This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
File: 788FLZiSks6xBQkSnI3iA9SfaAQ.mft (raw, json)
Hash identifier: q8Tx9aHLuYvAdGHL1PG57hZ+7Wat+aaGfD4/T7DdABs=
Subject key identifier: 5F:41:E2:E1:2F:9E:CE:38:8E:CF:1B:6B:EE:55:F7:20:48:6C:F3:9F
Authority key identifier: EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04
Certificate issuer: /CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804
Certificate serial: 0DBA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
Manifest number: 0DB2
Signing time: Thu 18 Dec 2025 17:41:26 +0000
Manifest this update: Thu 18 Dec 2025 17:41:25 +0000
Manifest next update: Thu 25 Dec 2025 17:41:25 +0000
Files and hashes: 1: 788FLZiSks6xBQkSnI3iA9SfaAQ.crl (hash: 2p3qira1IVT5O9V9RRKnJ1IPNjW8iBi3FVsmd90JXNM=)
2: 1004D41ED21D11E992825429C4F9AE02.roa (hash: FAN1R0kTPo6CVZLPRUbNgZ570C6pJVmhGPN5h/j558A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl
rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3514 (0xdba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EB9C0, serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804
Validity
Not Before: Dec 18 17:41:25 2025 GMT
Not After : Dec 25 17:41:25 2025 GMT
Subject: CN=69443cc6-e20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:2b:48:83:d9:37:e6:1b:0a:be:00:fe:04:
b3:74:c0:9f:f0:af:b9:fa:8d:07:f9:13:45:ac:a4:
32:37:92:e0:de:b4:fe:60:53:dd:8c:82:fc:f3:08:
0f:ab:a8:63:1b:9f:21:0e:c9:c5:5a:85:04:eb:ba:
3e:37:04:35:70:51:d5:7a:ea:46:45:1e:6c:a1:ba:
39:89:50:ba:87:2d:78:01:e0:91:be:ee:f4:7a:d7:
1c:60:96:f1:2e:8c:d1:d4:dd:1f:93:7d:80:b6:a5:
69:fb:0f:4e:a7:c9:3c:71:45:ff:88:b6:b3:77:c7:
4c:30:ed:ad:8c:07:c1:58:14:9a:ff:63:66:6c:e9:
63:3b:1a:24:3f:d0:56:ef:0c:b1:d8:4c:56:93:41:
94:1e:fa:22:5d:ba:db:76:a4:d7:81:43:f8:d3:85:
b4:09:dc:33:b0:f7:cf:f3:8c:c3:17:0d:8b:ec:03:
69:30:80:db:d6:f7:11:0e:ef:bb:33:6c:59:2e:6c:
4f:56:d5:33:39:0f:ba:ba:1d:e6:bb:f3:80:26:49:
53:63:3e:43:02:5e:51:95:e8:4b:31:b5:90:d3:14:
e6:3d:f3:ce:fe:a3:ba:75:89:23:b8:97:80:21:95:
39:b0:5d:35:88:ae:e6:99:e0:ba:43:1d:60:f5:b6:
e4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:41:E2:E1:2F:9E:CE:38:8E:CF:1B:6B:EE:55:F7:20:48:6C:F3:9F
X509v3 Authority Key Identifier:
keyid:EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:8e:57:cf:83:89:52:6b:4f:3a:cc:ba:77:5d:24:63:06:99:
50:70:b9:ec:bb:d0:1f:42:3f:4c:3d:8b:ec:f2:81:21:e2:2e:
d3:e3:28:fe:7d:72:43:e8:5f:4f:d2:b0:67:d1:d1:b6:01:bd:
bf:0a:9c:60:95:de:4a:ed:f6:78:0e:55:80:ca:c5:32:69:c9:
3e:e8:34:b0:2d:5d:ac:c1:be:74:99:02:5b:e9:c4:e9:7b:e8:
7f:15:81:b2:3b:a5:1c:62:53:ee:a0:e4:cf:7f:63:17:2c:ae:
5f:e6:23:8c:c2:a7:ff:92:e7:bd:cb:33:bb:44:2e:b8:48:f1:
81:3d:5f:af:bf:1e:f5:5b:1d:a9:57:df:ee:32:a0:74:0b:67:
76:76:d1:73:c5:ee:2a:87:8e:77:f0:99:9b:7d:18:b1:8f:44:
cb:90:d0:3a:31:4a:4e:76:2e:39:7d:d3:57:ff:72:38:1d:47:
9c:cc:5b:2a:6d:e2:07:5f:6c:ee:7a:df:b8:54:40:ac:ee:46:
aa:f0:8b:3b:a1:5b:e0:b4:ea:aa:b3:55:72:e7:9b:3a:47:37:
71:95:79:fb:3b:1f:ee:93:08:5d:11:be:4b:02:78:c3:79:a0:
09:7c:ec:e5:59:74:c8:e1:82:bc:b2:1a:b0:cb:b8:48:74:a9:
6d:f2:41:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI5QzAxMTAvBgNVBAUTKEVGQ0YwNTJEOTg5MjkyQ0VCMTA1MDkxMjlDOERFMjAz
RDQ5RjY4MDQwHhcNMjUxMjE4MTc0MTI1WhcNMjUxMjI1MTc0MTI1WjAYMRYwFAYD
VQQDDA02OTQ0M2NjNi1lMjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3IErSIPZN+YbCr4A/gSzdMCf8K+5+o0H+RNFrKQyN5Lg3rT+YFPdjIL88wgP
q6hjG58hDsnFWoUE67o+NwQ1cFHVeupGRR5sobo5iVC6hy14AeCRvu70etccYJbx
LozR1N0fk32AtqVp+w9Op8k8cUX/iLazd8dMMO2tjAfBWBSa/2NmbOljOxokP9BW
7wyx2ExWk0GUHvoiXbrbdqTXgUP404W0CdwzsPfP84zDFw2L7ANpMIDb1vcRDu+7
M2xZLmxPVtUzOQ+6uh3mu/OAJklTYz5DAl5RlehLMbWQ0xTmPfPO/qO6dYkjuJeA
IZU5sF01iK7mmeC6Qx1g9bbkZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9B4uEv
ns44js8ba+5V9yBIbPOfMB8GA1UdIwQYMBaAFO/PBS2YkpLOsQUJEpyN4gPUn2gE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjlDMC9EMzY0RjBDQ0Qy
MUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tzNnhCUWtTbkkzaUE5U2Zh
QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzc4OEZMWmlTa3M2eEJRa1NuSTNpQTlTZmFBUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QjlDMC9EMzY0RjBDQ0QyMUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tz
NnhCUWtTbkkzaUE5U2ZhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYjlfPg4lSa086zLp3XSRjBplQcLnsu9AfQj9MPYvs8oEh4i7T4yj+
fXJD6F9P0rBn0dG2Ab2/Cpxgld5K7fZ4DlWAysUyack+6DSwLV2swb50mQJb6cTp
e+h/FYGyO6UcYlPuoOTPf2MXLK5f5iOMwqf/kue9yzO7RC64SPGBPV+vvx71Wx2p
V9/uMqB0C2d2dtFzxe4qh4538JmbfRixj0TLkNA6MUpOdi45fdNX/3I4HUeczFsq
beIHX2zuet+4VECs7kaq8Is7oVvgtOqqs1Vy55s6RzdxlXn7Ox/ukwhdEb5LAnjD
eaAJfOzlWXTI4YK8shqwy7hIdKlt8kHc
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:45:02 2025 by rpki-client