This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
File: F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft (raw, json)
Hash identifier: x9wvn/9i9fHDiUy2mgILgcR1tfoLqUbmDHllLPTN0S0=
Subject key identifier: 2D:6E:C8:85:38:B0:EC:32:EB:71:89:CD:E4:4C:D9:0C:D3:8A:20:83
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Certificate issuer: /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial: 0847
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
Manifest number: 0831
Signing time: Sat 20 Dec 2025 20:16:08 +0000
Manifest this update: Sat 20 Dec 2025 20:16:07 +0000
Manifest next update: Sat 27 Dec 2025 20:16:07 +0000
Files and hashes: 1: F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl (hash: QCdpi3cFwAdB0XSEGQZ6aoKttqaXQIOSpCQ7Rnpmee0=)
2: 42BB5BC2CB8A11F089E0C00EC4F9AE02.roa (hash: riyQ4tMzQ09xCak6IobwkZ17KBT1t0gIAkDuZwr3i8A=)
3: 70F65056CDB911F0BDBD9948C4F9AE02.roa (hash: i3kN9zOmW8MzS2ERJPX+9kG2NDm4ZC2xsgwcobtDT9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 20:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119 (0x847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Validity
Not Before: Dec 20 20:16:07 2025 GMT
Not After : Dec 27 20:16:07 2025 GMT
Subject: CN=69470407-5bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:9f:8d:8c:7c:46:73:53:3a:1a:e9:c6:23:
0d:8a:f9:a3:e7:00:42:9c:a6:bf:cd:71:76:b5:d0:
dc:57:e4:a4:05:81:c3:45:4f:9a:c3:bc:af:56:6d:
86:09:c3:b3:c0:e8:38:dd:58:8c:9d:81:e9:99:6b:
fb:b7:99:c9:51:15:9d:05:30:0f:e3:54:25:7c:6d:
e8:0c:9f:53:d9:15:09:32:c1:29:d1:ed:f5:33:ab:
2f:2d:fa:32:33:b8:d8:01:a7:b6:2d:b8:e5:ae:26:
0a:df:ef:60:78:d2:df:ad:9d:d8:1e:8a:dd:d0:e2:
1a:5d:fc:d3:49:a8:48:8d:62:1a:38:a9:ca:a3:b6:
bb:e3:6d:15:fd:65:6d:de:36:2c:59:01:a0:60:0b:
ac:c8:7a:67:a7:0c:53:e6:3f:2a:80:90:cd:e1:a2:
d0:c8:ff:87:25:2f:a2:fe:e2:23:ef:d6:4d:f5:05:
98:c0:c6:f8:7f:7a:4a:6b:25:c1:72:44:ad:ae:0b:
83:79:67:98:ab:82:55:8e:f1:59:72:01:9f:09:1e:
39:a0:0b:64:75:45:b2:31:d2:73:83:3f:d8:b9:70:
43:8c:12:0b:2b:a3:45:6b:7f:39:2f:2e:40:a8:37:
3e:2f:71:9a:84:3b:d1:a3:e7:6a:00:ca:bd:69:b4:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:C8:85:38:B0:EC:32:EB:71:89:CD:E4:4C:D9:0C:D3:8A:20:83
X509v3 Authority Key Identifier:
keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:bd:73:f5:fc:12:e6:e1:2e:a3:2e:ba:fd:2b:ba:81:2a:01:
c1:4a:ae:b0:e8:17:15:38:db:62:ed:d4:c3:0a:3b:e5:68:c2:
9b:55:42:e1:c7:1f:b6:53:85:31:ee:9b:40:5d:ea:0e:cb:93:
fa:93:22:0f:11:ca:5c:6d:3c:3f:19:fe:f8:f8:45:b0:11:b1:
8f:37:b6:3d:ef:68:bc:2d:50:8a:85:ce:65:74:68:ad:16:28:
54:be:9f:5b:75:bf:de:7b:89:8f:46:44:d8:8e:a8:8e:41:31:
c8:93:6e:f4:23:f4:05:0e:4d:89:57:64:2e:99:73:5d:8c:34:
d3:81:c1:83:08:b2:24:bb:8c:11:bc:c1:47:0b:88:01:0f:4e:
6a:bb:14:5c:ad:da:a6:df:4e:d2:d0:ae:c6:c2:a8:0a:0a:38:
55:52:4c:26:69:78:ce:89:f2:4f:a4:73:74:09:26:7b:8f:d6:
92:fe:8f:97:e4:31:23:14:c6:9d:d6:7f:96:12:92:e6:2c:9c:
6e:69:65:e3:12:60:e3:56:69:df:b1:3f:1e:26:2e:b8:60:8e:
75:f4:48:b1:7b:f7:6c:ea:4a:82:7a:6f:3a:0a:55:26:65:68:
99:24:78:45:5f:33:66:21:d7:6b:04:3e:f2:62:58:c7:99:39:
d5:29:43:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQxN0YxMTAvBgNVBAUTKDE3RjRGQjEyODc1NkVCQjBCQUM1OUQ0RTBGNEI3RTA4
NzI3OTc2MEQwHhcNMjUxMjIwMjAxNjA3WhcNMjUxMjI3MjAxNjA3WjAYMRYwFAYD
VQQDDA02OTQ3MDQwNy01YmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqsifjYx8RnNTOhrpxiMNivmj5wBCnKa/zXF2tdDcV+SkBYHDRU+aw7yvVm2G
CcOzwOg43ViMnYHpmWv7t5nJURWdBTAP41QlfG3oDJ9T2RUJMsEp0e31M6svLfoy
M7jYAae2LbjlriYK3+9geNLfrZ3YHord0OIaXfzTSahIjWIaOKnKo7a7420V/WVt
3jYsWQGgYAusyHpnpwxT5j8qgJDN4aLQyP+HJS+i/uIj79ZN9QWYwMb4f3pKayXB
ckStrguDeWeYq4JVjvFZcgGfCR45oAtkdUWyMdJzgz/YuXBDjBILK6NFa385Ly5A
qDc+L3GahDvRo+dqAMq9abTnEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1uyIU4
sOwy63GJzeRM2QzTiiCDMB8GA1UdIwQYMBaAFBf0+xKHVuuwusWdTg9LfghyeXYN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDE3Ri9BNTZENUY0MEZC
NDcxMUVBQkVGNDdEM0VDNEY5QUUwMi9GX1Q3RW9kVzY3QzZ4WjFPRDB0LUNISjVk
ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZfVDdFb2RXNjdDNnhaMU9EMHQtQ0hKNWRnMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDE3Ri9BNTZENUY0MEZCNDcxMUVBQkVGNDdEM0VDNEY5QUUwMi9GX1Q3RW9kVzY3
QzZ4WjFPRDB0LUNISjVkZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8vXP1/BLm4S6jLrr9K7qBKgHBSq6w6BcVONti7dTDCjvlaMKbVULh
xx+2U4Ux7ptAXeoOy5P6kyIPEcpcbTw/Gf74+EWwEbGPN7Y972i8LVCKhc5ldGit
FihUvp9bdb/ee4mPRkTYjqiOQTHIk270I/QFDk2JV2QumXNdjDTTgcGDCLIku4wR
vMFHC4gBD05quxRcrdqm307S0K7GwqgKCjhVUkwmaXjOifJPpHN0CSZ7j9aS/o+X
5DEjFMad1n+WEpLmLJxuaWXjEmDjVmnfsT8eJi64YI519Eixe/ds6kqCem86ClUm
ZWiZJHhFXzNmIddrBD7yYljHmTnVKUOn
-----END CERTIFICATE-----
Generated at Sat Dec 20 23:10:24 2025 by rpki-client