0000
Manifest next update: Fri 26 Dec 2025 02:34:08 +0000
Files and hashes: 1: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl (hash: J4KWx/vHxxmE9WFSmmaQ55A6VVpGkwA9xftcTQD/zqg=)
2: E50B556868D011EE8509F75CC4F9AE02.roa (hash: kHoy6v0ysySUqljIfyBeCRCH8CX8TIjWiaPyOL658Kc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:34:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 426 (0x1aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC24F, serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Validity
Not Before: Dec 19 02:34:08 2025 GMT
Not After : Dec 26 02:34:08 2025 GMT
Subject: CN=6944b9a0-6ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:b4:1e:20:c8:3c:61:0c:48:da:7f:06:2d:
44:5b:bf:24:f3:1e:48:df:86:05:3c:7f:b8:a8:ee:
03:3b:e5:fa:7d:16:34:fb:58:9c:1d:6e:8e:77:fc:
dc:ad:c0:56:b2:0a:26:de:ae:ef:02:e3:62:4e:53:
a8:2b:41:61:aa:1a:d7:1b:c8:cc:a3:33:a6:30:c8:
8e:6a:49:23:e1:e2:b2:21:8c:63:29:a8:89:76:48:
a7:3f:74:e5:e5:5f:1e:0b:71:fe:f9:c3:d8:e3:73:
60:56:f8:0b:6b:7b:2f:65:0d:98:e8:35:45:5e:b9:
db:e3:bf:9c:c1:17:09:06:8b:fd:3b:51:b1:25:72:
1a:d1:39:77:8d:73:4b:12:92:59:2b:3e:ce:ac:a2:
d2:5a:e2:cd:3d:51:e4:ed:23:6c:dc:e6:4f:e0:19:
91:c2:22:7e:ed:c1:7d:5a:bc:18:fd:13:69:d4:ff:
d6:0d:91:ff:31:46:82:f5:20:d3:5b:0e:98:96:0f:
f2:52:c9:1e:fb:5c:29:95:75:ce:d3:da:f4:b0:93:
f1:95:96:53:82:78:96:46:d5:ff:84:c9:ae:ba:d5:
f9:b4:36:2b:ca:4a:e2:19:b0:5f:dc:25:60:d1:27:
ab:d8:11:09:87:cb:c8:96:34:2b:ba:86:98:13:34:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:09:93:18:F2:C4:8C:E7:D3:45:C4:5C:B5:B8:E7:21:85:3F:58:32
X509v3 Authority Key Identifier:
keyid:D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b7:03:39:89:f2:c8:0b:5d:54:f9:69:0b:26:0a:d4:07:47:
4d:b4:cb:05:db:3a:8f:62:4f:e9:26:44:07:1a:f8:ba:3c:31:
c5:0a:5e:16:84:10:12:72:6a:6d:23:6f:fc:b7:0a:9b:09:fa:
34:ed:de:12:50:bd:1a:89:a2:57:24:22:72:8b:94:f5:4d:ea:
36:91:9c:5a:64:eb:f6:28:37:93:bb:2a:2d:3d:b1:29:7d:66:
9d:bf:6d:8d:d8:00:1a:68:75:9c:82:da:26:ee:80:75:72:f6:
61:9a:fe:a8:c2:a4:8f:47:9a:9f:c9:79:f6:9d:10:9d:b1:c7:
93:84:44:1a:9d:92:79:b1:08:2e:cb:f7:6e:6a:3c:73:66:f4:
ad:18:a5:5e:4b:9b:5b:cd:27:b1:c7:c9:96:27:f3:a4:7d:df:
16:07:b7:61:c9:a9:b7:71:fb:48:0c:1a:f8:e4:9a:9f:2f:96:
8c:8f:f3:04:6b:c7:9f:9a:7f:17:2d:06:56:97:95:09:ae:99:
26:15:f5:4d:c0:9f:ed:6a:7f:fe:98:21:8b:4e:16:84:bf:51:
2f:e9:eb:4f:3d:22:f7:f2:90:31:ad:1b:0e:fb:25:cf:4e:d3:
3a:b6:87:0c:f7:12:3d:97:25:37:20:8f:fa:75:94:f1:cf:3a:
f7:37:c6:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMyNEYxMTAvBgNVBAUTKEQyNkUyMjMwNjIxOERBOTZDMzAyRkJFQUFDOTQzNzI3
NUIxRUM2RUQwHhcNMjUxMjE5MDIzNDA4WhcNMjUxMjI2MDIzNDA4WjAYMRYwFAYD
VQQDDA02OTQ0YjlhMC02YWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvjS0HiDIPGEMSNp/Bi1EW78k8x5I34YFPH+4qO4DO+X6fRY0+1icHW6Od/zc
rcBWsgom3q7vAuNiTlOoK0FhqhrXG8jMozOmMMiOakkj4eKyIYxjKaiJdkinP3Tl
5V8eC3H++cPY43NgVvgLa3svZQ2Y6DVFXrnb47+cwRcJBov9O1GxJXIa0Tl3jXNL
EpJZKz7OrKLSWuLNPVHk7SNs3OZP4BmRwiJ+7cF9WrwY/RNp1P/WDZH/MUaC9SDT
Ww6Ylg/yUske+1wplXXO09r0sJPxlZZTgniWRtX/hMmuutX5tDYrykriGbBf3CVg
0Ser2BEJh8vIljQruoaYEzQuSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4Jkxjy
xIzn00XEXLW45yGFP1gyMB8GA1UdIwQYMBaAFNJuIjBiGNqWwwL76qyUNydbHsbt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzI0Ri8zQzEzMDU3NjY3
MTAxMUVFOUVDOUExMjdDNEY5QUUwMi8wbTRpTUdJWTJwYkRBdnZxckpRM0oxc2V4
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBtNGlNR0lZMnBiREF2dnFySlEzSjFzZXh1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzI0Ri8zQzEzMDU3NjY3MTAxMUVFOUVDOUExMjdDNEY5QUUwMi8wbTRpTUdJWTJw
YkRBdnZxckpRM0oxc2V4dTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwtwM5ifLIC11U+WkLJgrUB0dNtMsF2zqPYk/pJkQHGvi6PDHFCl4W
hBAScmptI2/8twqbCfo07d4SUL0aiaJXJCJyi5T1Teo2kZxaZOv2KDeTuyotPbEp
fWadv22N2AAaaHWcgtom7oB1cvZhmv6owqSPR5qfyXn2nRCdsceThEQanZJ5sQgu
y/duajxzZvStGKVeS5tbzSexx8mWJ/Okfd8WB7dhyam3cftIDBr45JqfL5aMj/ME
a8efmn8XLQZWl5UJrpkmFfVNwJ/tan/+mCGLThaEv1Ev6etPPSL38pAxrRsO+yXP
TtM6tocM9xI9lyU3II/6dZTxzzr3N8aI
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:23:17 2025 by rpki-client