This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
File: FDm85NeiKugDbOsu5uavGPIbtZM.mft (raw, json)
Hash identifier: oPfouZEMKf1r6W2c0u4VVbyHmeOTftO8DWH3t0YarAc=
Subject key identifier: 5B:DD:71:A0:C4:C8:3E:17:6D:A6:15:66:72:F7:59:3A:60:56:33:38
Authority key identifier: 14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
Certificate issuer: /CN=A91F57D9/serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Certificate serial: 0404
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
Manifest number: 03F8
Signing time: Thu 18 Dec 2025 23:47:25 +0000
Manifest this update: Thu 18 Dec 2025 23:47:25 +0000
Manifest next update: Thu 25 Dec 2025 23:47:25 +0000
Files and hashes: 1: FDm85NeiKugDbOsu5uavGPIbtZM.crl (hash: Nu1CT4yn0IidY9OM75+rAd/Atm6t5Xf/LUsDZrTWzb8=)
2: CD22C9C8DC0D11ECA064B94CC4F9AE02.roa (hash: h1qvpOWxudSOhwTtJ3Z+p/+X0JRO+haXbihi5IJyhXw=)
3: F8071E24DC1111EC80AE816DC4F9AE02.roa (hash: PFuingXxJbCOLfO1PJLeoU0/1sSC/bFas5mcjNMMakg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1028 (0x404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F57D9, serialNumber=1439BCE4D7A22AE8036CEB2EE6E6AF18F21BB593
Validity
Not Before: Dec 18 23:47:25 2025 GMT
Not After : Dec 25 23:47:25 2025 GMT
Subject: CN=6944928d-a12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:19:79:c1:0a:e5:85:44:72:a4:c3:1c:2b:
f5:a9:48:82:80:5a:1b:80:5c:e6:ad:7b:77:97:29:
ca:be:6e:36:97:ac:bc:60:3a:6b:31:b9:87:b5:ae:
88:08:b0:f3:ff:2d:1c:aa:e5:a1:d1:1f:62:e0:a4:
e3:7d:b5:6d:88:00:32:d9:f6:19:2d:c6:44:c7:33:
8b:4f:98:1c:2e:cc:69:12:3f:6c:c8:f5:e9:d2:83:
78:d5:b2:03:4d:ae:8d:1a:a9:8f:ce:d3:2d:6d:2f:
6a:39:cb:f0:30:38:23:6e:56:38:d9:23:a4:80:dc:
6b:80:4b:4c:58:f2:3d:dc:34:7a:44:3b:50:f0:26:
01:34:47:7a:17:6d:03:a8:85:6a:97:54:62:70:00:
ba:d1:b8:cb:27:10:7f:fe:27:9c:66:f5:9c:ab:55:
29:e8:64:87:84:e7:29:e7:8a:66:10:b6:b2:24:07:
60:8c:5f:08:ea:8c:d2:a5:f7:8a:79:27:ba:40:a2:
0a:6c:04:d0:08:bc:ec:fe:42:cc:9b:1f:60:b6:9a:
c3:93:10:18:45:c1:07:0a:58:13:9f:46:4f:08:57:
e7:a3:5d:85:b4:da:52:16:33:b9:7f:68:83:2d:e5:
ae:4d:e9:9a:c1:90:7e:d3:30:a2:dc:ce:22:08:ff:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DD:71:A0:C4:C8:3E:17:6D:A6:15:66:72:F7:59:3A:60:56:33:38
X509v3 Authority Key Identifier:
keyid:14:39:BC:E4:D7:A2:2A:E8:03:6C:EB:2E:E6:E6:AF:18:F2:1B:B5:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDm85NeiKugDbOsu5uavGPIbtZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F57D9/0717E9EE9F5D11ECBBCA9618C4F9AE02/FDm85NeiKugDbOsu5uavGPIbtZM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:e5:49:88:80:d2:01:e8:2a:37:e1:3e:8d:7f:2b:a9:86:35:
7f:cc:10:0e:43:61:1b:ef:0d:04:70:f0:f1:20:c1:eb:ee:d4:
0e:63:47:8b:fe:9e:0b:0f:52:e5:3c:cc:9a:4f:90:f2:e0:e3:
cf:84:5a:e6:c6:64:b4:80:11:6a:4d:58:b8:ce:bb:e0:14:dd:
09:2a:89:32:55:65:60:5f:fb:51:3b:bd:c2:27:c2:0c:76:7b:
65:d5:b5:da:0f:41:5d:c4:82:3b:1a:55:28:9d:0b:9c:a3:b8:
b0:5f:08:69:fd:cc:86:60:da:f7:78:25:5d:39:ee:c9:1b:42:
b6:e0:23:7b:0d:c9:3e:0c:0c:c9:e2:f3:ea:7d:cb:37:02:96:
4c:a5:8d:0c:3f:3e:82:df:11:f5:d9:ee:f2:95:20:64:7e:2c:
bc:2f:81:83:12:4d:6c:19:d2:ca:f4:6d:cc:15:fd:d6:7b:78:
ad:69:8f:ae:51:4f:19:60:ce:30:09:b0:0c:7f:aa:ea:c2:1c:
24:e3:1d:bc:ca:34:8f:b7:4a:3e:d5:fa:e1:79:83:0f:48:39:
6c:9a:41:6a:4c:b9:e9:12:a9:34:fc:d4:02:37:31:c3:6f:23:
06:72:86:00:63:4c:3d:65:19:49:2d:05:df:04:91:15:1e:34:
f3:03:de:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU3RDkxMTAvBgNVBAUTKDE0MzlCQ0U0RDdBMjJBRTgwMzZDRUIyRUU2RTZBRjE4
RjIxQkI1OTMwHhcNMjUxMjE4MjM0NzI1WhcNMjUxMjI1MjM0NzI1WjAYMRYwFAYD
VQQDDA02OTQ0OTI4ZC1hMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyGUZecEK5YVEcqTDHCv1qUiCgFobgFzmrXt3lynKvm42l6y8YDprMbmHta6I
CLDz/y0cquWh0R9i4KTjfbVtiAAy2fYZLcZExzOLT5gcLsxpEj9syPXp0oN41bID
Ta6NGqmPztMtbS9qOcvwMDgjblY42SOkgNxrgEtMWPI93DR6RDtQ8CYBNEd6F20D
qIVql1RicAC60bjLJxB//iecZvWcq1Up6GSHhOcp54pmELayJAdgjF8I6ozSpfeK
eSe6QKIKbATQCLzs/kLMmx9gtprDkxAYRcEHClgTn0ZPCFfno12FtNpSFjO5f2iD
LeWuTemawZB+0zCi3M4iCP+x8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFvdcaDE
yD4XbaYVZnL3WTpgVjM4MB8GA1UdIwQYMBaAFBQ5vOTXoiroA2zrLubmrxjyG7WT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTdEOS8wNzE3RTlFRTlG
NUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1Z0RiT3N1NXVhdkdQSWJ0
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZEbTg1TmVpS3VnRGJPc3U1dWF2R1BJYnRaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTdEOS8wNzE3RTlFRTlGNUQxMUVDQkJDQTk2MThDNEY5QUUwMi9GRG04NU5laUt1
Z0RiT3N1NXVhdkdQSWJ0Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBR5UmIgNIB6Co34T6NfyuphjV/zBAOQ2Eb7w0EcPDxIMHr7tQOY0eL
/p4LD1LlPMyaT5Dy4OPPhFrmxmS0gBFqTVi4zrvgFN0JKokyVWVgX/tRO73CJ8IM
dntl1bXaD0FdxII7GlUonQuco7iwXwhp/cyGYNr3eCVdOe7JG0K24CN7Dck+DAzJ
4vPqfcs3ApZMpY0MPz6C3xH12e7ylSBkfiy8L4GDEk1sGdLK9G3MFf3We3itaY+u
UU8ZYM4wCbAMf6rqwhwk4x28yjSPt0o+1frheYMPSDlsmkFqTLnpEqk0/NQCNzHD
byMGcoYAY0w9ZRlJLQXfBJEVHjTzA95N
-----END CERTIFICATE-----
Generated at Fri Dec 19 18:51:53 2025 by rpki-client