This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
File: Mh0Kt4oavjUafbeTINn_03KgjEU.mft (raw, json)
Hash identifier: uxA4e3jEMkktRowunitmu/tnGBDUOzphFbgnSFN+HjY=
Subject key identifier: 14:4D:A2:4E:92:39:2C:03:F0:51:8E:49:55:87:82:28:64:E1:E5:9B
Authority key identifier: 32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45
Certificate issuer: /CN=A9110FEF/serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
Manifest number: 024C
Signing time: Fri 05 Dec 2025 00:12:22 +0000
Manifest this update: Fri 05 Dec 2025 00:12:22 +0000
Manifest next update: Fri 12 Dec 2025 00:12:22 +0000
Files and hashes: 1: Mh0Kt4oavjUafbeTINn_03KgjEU.crl (hash: B3mVN8ZZCpYSFdlGcSODQ5Iffd45E6BmAye3C5AfyJw=)
2: 47DA361A3F8F11EF8FA3802DC4F9AE02.roa (hash: kZKPpO1uHctSo/EMrUHJdQ+fm1ea4u/f5P1GBGfWwQ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl
rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110FEF, serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45
Validity
Not Before: Dec 5 00:12:22 2025 GMT
Not After : Dec 12 00:12:22 2025 GMT
Subject: CN=69322366-a3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:26:1a:65:cf:47:98:68:d2:90:8f:12:87:
f8:8c:29:ca:7f:8e:e6:85:82:f0:f0:00:1f:de:34:
50:82:d1:89:68:c9:bc:da:77:3c:ba:e0:d4:03:1f:
0f:ea:1d:bc:d5:b9:f0:a9:da:9c:f6:7b:14:94:14:
df:cd:03:f3:4c:a0:57:1e:c7:b9:09:d2:a7:31:cb:
e9:9b:0b:ca:6b:05:b8:0a:14:90:52:41:f9:c6:b3:
c1:f6:2c:c2:80:42:7b:6b:b8:c7:fc:07:cf:db:1e:
e9:26:0d:88:84:76:ba:0e:32:b1:39:26:e1:a8:03:
91:52:bf:c6:db:68:45:c1:09:cf:49:1b:eb:4b:40:
ce:d7:8b:26:9b:b5:fa:9e:f9:99:39:e4:37:58:08:
92:66:51:8a:f2:e9:83:04:5e:4f:d4:1a:67:0b:a9:
f0:0c:34:6f:5a:ea:f1:c9:b3:a3:64:59:07:f5:05:
6d:43:45:be:98:02:04:91:59:03:e7:25:c4:e3:74:
14:75:63:35:d2:b9:58:99:41:22:64:23:cc:2e:af:
5e:2e:bd:5b:42:c4:d3:b0:2f:a8:16:3b:1a:34:24:
d6:0f:6d:6c:7c:73:c3:a4:b0:d2:d2:84:62:8a:da:
0f:a9:21:56:41:6e:d7:64:52:b2:99:26:78:6f:48:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4D:A2:4E:92:39:2C:03:F0:51:8E:49:55:87:82:28:64:E1:E5:9B
X509v3 Authority Key Identifier:
keyid:32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0a:ed:8a:c5:c0:82:ee:ed:2a:ec:5a:50:0f:97:3c:0c:33:
56:20:9a:93:0b:fc:8e:0c:e1:44:8f:c2:dc:ed:62:c3:74:a3:
31:af:6a:55:01:57:ab:0d:f5:53:2b:81:01:2c:d1:53:ed:5b:
6a:47:fe:89:cc:28:aa:37:f6:8a:d9:32:c9:4f:9d:45:2c:e0:
45:d1:b3:bb:97:93:29:9f:35:e5:68:36:4e:6b:82:8e:0d:1b:
1f:2e:dd:c7:92:86:da:ad:00:62:52:44:82:c3:d5:f1:4d:13:
97:ef:05:50:fe:66:7b:7e:73:e4:d1:9e:48:2c:75:6f:a1:90:
39:fe:58:00:6c:49:65:20:3c:71:af:d2:86:cb:a9:86:90:3e:
19:9a:c9:ef:d0:cf:7d:9c:a0:7f:cd:57:8a:b1:de:6f:60:cf:
b2:05:05:ee:b6:c4:7d:04:0c:1a:e2:d0:6a:ce:c5:8b:8a:13:
d9:58:6b:00:88:79:35:af:46:23:b0:a1:97:09:09:ad:e4:51:
79:36:3b:cf:14:36:92:bd:7c:d5:43:98:d3:12:4f:ce:c3:a2:
14:06:58:ef:83:18:6d:01:5d:7a:4e:2f:b2:ff:32:38:3a:cb:
09:16:86:9a:10:18:0a:37:3d:8e:f6:0a:84:a0:63:34:10:0d:
e1:a8:04:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTBGRUYxMTAvBgNVBAUTKDMyMUQwQUI3OEExQUJFMzUxQTdEQjc5MzIwRDlGRkQz
NzJBMDhDNDUwHhcNMjUxMjA1MDAxMjIyWhcNMjUxMjEyMDAxMjIyWjAYMRYwFAYD
VQQDEw02OTMyMjM2Ni1hM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv/AmGmXPR5ho0pCPEof4jCnKf47mhYLw8AAf3jRQgtGJaMm82nc8uuDUAx8P
6h281bnwqdqc9nsUlBTfzQPzTKBXHse5CdKnMcvpmwvKawW4ChSQUkH5xrPB9izC
gEJ7a7jH/AfP2x7pJg2IhHa6DjKxOSbhqAORUr/G22hFwQnPSRvrS0DO14smm7X6
nvmZOeQ3WAiSZlGK8umDBF5P1BpnC6nwDDRvWurxybOjZFkH9QVtQ0W+mAIEkVkD
5yXE43QUdWM10rlYmUEiZCPMLq9eLr1bQsTTsC+oFjsaNCTWD21sfHPDpLDS0oRi
itoPqSFWQW7XZFKymSZ4b0hvlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRNok6S
OSwD8FGOSVWHgihk4eWbMB8GA1UdIwQYMBaAFDIdCreKGr41Gn23kyDZ/9NyoIxF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEZFRi9CMDM2M0Q2MDY0
RjUxMUVEODJCMDNDMTFDNEY5QUUwMi9NaDBLdDRvYXZqVWFmYmVUSU5uXzAzS2dq
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01oMEt0NG9hdmpVYWZiZVRJTm5fMDNLZ2pFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MEZFRi9CMDM2M0Q2MDY0RjUxMUVEODJCMDNDMTFDNEY5QUUwMi9NaDBLdDRvYXZq
VWFmYmVUSU5uXzAzS2dqRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAcCu2KxcCC7u0q7FpQD5c8DDNWIJqTC/yODOFEj8Lc7WLDdKMxr2pV
AVerDfVTK4EBLNFT7VtqR/6JzCiqN/aK2TLJT51FLOBF0bO7l5MpnzXlaDZOa4KO
DRsfLt3HkobarQBiUkSCw9XxTROX7wVQ/mZ7fnPk0Z5ILHVvoZA5/lgAbEllIDxx
r9KGy6mGkD4Zmsnv0M99nKB/zVeKsd5vYM+yBQXutsR9BAwa4tBqzsWLihPZWGsA
iHk1r0YjsKGXCQmt5FF5NjvPFDaSvXzVQ5jTEk/Ow6IUBljvgxhtAV16Ti+y/zI4
OssJFoaaEBgKNz2O9gqEoGM0EA3hqATG
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:54:17 2025 by rpki-client