This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json)
Hash identifier: Be64IbpqyuERwnurjUNCpjV8YrAtSHd3rkPXCnUs164=
Subject key identifier: A4:6B:AA:36:6C:B3:58:34:35:D3:5C:84:3C:69:A5:DB:82:08:79:C9
Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Certificate serial: 0412
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
Manifest number: 0409
Signing time: Thu 04 Dec 2025 22:54:38 +0000
Manifest this update: Thu 04 Dec 2025 22:54:38 +0000
Manifest next update: Thu 11 Dec 2025 22:54:38 +0000
Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: DxbkKUquQWXNVVUulPZAVJ9RhImpHjR1Mi+xRRINfb8=)
2: 2106E428992111EC99E0095AC4F9AE02.roa (hash: WwA/rBGjBDEpiOexD1IjCU08QUDY8G7l57/ipRDGA8M=)
3: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: sczNDr9Uf1o14TeMLvhQpR0Eoi4DkVd7EM/ILBPX2f8=)
4: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: ZEuV8rnSTrAUL1+f9B0DJgZDQV0kGj4jMARqkjlC+9I=)
5: 412371002A5911F08EA23244C4F9AE02.roa (hash: nv5XmU97C++H82vtSbaW06zkLpVOeaF9Xg49KK/5bYU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:54:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1042 (0x412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D
Validity
Not Before: Dec 4 22:54:38 2025 GMT
Not After : Dec 11 22:54:38 2025 GMT
Subject: CN=6932112e-47a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:18:8a:f4:d6:74:1e:29:be:c8:37:a6:b3:
91:43:2c:eb:ea:a7:ca:d5:de:78:dc:86:57:b8:97:
4e:d3:37:62:31:06:39:33:11:56:71:e8:48:98:ba:
92:74:15:8b:96:b3:ba:cb:e8:cd:3b:13:d7:ec:c5:
69:66:72:e2:00:d0:d6:c7:a6:f2:17:43:a9:d2:68:
f5:a9:5a:d5:f9:08:81:77:21:f4:21:2c:0d:c1:61:
37:a6:14:b3:c9:eb:b5:cc:48:d9:7a:31:c0:54:8f:
02:49:f5:b3:99:9f:02:d2:be:c8:f6:8a:57:ff:40:
e2:e7:8f:37:d5:10:ee:7c:72:02:b6:ba:6e:b6:eb:
f5:4a:11:35:25:23:76:9f:be:b9:98:40:88:69:18:
12:cf:42:a2:db:3c:6f:d6:4c:64:d1:65:ad:ac:ea:
ca:8b:82:dc:c7:5e:49:a8:7f:4e:5d:88:b6:df:fc:
b4:dd:02:d5:61:1f:58:95:8c:d1:56:37:12:3c:f3:
79:75:8a:72:47:72:bb:f0:3f:89:48:db:7f:5d:25:
43:b5:6a:f2:d5:c1:26:9d:0d:06:a8:60:29:3a:f6:
82:22:6d:ad:ec:2b:03:17:31:ff:ab:98:5a:98:74:
f8:b1:08:db:68:50:40:7c:6b:67:e5:33:a6:5f:17:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6B:AA:36:6C:B3:58:34:35:D3:5C:84:3C:69:A5:DB:82:08:79:C9
X509v3 Authority Key Identifier:
keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:3e:2c:9e:ff:2e:ce:cb:58:7a:ff:cb:5a:d0:8e:11:9f:07:
1d:58:61:f3:f7:b3:d4:be:69:03:41:cc:8f:8b:38:f4:a3:02:
5b:d2:b9:05:6b:dd:c2:8b:d5:33:d8:f8:37:0a:31:73:9b:10:
1a:28:89:4a:7e:78:c4:6c:8f:7c:76:12:f3:56:2d:47:b6:9a:
fc:ce:ed:91:7e:e4:10:d6:fa:58:4c:ae:9d:77:cf:51:8c:55:
6d:20:22:2d:b5:67:f2:f7:85:9f:f4:44:e8:48:b2:60:11:c2:
93:13:4d:16:25:8b:ad:87:a8:c0:3f:48:60:03:be:fd:82:e9:
24:8c:2d:e1:af:7c:02:98:78:50:82:1b:83:2d:19:1d:49:45:
cb:92:80:ba:b7:d0:9f:2a:c2:ae:46:9d:14:13:36:3a:a3:20:
8f:99:5a:98:c3:cf:89:63:7d:de:d1:e1:63:53:5b:32:ca:a2:
99:60:48:49:86:be:4d:95:d4:58:0b:6a:45:56:29:80:92:ac:
fd:b2:43:2e:df:c2:4a:a1:fd:6c:aa:67:e7:80:98:af:f0:a0:
fe:0b:80:c4:16:b4:6e:bb:f2:97:17:9c:d8:c0:b7:eb:29:4e:
20:88:47:b9:b0:e8:51:c5:72:43:b9:2a:f1:4a:81:72:4e:22:
99:72:2b:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3
ODAzMTFBNUQwHhcNMjUxMjA0MjI1NDM4WhcNMjUxMjExMjI1NDM4WjAYMRYwFAYD
VQQDEw02OTMyMTEyZS00N2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAueoYivTWdB4pvsg3prORQyzr6qfK1d543IZXuJdO0zdiMQY5MxFWcehImLqS
dBWLlrO6y+jNOxPX7MVpZnLiANDWx6byF0Op0mj1qVrV+QiBdyH0ISwNwWE3phSz
yeu1zEjZejHAVI8CSfWzmZ8C0r7I9opX/0Di54831RDufHICtrputuv1ShE1JSN2
n765mECIaRgSz0Ki2zxv1kxk0WWtrOrKi4Lcx15JqH9OXYi23/y03QLVYR9YlYzR
VjcSPPN5dYpyR3K78D+JSNt/XSVDtWry1cEmnQ0GqGApOvaCIm2t7CsDFzH/q5ha
mHT4sQjbaFBAfGtn5TOmXxeJ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKRrqjZs
s1g0NdNchDxppduCCHnJMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5
MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTFBRC84RkRERjVFODk5MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3Zv
VUVuU3I1c3lyTWg0QXhHbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4Piye/y7Oy1h6/8ta0I4RnwcdWGHz97PUvmkDQcyPizj0owJb0rkF
a93Ci9Uz2Pg3CjFzmxAaKIlKfnjEbI98dhLzVi1Htpr8zu2RfuQQ1vpYTK6dd89R
jFVtICIttWfy94Wf9EToSLJgEcKTE00WJYuth6jAP0hgA779gukkjC3hr3wCmHhQ
ghuDLRkdSUXLkoC6t9CfKsKuRp0UEzY6oyCPmVqYw8+JY33e0eFjU1syyqKZYEhJ
hr5NldRYC2pFVimAkqz9skMu38JKof1sqmfngJiv8KD+C4DEFrRuu/KXF5zYwLfr
KU4giEe5sOhRxXJDuSrxSoFyTiKZciuV
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:06:11 2025 by rpki-client