This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File: c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier: xRlTY33EZDlqhMem1WbIQiEPFzCJmDIN19WRCoYru/k=
Subject key identifier: 77:E2:38:60:61:26:04:27:E7:9A:83:7B:C4:99:A2:31:C6:83:9C:B6
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer: /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial: 1E7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number: 1E61
Signing time: Thu 04 Dec 2025 15:50:30 +0000
Manifest this update: Thu 04 Dec 2025 15:50:29 +0000
Manifest next update: Thu 11 Dec 2025 15:50:29 +0000
Files and hashes: 1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: l1mbrQo+3t2qjMyQUv5whfJjPTPYUxHr/iH0NqYQcO0=)
2: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: EJiEnoCirWsDQY/eDttKswieD8axfAxOee0LqYEm/Qk=)
3: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: C6lZnCUm+xSNFhUq+KN79jJBl7/zRPJh8VdBqkQbpX0=)
4: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: BGVuJ0Wf+Uf4RgQQzyj2Cck77KLCc+rr/2VE6L1NPis=)
5: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: wqWtD+2LXaW4MpbT7PeD5JYJic0Zu3FnuTrJZi1gdyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7807 (0x1e7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Validity
Not Before: Dec 4 15:50:29 2025 GMT
Not After : Dec 11 15:50:29 2025 GMT
Subject: CN=6931adc5-e405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:63:4c:90:80:57:0a:19:89:83:17:97:7f:
c6:a0:f6:77:b7:f6:98:47:f0:37:a5:31:29:e2:c6:
c4:a8:2d:00:48:7d:62:19:b9:04:b6:dc:1b:52:f8:
df:f4:12:ec:c0:1d:16:ac:9f:dc:70:7b:0d:dd:9c:
17:82:54:93:71:c5:e3:68:41:ad:31:c2:93:13:8d:
61:69:74:4c:8d:a8:23:51:6c:6b:d9:06:34:13:aa:
29:57:d5:89:3e:99:cb:63:a2:76:ac:86:68:44:59:
09:c4:95:f1:5f:08:d4:6d:2f:0c:8d:de:b2:2e:84:
0f:fe:2e:24:42:33:f6:0c:c5:84:30:d1:08:a0:48:
5a:b7:a0:0f:b8:3c:43:e4:6a:30:10:6e:1d:2f:0c:
d3:f9:6f:2e:80:18:36:85:ab:c0:8d:26:c8:b1:db:
e2:c4:66:37:5e:fe:58:a4:70:c5:bf:9b:7e:66:75:
9d:75:61:3c:48:2c:4f:c3:88:b1:e5:58:e3:f2:d3:
cd:40:7c:0d:27:ba:f6:30:66:93:b4:65:be:aa:a4:
75:e1:4e:4c:d6:ad:38:fa:f7:84:c0:82:dd:15:fb:
bc:b2:eb:51:ad:56:2d:a1:3a:cf:56:6f:75:39:50:
9d:cc:48:d4:51:55:7a:57:64:bf:ea:08:25:16:8f:
9f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E2:38:60:61:26:04:27:E7:9A:83:7B:C4:99:A2:31:C6:83:9C:B6
X509v3 Authority Key Identifier:
keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:33:72:56:70:8e:98:e2:19:15:39:7c:b5:e3:ec:ad:f4:22:
5a:e9:23:e6:c9:eb:33:fe:17:cc:cf:9b:a4:07:9e:16:e2:c6:
a2:70:25:09:e3:7c:fc:a7:cc:fa:db:97:7d:1c:43:90:2d:1b:
d4:fc:68:70:0e:f0:03:32:5a:c5:58:0e:59:3a:4d:76:59:1a:
dc:b5:95:48:cb:ba:ec:d5:40:50:43:78:5f:ea:58:39:fd:d1:
f9:8a:d8:52:a6:97:63:93:fc:cd:71:ec:89:16:5c:9f:09:fc:
1f:5c:31:f5:ee:29:de:1e:31:0d:f1:6d:da:fd:be:9e:68:35:
ab:c4:a1:d3:ee:7d:31:c3:5e:35:bc:8a:52:0c:75:cb:28:52:
29:8f:f8:dc:4c:6f:93:e4:64:db:b7:6a:74:fd:e2:cd:52:62:
de:30:66:e5:07:dc:79:6d:ee:01:06:1c:38:8d:53:ee:61:19:
03:2f:fe:c7:02:f4:2e:d1:02:b3:1a:8b:17:a5:23:2b:ca:3d:
60:c3:b3:0c:34:86:1e:b4:9c:2e:68:b0:1a:59:e3:4b:cb:2c:
bb:8f:1e:12:c5:28:e6:18:8c:0b:08:bc:ee:e5:53:aa:c8:4d:
3b:0d:da:92:85:07:5b:40:96:bf:26:84:35:67:97:82:67:93:
cd:43:c1:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE4NEIxMTAvBgNVBAUTKDczNDFGNjRFQUIyNTE3RUE5OTM4RERFNEZCMEE4MTRF
NUNCQjdFNzcwHhcNMjUxMjA0MTU1MDI5WhcNMjUxMjExMTU1MDI5WjAYMRYwFAYD
VQQDEw02OTMxYWRjNS1lNDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA01xjTJCAVwoZiYMXl3/GoPZ3t/aYR/A3pTEp4sbEqC0ASH1iGbkEttwbUvjf
9BLswB0WrJ/ccHsN3ZwXglSTccXjaEGtMcKTE41haXRMjagjUWxr2QY0E6opV9WJ
PpnLY6J2rIZoRFkJxJXxXwjUbS8Mjd6yLoQP/i4kQjP2DMWEMNEIoEhat6APuDxD
5GowEG4dLwzT+W8ugBg2havAjSbIsdvixGY3Xv5YpHDFv5t+ZnWddWE8SCxPw4ix
5Vjj8tPNQHwNJ7r2MGaTtGW+qqR14U5M1q04+veEwILdFfu8sutRrVYtoTrPVm91
OVCdzEjUUVV6V2S/6gglFo+fPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfiOGBh
JgQn55qDe8SZojHGg5y2MB8GA1UdIwQYMBaAFHNB9k6rJRfqmTjd5PsKgU5cu353
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg0Qi8xMzY0ODdGQThD
OEMxMUU2QjBCN0M1MjhDNEY5QUUwMi9jMEgyVHFzbEYtcVpPTjNrLXdxQlRseTdm
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2MwSDJUcXNsRi1xWk9OM2std3FCVGx5N2ZuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTg0Qi8xMzY0ODdGQThDOEMxMUU2QjBCN0M1MjhDNEY5QUUwMi9jMEgyVHFzbEYt
cVpPTjNrLXdxQlRseTdmbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjM3JWcI6Y4hkVOXy14+yt9CJa6SPmyesz/hfMz5ukB54W4saicCUJ
43z8p8z625d9HEOQLRvU/GhwDvADMlrFWA5ZOk12WRrctZVIy7rs1UBQQ3hf6lg5
/dH5ithSppdjk/zNceyJFlyfCfwfXDH17ineHjEN8W3a/b6eaDWrxKHT7n0xw141
vIpSDHXLKFIpj/jcTG+T5GTbt2p0/eLNUmLeMGblB9x5be4BBhw4jVPuYRkDL/7H
AvQu0QKzGosXpSMryj1gw7MMNIYetJwuaLAaWeNLyyy7jx4SxSjmGIwLCLzu5VOq
yE07DdqShQdbQJa/JoQ1Z5eCZ5PNQ8Hp
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:23:02 2025 by rpki-client