This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File: u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier: 0oyv7+KW7jglMngfme8yJAnhGCAADkj1zsDOm2J/7dM=
Subject key identifier: 14:AE:D2:89:35:C3:B9:32:BB:F7:E3:8D:D9:25:0B:6F:B4:81:0B:A0
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer: /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number: 024E
Signing time: Fri 05 Dec 2025 00:06:35 +0000
Manifest this update: Fri 05 Dec 2025 00:06:35 +0000
Manifest next update: Fri 12 Dec 2025 00:06:34 +0000
Files and hashes: 1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: EUm6izfSGDR0HqUjk2fKdyJPIAbKjMqM4ftUVxDsxcc=)
2: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: hTqAJeFz8PTA6anqEQNdKINuIjAXAozH9CZXJQVA+Tc=)
3: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: d9uK2WHtAsxBM3XUZiIW2tQcJ8Ym1sXb/vkuZKSK3yI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Validity
Not Before: Dec 5 00:06:35 2025 GMT
Not After : Dec 12 00:06:34 2025 GMT
Subject: CN=6932220b-d244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:2d:ab:54:9e:cf:a3:22:b0:3e:09:43:b7:
e4:ca:11:13:d7:a5:8a:eb:5c:52:ed:11:9f:23:5a:
e0:a8:ed:e4:8c:53:2a:44:64:8d:b5:b9:34:be:18:
7d:09:bd:af:d4:9a:86:4c:8c:7c:8a:bf:dd:0b:32:
62:96:92:f4:6f:f5:28:ec:0b:cb:25:27:85:09:a8:
0b:ca:42:03:d6:56:a5:a1:cf:07:90:6c:d8:ca:ff:
1a:ca:11:b6:6d:8c:b3:89:11:b6:65:1f:6c:cc:54:
24:43:11:55:aa:62:7b:9b:e8:6e:8a:c4:7e:9f:ad:
85:a2:44:90:81:1e:0a:9a:92:2f:9d:b6:d4:b7:b3:
7f:76:88:26:1b:a0:3b:34:a8:34:6f:60:a2:f0:de:
e6:36:17:56:7b:02:36:5a:c9:f6:2c:13:2c:6e:3a:
d1:62:65:25:db:bf:b0:14:25:98:2b:a1:f4:63:46:
df:94:af:c1:3e:a7:26:d6:0e:18:2d:ca:65:98:27:
be:66:ef:7b:8f:15:70:f5:8f:1a:1f:60:bd:34:1a:
61:58:9a:d5:45:a9:7b:fc:12:54:d5:ba:51:9a:a7:
fd:78:15:18:04:e2:19:84:ea:b5:b2:a5:48:95:5c:
e9:81:6f:e0:01:9e:7a:80:75:71:40:69:42:23:80:
60:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AE:D2:89:35:C3:B9:32:BB:F7:E3:8D:D9:25:0B:6F:B4:81:0B:A0
X509v3 Authority Key Identifier:
keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1e:01:9d:d4:e9:49:82:6d:fc:4f:d4:0b:52:b0:06:44:74:
4f:66:48:8a:fe:89:c9:49:bb:f4:42:86:3d:4e:bd:51:87:70:
c9:4d:d2:36:ba:ff:15:c3:98:c7:6c:0f:51:6d:b4:dd:d6:83:
aa:da:8e:5d:1e:4a:58:45:44:19:7a:d1:31:e3:d9:07:2d:48:
28:fd:81:12:17:ba:5b:ef:9f:2f:90:89:b5:b9:c8:3b:5e:93:
fe:d2:7c:be:e2:9c:6b:23:d4:84:e6:d7:29:52:e8:85:c5:51:
ae:d9:b0:df:32:b7:77:92:2e:20:88:ed:7f:ff:17:13:09:b5:
c8:c2:12:5d:95:da:ba:0d:4d:3b:fd:35:f9:aa:12:a9:ef:0b:
79:f8:ee:0a:b6:94:26:f6:02:83:0f:b7:80:d7:72:e3:21:e0:
c8:02:e1:06:71:0c:f6:6d:b1:9b:7e:a9:b3:6e:da:d1:84:13:
77:68:e5:6a:e5:3f:52:9f:5d:e6:bf:2c:09:40:3c:0d:31:b0:
93:e9:51:59:ed:f9:8e:b6:60:87:d9:ce:00:c3:ab:2f:3d:1d:
17:05:7f:5c:ba:81:e5:84:2a:0a:b8:46:ee:ef:03:ef:d3:55:
cd:3d:8b:3a:da:5b:4d:2d:dc:85:03:3d:d2:c9:a5:4a:80:57:
34:b4:bb:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjgwNEExMTAvBgNVBAUTKEJCQjZFNjAxMDQzNzQzMjUwNTQ4ODBCN0QzQzEzNUU2
RkM3Q0NBQjEwHhcNMjUxMjA1MDAwNjM1WhcNMjUxMjEyMDAwNjM0WjAYMRYwFAYD
VQQDEw02OTMyMjIwYi1kMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlSctq1Sez6MisD4JQ7fkyhET16WK61xS7RGfI1rgqO3kjFMqRGSNtbk0vhh9
Cb2v1JqGTIx8ir/dCzJilpL0b/Uo7AvLJSeFCagLykID1laloc8HkGzYyv8ayhG2
bYyziRG2ZR9szFQkQxFVqmJ7m+huisR+n62FokSQgR4KmpIvnbbUt7N/dogmG6A7
NKg0b2Ci8N7mNhdWewI2Wsn2LBMsbjrRYmUl27+wFCWYK6H0Y0bflK/BPqcm1g4Y
LcplmCe+Zu97jxVw9Y8aH2C9NBphWJrVRal7/BJU1bpRmqf9eBUYBOIZhOq1sqVI
lVzpgW/gAZ56gHVxQGlCI4Bg+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSu0ok1
w7kyu/fjjdklC2+0gQugMB8GA1UdIwQYMBaAFLu25gEEN0MlBUiAt9PBNeb8fMqx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA0QS85NUE4MTAxNDUw
NzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5VUZTSUMzMDhFMTV2eDh5
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U3Ym1BUVEzUXlVRlNJQzMwOEUxNXZ4OHlyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODA0QS85NUE4MTAxNDUwNzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5
VUZTSUMzMDhFMTV2eDh5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMHgGd1OlJgm38T9QLUrAGRHRPZkiK/onJSbv0QoY9Tr1Rh3DJTdI2
uv8Vw5jHbA9RbbTd1oOq2o5dHkpYRUQZetEx49kHLUgo/YESF7pb758vkIm1ucg7
XpP+0ny+4pxrI9SE5tcpUuiFxVGu2bDfMrd3ki4giO1//xcTCbXIwhJdldq6DU07
/TX5qhKp7wt5+O4KtpQm9gKDD7eA13LjIeDIAuEGcQz2bbGbfqmzbtrRhBN3aOVq
5T9Sn13mvywJQDwNMbCT6VFZ7fmOtmCH2c4Aw6svPR0XBX9cuoHlhCoKuEbu7wPv
01XNPYs62ltNLdyFAz3SyaVKgFc0tLt2
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:42 2025 by rpki-client