This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft
File: 64E_WXYcfGsa4oxHgWfiBhq1ys8.mft (raw, json)
Hash identifier: KwlI9FjPf+BrHR8Bidej1xu0cShxqZJ1QiNElRE8E/0=
Subject key identifier: 21:7C:AB:3C:41:D7:3C:01:2B:B8:25:11:CF:5E:92:42:FA:32:3C:43
Authority key identifier: EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF
Certificate issuer: /CN=A91DD75B/serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF
Certificate serial: 0300
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft
Manifest number: 02FC
Signing time: Fri 19 Dec 2025 00:25:22 +0000
Manifest this update: Fri 19 Dec 2025 00:25:22 +0000
Manifest next update: Fri 26 Dec 2025 00:25:22 +0000
Files and hashes: 1: 64E_WXYcfGsa4oxHgWfiBhq1ys8.crl (hash: Kn/lZ0N6TSlcflR9MFI8U8bc2BH9F878UR7wZcvakbs=)
2: D6A658CE01DE11ED8236F073C4F9AE02.roa (hash: kmjWEDePak7RaIzaM2s6P+tZd0JsQcs5f1UxF22C33k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl
rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768 (0x300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD75B, serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF
Validity
Not Before: Dec 19 00:25:22 2025 GMT
Not After : Dec 26 00:25:22 2025 GMT
Subject: CN=69449b72-4098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:f3:a0:8a:cc:6f:a0:20:e5:3d:1a:a7:69:
4e:48:10:de:a4:20:2d:13:ff:3f:73:16:b2:d3:92:
c3:ef:3d:b6:f6:07:9d:42:2e:f9:43:82:fd:3b:8b:
0f:82:0b:b1:32:6d:d7:a9:50:8a:95:30:9a:65:24:
8b:0b:6a:c2:53:92:cd:63:b9:18:de:8c:0d:17:af:
a4:df:21:ae:78:6e:57:fb:84:6d:39:24:a9:9f:ea:
a8:ed:f8:a4:1f:28:7b:4c:65:e8:e7:3c:ea:a7:7d:
97:1b:bb:4d:64:e4:6c:09:a9:39:6f:cb:00:42:e1:
2f:be:bf:70:ff:8e:75:81:96:90:17:f1:57:f4:ec:
fc:0b:0d:7a:d9:bc:50:e8:cc:a7:f3:b5:ca:96:f1:
a4:84:99:17:8f:ca:e0:78:2f:8c:a2:1b:b0:55:30:
b1:7e:73:e6:f5:f6:72:e9:12:47:3d:f8:62:e8:63:
5a:5c:51:a8:e2:f2:ef:df:db:a5:31:e0:2d:5c:f1:
b1:f8:de:7e:8b:d7:27:74:da:98:c9:77:ef:05:a8:
78:60:85:c2:56:3e:1d:96:b7:e9:4e:68:62:56:30:
11:ab:8c:d5:86:86:a6:0a:8b:40:7b:32:30:66:b0:
f9:63:0c:8a:7f:9d:e8:ca:71:1c:6e:04:5f:c3:85:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7C:AB:3C:41:D7:3C:01:2B:B8:25:11:CF:5E:92:42:FA:32:3C:43
X509v3 Authority Key Identifier:
keyid:EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b2:f3:e0:80:f3:20:01:4f:8b:37:21:7f:fc:7b:00:06:fb:
fd:a8:46:04:16:b3:1a:a7:de:39:05:74:8a:33:a4:3f:9f:14:
ce:c7:97:df:6c:24:95:ba:75:50:03:fd:59:27:ea:cb:7b:31:
3f:53:44:0f:8f:b6:61:6e:5d:07:44:b3:1b:34:9d:9f:eb:ca:
c6:f3:7f:96:c7:99:f3:30:d9:cc:db:61:58:5f:c4:54:3d:c7:
b5:7f:de:59:aa:f1:35:a7:1b:7b:88:62:53:1f:73:9a:0e:dc:
43:ee:ec:39:6c:13:80:0d:89:fa:72:6f:40:3f:56:12:d5:20:
a1:5e:e1:93:5e:e6:ff:4b:c2:23:94:72:8c:40:4f:c9:8f:14:
be:02:6a:54:4f:4d:c7:90:59:1f:c7:c0:20:c7:cf:aa:46:99:
b0:c3:6b:d9:03:2c:d0:59:b8:65:b9:42:b3:1b:de:92:6b:ed:
f6:ab:10:1e:1c:28:ec:cd:a7:3b:ce:b7:cc:23:15:71:d3:29:
d0:e1:4d:d0:8a:76:18:b8:09:de:e0:5a:8e:4f:f9:41:f1:a0:
23:8b:ff:fe:4d:55:62:21:5c:79:7c:d5:3b:ca:7a:7c:b4:c4:
6b:d8:08:5d:82:90:04:f4:5f:b5:42:3d:78:0d:e4:a4:21:ec:
fa:6f:b5:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REQ3NUIxMTAvBgNVBAUTKEVCODEzRjU5NzYxQzdDNkIxQUUyOEM0NzgxNjdFMjA2
MUFCNUNBQ0YwHhcNMjUxMjE5MDAyNTIyWhcNMjUxMjI2MDAyNTIyWjAYMRYwFAYD
VQQDDA02OTQ0OWI3Mi00MDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWzzoIrMb6Ag5T0ap2lOSBDepCAtE/8/cxay05LD7z229gedQi75Q4L9O4sP
gguxMm3XqVCKlTCaZSSLC2rCU5LNY7kY3owNF6+k3yGueG5X+4RtOSSpn+qo7fik
Hyh7TGXo5zzqp32XG7tNZORsCak5b8sAQuEvvr9w/451gZaQF/FX9Oz8Cw162bxQ
6Myn87XKlvGkhJkXj8rgeC+MohuwVTCxfnPm9fZy6RJHPfhi6GNaXFGo4vLv39ul
MeAtXPGx+N5+i9cndNqYyXfvBah4YIXCVj4dlrfpTmhiVjARq4zVhoamCotAezIw
ZrD5YwyKf53oynEcbgRfw4VVkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCF8qzxB
1zwBK7glEc9ekkL6MjxDMB8GA1UdIwQYMBaAFOuBP1l2HHxrGuKMR4Fn4gYatcrP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc1Qi82NEExREE0ODAx
REMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZHc2E0b3hIZ1dmaUJocTF5
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzY0RV9XWFljZkdzYTRveEhnV2ZpQmhxMXlzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RDc1Qi82NEExREE0ODAxREMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZH
c2E0b3hIZ1dmaUJocTF5czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNsvPggPMgAU+LNyF//HsABvv9qEYEFrMap945BXSKM6Q/nxTOx5ff
bCSVunVQA/1ZJ+rLezE/U0QPj7Zhbl0HRLMbNJ2f68rG83+Wx5nzMNnM22FYX8RU
Pce1f95ZqvE1pxt7iGJTH3OaDtxD7uw5bBOADYn6cm9AP1YS1SChXuGTXub/S8Ij
lHKMQE/JjxS+AmpUT03HkFkfx8Agx8+qRpmww2vZAyzQWbhluUKzG96Sa+32qxAe
HCjszac7zrfMIxVx0ynQ4U3QinYYuAne4FqOT/lB8aAji//+TVViIVx5fNU7ynp8
tMRr2AhdgpAE9F+1Qj14DeSkIez6b7UJ
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:03:03 2025 by rpki-client