This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json)
Hash identifier: AOMJXj/bWwHN0RF3JPysTZThxyPoBXp0C7e7te5wFkg=
Subject key identifier: 5D:F5:C0:F0:77:5B:99:5F:16:EC:62:00:AB:8A:F0:B0:B7:44:C3:1B
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial: 0C2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
Manifest number: 0C07
Signing time: Sat 06 Dec 2025 18:08:50 +0000
Manifest this update: Sat 06 Dec 2025 18:08:50 +0000
Manifest next update: Sat 13 Dec 2025 18:08:50 +0000
Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: Pdc82tqF7RqSQAyEjQAuBG9/7sw36g5nHgZU3L/Lxa4=)
2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: mByxm9I42Bs2d4gYmGlnX4gxjstMQucwv5VLhWttHFY=)
3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: DqyU+6nXvs6HOFMKI16Emo+flYs9ktEh2tA31OF4Cw4=)
4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: re/IaJHi711uC7kt/qe355ZQkGdlvPCAcW6M1Vv6a/M=)
5: 4CC6B77C0A9111EEB13EAF44C4F9AE02.roa (hash: PDvCAZx5hVOPcyfQ4LwOi2hSUYUbvW/tgd4X2jQj+2E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3116 (0xc2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Validity
Not Before: Dec 6 18:08:50 2025 GMT
Not After : Dec 13 18:08:50 2025 GMT
Subject: CN=69347132-ae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:cc:3a:c4:65:26:de:70:30:42:b7:53:9c:
cd:4c:07:77:f7:18:95:f3:9a:36:5d:81:6a:60:c1:
e9:64:73:10:8f:04:97:bb:c0:c3:15:97:93:9a:fe:
88:24:55:a9:eb:71:c1:71:af:48:4b:8c:6a:cb:76:
5e:a3:9c:25:76:38:08:4b:1c:0a:c8:e3:ed:37:f9:
23:69:85:a5:3c:1c:fa:f2:b2:d1:c3:ae:05:e2:e3:
e5:02:67:1d:4a:48:21:ed:5a:4a:3c:8d:a2:9e:09:
b0:12:01:79:9d:e0:1b:69:b6:e9:61:04:14:b3:1e:
69:07:7d:67:68:86:ec:07:c6:ab:bb:0d:41:56:73:
8f:b3:45:60:02:a2:0f:37:6e:71:e0:c4:be:60:70:
94:6e:25:30:3e:5b:42:bd:a3:a7:df:a1:3c:e9:03:
7a:8b:ff:a8:96:67:73:bd:06:78:14:6b:3b:58:6a:
76:f0:a0:dd:eb:97:19:e0:47:73:77:26:ce:14:eb:
5a:94:12:91:3a:69:ee:6a:6e:15:a2:75:c3:1d:41:
92:38:e5:84:22:a8:fd:5e:ce:df:7c:1b:27:f6:36:
7a:fa:b0:b7:6a:3b:ac:cb:be:8a:07:c1:f2:c9:7c:
a0:fd:a7:68:34:eb:77:75:05:87:fd:42:26:bd:b2:
ec:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F5:C0:F0:77:5B:99:5F:16:EC:62:00:AB:8A:F0:B0:B7:44:C3:1B
X509v3 Authority Key Identifier:
keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:e3:52:0e:6b:c7:0f:8e:c7:70:5e:0d:20:b0:1a:cc:6c:33:
81:28:c2:33:45:e7:fe:8c:e3:02:26:bc:d2:64:de:ad:1e:9a:
43:7c:2f:84:7f:fa:a3:01:a1:b8:5d:77:ae:63:cb:81:ae:a2:
2c:3e:56:91:42:40:28:5e:6b:ba:ab:ab:83:8e:2d:e9:4a:4b:
0d:08:9c:69:9e:72:b2:64:cb:aa:76:d2:74:79:fd:32:85:31:
0c:8c:0d:5f:5b:0a:0b:d2:3c:81:75:42:d8:f5:8b:ab:3c:a0:
c7:a1:b9:e1:97:36:eb:a3:aa:b7:22:fb:c5:c2:7c:33:ef:60:
3b:69:37:ff:03:b9:8b:27:11:65:3c:77:68:0b:16:91:3d:ae:
6b:ea:98:b3:91:4d:eb:50:dd:ae:59:88:82:d3:73:22:e4:1a:
2b:b6:20:f5:0a:1b:df:85:48:9a:8f:0c:81:fa:67:2d:9c:69:
31:fa:58:01:ff:35:e4:97:59:bf:19:d1:38:ee:44:9c:9e:59:
82:6b:63:8a:ea:ad:29:85:ad:31:8a:05:3f:cc:a7:71:d7:ae:
e6:59:1b:a3:3c:d7:3e:4a:46:d7:29:42:48:52:66:7b:35:94:
8a:51:9e:0e:e7:8f:69:18:dc:a5:76:57:e7:0e:9a:20:a7:3d:
6e:42:76:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD
QTE2RDlDRDUwHhcNMjUxMjA2MTgwODUwWhcNMjUxMjEzMTgwODUwWjAYMRYwFAYD
VQQDEw02OTM0NzEzMi1hZTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvlTMOsRlJt5wMEK3U5zNTAd39xiV85o2XYFqYMHpZHMQjwSXu8DDFZeTmv6I
JFWp63HBca9IS4xqy3Zeo5wldjgISxwKyOPtN/kjaYWlPBz68rLRw64F4uPlAmcd
Skgh7VpKPI2ingmwEgF5neAbabbpYQQUsx5pB31naIbsB8aruw1BVnOPs0VgAqIP
N25x4MS+YHCUbiUwPltCvaOn36E86QN6i/+olmdzvQZ4FGs7WGp28KDd65cZ4Edz
dybOFOtalBKROmnuam4VonXDHUGSOOWEIqj9Xs7ffBsn9jZ6+rC3ajusy76KB8Hy
yXyg/adoNOt3dQWH/UImvbLsRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF31wPB3
W5lfFuxiAKuK8LC3RMMbMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2
MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu
TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs
cTAtYjlOcFN0dFhLRnRuTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAn41IOa8cPjsdwXg0gsBrMbDOBKMIzRef+jOMCJrzSZN6tHppDfC+E
f/qjAaG4XXeuY8uBrqIsPlaRQkAoXmu6q6uDji3pSksNCJxpnnKyZMuqdtJ0ef0y
hTEMjA1fWwoL0jyBdULY9YurPKDHobnhlzbro6q3IvvFwnwz72A7aTf/A7mLJxFl
PHdoCxaRPa5r6pizkU3rUN2uWYiC03Mi5BortiD1ChvfhUiajwyB+mctnGkx+lgB
/zXkl1m/GdE47kScnlmCa2OK6q0pha0xigU/zKdx167mWRujPNc+SkbXKUJIUmZ7
NZSKUZ4O549pGNyldlfnDpogpz1uQnad
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:15:29 2025 by rpki-client