This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier: JjRBjhVxDb0WFR41V3/CI1bz/M1Mz6x8hlh5EbBlSmE=
Subject key identifier: BA:B6:60:B3:19:E1:ED:FF:EB:7D:14:99:DF:D8:A7:30:8C:AD:F3:46
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial: 081C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number: 0810
Signing time: Thu 04 Dec 2025 20:00:01 +0000
Manifest this update: Thu 04 Dec 2025 20:00:00 +0000
Manifest next update: Thu 11 Dec 2025 20:00:00 +0000
Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: naPMBx9BihHZuC8iVTwBMA6nij3rRZq483AkCoRUaeI=)
2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: gc5rodY7fMSUXMwplo20/FwcMcQwtcPfnanjg3iRFls=)
3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Validity
Not Before: Dec 4 20:00:00 2025 GMT
Not After : Dec 11 20:00:00 2025 GMT
Subject: CN=6931e841-858c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:35:dd:42:50:33:37:30:29:7b:ed:95:8a:21:
49:43:25:5c:67:ff:c4:9a:b4:e2:e7:a9:cc:47:4a:
be:63:62:76:7a:0b:0c:a2:fd:47:ae:89:ca:21:b1:
90:55:64:e7:d3:ce:40:c5:a1:60:69:a2:e5:5e:34:
10:3e:1a:20:42:79:84:ee:9f:21:82:b2:61:88:1d:
b9:e6:66:d1:39:46:5a:95:98:b5:92:00:77:4e:f4:
35:bf:f6:02:21:8d:be:22:d9:57:81:8c:dc:14:d8:
c3:20:29:52:c3:02:51:4b:73:0d:3f:d7:7f:57:1a:
3c:f6:ee:1d:73:2e:65:18:80:c8:34:e4:77:7c:3f:
a9:21:7f:d2:d8:6e:2a:82:13:00:b6:23:dc:eb:82:
12:e9:6e:57:60:59:44:a6:80:f0:b7:7c:76:34:9b:
85:34:25:ab:66:6b:82:d2:28:0b:f7:d4:8f:87:b6:
6a:9f:2a:c4:98:be:a7:59:10:f5:21:9b:e3:b2:1e:
41:c4:64:f8:df:ce:c1:69:5d:af:a5:a9:ae:73:b3:
29:f3:39:8a:0d:7b:15:18:07:a5:36:4e:bb:09:ff:
21:35:38:e3:ae:e7:13:c5:08:50:19:67:61:ed:20:
25:21:57:53:2a:8c:6e:33:8b:21:b5:54:ff:a0:ea:
55:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B6:60:B3:19:E1:ED:FF:EB:7D:14:99:DF:D8:A7:30:8C:AD:F3:46
X509v3 Authority Key Identifier:
keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cf:92:cf:7d:17:5e:8c:26:c9:b6:bf:4f:2e:a9:57:6b:6a:
a2:e8:29:69:46:a9:23:86:5a:55:39:90:c9:fc:1d:97:e3:93:
f9:ef:99:3e:0b:13:ae:a5:57:b4:5d:77:1d:50:5e:4a:b4:83:
ad:b1:f6:d4:a7:f2:fd:06:5b:c4:0b:6f:a1:65:32:19:20:27:
ce:91:24:28:07:d6:82:a7:47:45:74:7e:53:9d:94:1f:92:6e:
86:42:04:27:22:3c:fa:61:67:f1:d7:92:8d:83:00:3f:c9:23:
1b:e9:7d:b2:66:dc:17:a8:08:b5:3d:57:49:09:d7:8d:fb:a2:
80:09:da:0e:e1:d0:7f:1f:4d:3c:63:86:16:1b:19:4e:d7:36:
c5:69:37:2c:eb:b0:65:d7:32:f6:94:5f:44:6a:34:a5:24:c5:
30:54:09:46:94:07:67:fa:26:8d:f6:d2:d6:51:91:38:38:15:
78:85:97:35:c9:4a:75:d5:bd:f5:f2:f9:50:4c:ba:35:f6:ce:
cc:f0:95:8b:87:13:a4:58:3f:a4:5a:36:00:44:b3:06:8e:e6:
8a:59:b6:a9:d7:5f:52:1f:e2:93:94:c6:ba:41:33:f1:86:c5:
22:28:1e:6b:0e:c0:53:1b:cd:18:95:e5:d7:b1:98:66:17:ff:
02:8e:00:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG
MUIzOUJGRDgwHhcNMjUxMjA0MjAwMDAwWhcNMjUxMjExMjAwMDAwWjAYMRYwFAYD
VQQDEw02OTMxZTg0MS04NThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAujXdQlAzNzApe+2ViiFJQyVcZ//EmrTi56nMR0q+Y2J2egsMov1HronKIbGQ
VWTn085AxaFgaaLlXjQQPhogQnmE7p8hgrJhiB255mbROUZalZi1kgB3TvQ1v/YC
IY2+ItlXgYzcFNjDIClSwwJRS3MNP9d/Vxo89u4dcy5lGIDINOR3fD+pIX/S2G4q
ghMAtiPc64IS6W5XYFlEpoDwt3x2NJuFNCWrZmuC0igL99SPh7ZqnyrEmL6nWRD1
IZvjsh5BxGT4387BaV2vpamuc7Mp8zmKDXsVGAelNk67Cf8hNTjjrucTxQhQGWdh
7SAlIVdTKoxuM4shtVT/oOpVpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLq2YLMZ
4e3/630Umd/YpzCMrfNGMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF
QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu
SGxVaFZYdXdPZ0R4czV2OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCOz5LPfRdejCbJtr9PLqlXa2qi6ClpRqkjhlpVOZDJ/B2X45P575k+
CxOupVe0XXcdUF5KtIOtsfbUp/L9BlvEC2+hZTIZICfOkSQoB9aCp0dFdH5TnZQf
km6GQgQnIjz6YWfx15KNgwA/ySMb6X2yZtwXqAi1PVdJCdeN+6KACdoO4dB/H008
Y4YWGxlO1zbFaTcs67Bl1zL2lF9EajSlJMUwVAlGlAdn+iaN9tLWUZE4OBV4hZc1
yUp11b318vlQTLo19s7M8JWLhxOkWD+kWjYARLMGjuaKWbap119SH+KTlMa6QTPx
hsUiKB5rDsBTG80YleXXsZhmF/8CjgDg
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:07 2025 by rpki-client