This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
File: pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json)
Hash identifier: obytCspu9bH4sQcdmjdj6Kvp8XcQM2QzCZV5Cps/yl8=
Subject key identifier: E9:68:82:B2:E6:A7:16:ED:CE:10:ED:57:F6:D0:1D:CB:50:D7:9A:3A
Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C
Certificate issuer: /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
Manifest number: C1
Signing time: Sat 06 Dec 2025 18:24:38 +0000
Manifest this update: Sat 06 Dec 2025 18:24:38 +0000
Manifest next update: Sat 13 Dec 2025 18:24:38 +0000
Files and hashes: 1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: XJtAADStnGQhmAVCBvDy02DhLKfDz27CHADWDAdp3fE=)
2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: pDBpwWzy3RFOzY6mOa1pibkze94QAdG3zJbynRenhAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl
rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
Validity
Not Before: Dec 6 18:24:38 2025 GMT
Not After : Dec 13 18:24:38 2025 GMT
Subject: CN=693474e6-c164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:ed:0b:4a:b1:95:56:06:bb:b8:d2:11:9f:
5a:eb:fd:c5:dc:fe:76:36:01:52:58:08:30:42:f6:
91:d5:3c:cb:8a:b0:f1:77:02:c1:c6:07:59:29:98:
84:fa:37:92:d6:97:75:06:b2:a2:3f:62:e1:f4:ff:
88:13:20:0f:d6:f1:b1:3a:d8:6e:6b:c1:b5:54:5f:
da:34:b1:b0:26:90:50:62:02:b1:a8:e8:19:6f:25:
27:21:ba:8c:30:8e:76:76:70:09:1b:aa:fa:9d:08:
49:ae:9d:72:cf:11:e5:35:c9:b9:0b:80:0d:b1:3e:
69:3c:c4:d9:b8:97:3b:50:65:a5:ad:14:f6:58:a4:
00:b0:ec:0f:0b:67:ba:9b:2a:b1:8a:d6:c8:a4:eb:
1c:1d:a4:46:d0:77:86:07:85:f8:7c:ff:b6:b5:bc:
b5:ea:db:c9:8f:51:b3:fa:7c:26:ca:5d:d1:df:fc:
2c:70:10:01:2f:2a:44:63:5d:6b:1d:93:f2:c7:9e:
60:ec:94:c8:cb:be:f5:8a:c2:53:ed:55:57:79:52:
c6:c1:d1:b5:ad:b6:11:fc:b6:3c:2f:e8:11:45:a5:
64:10:45:b0:77:6b:55:d0:a0:fa:d2:a7:58:74:7e:
33:61:f7:51:eb:30:a3:97:0b:08:16:fd:94:11:28:
4b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:68:82:B2:E6:A7:16:ED:CE:10:ED:57:F6:D0:1D:CB:50:D7:9A:3A
X509v3 Authority Key Identifier:
keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:58:4b:c3:5d:3b:18:55:fe:b0:e1:e6:13:6b:3b:e9:e0:7a:
d5:f5:b7:53:1d:8d:33:e0:6e:e6:7b:eb:be:b0:95:a5:ae:db:
2e:cd:eb:6d:fb:dd:6e:92:ca:11:3e:9d:42:f4:76:df:7f:81:
89:a1:8f:10:60:ac:b3:59:ae:9c:35:e6:52:d5:2c:b5:c4:d1:
34:30:13:cc:7f:99:d8:2c:81:ea:09:20:25:9a:68:34:23:8c:
79:63:74:73:0d:e1:6c:3a:6b:33:65:31:f3:f0:f6:18:5c:44:
a2:1c:5a:da:75:34:49:3e:f5:9d:fb:52:13:24:67:37:37:7d:
98:1f:2c:37:f5:de:ce:bf:a2:2e:c5:a8:e3:35:68:d4:cf:43:
a7:e7:99:fa:1c:67:b8:de:36:e7:bd:89:e3:af:30:96:33:ba:
47:d0:70:5a:97:36:8e:9a:07:ab:9e:2f:6a:4e:af:cb:bf:08:
14:a3:ff:ef:9c:ed:aa:22:6e:ff:39:45:4b:1b:51:81:b5:7a:
5e:c5:82:17:73:8f:52:b9:3c:79:6d:85:38:fd:af:38:1c:d6:
10:c4:18:ba:b6:e7:53:fc:db:57:49:40:9e:f1:60:de:3c:26:
38:c9:64:83:c8:0f:bf:be:a0:51:60:a4:9c:a6:66:49:82:49:
cb:28:53:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjg4RDkxMTAvBgNVBAUTKEE2NEJFNDRBQ0IwMEU0QkRBRTQ0OTFCMEZBMENENzA5
OUQyQzcyN0MwHhcNMjUxMjA2MTgyNDM4WhcNMjUxMjEzMTgyNDM4WjAYMRYwFAYD
VQQDEw02OTM0NzRlNi1jMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt1rtC0qxlVYGu7jSEZ9a6/3F3P52NgFSWAgwQvaR1TzLirDxdwLBxgdZKZiE
+jeS1pd1BrKiP2Lh9P+IEyAP1vGxOthua8G1VF/aNLGwJpBQYgKxqOgZbyUnIbqM
MI52dnAJG6r6nQhJrp1yzxHlNcm5C4ANsT5pPMTZuJc7UGWlrRT2WKQAsOwPC2e6
myqxitbIpOscHaRG0HeGB4X4fP+2tby16tvJj1Gz+nwmyl3R3/wscBABLypEY11r
HZPyx55g7JTIy771isJT7VVXeVLGwdG1rbYR/LY8L+gRRaVkEEWwd2tV0KD60qdY
dH4zYfdR6zCjlwsIFv2UEShL4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlogrLm
pxbtzhDtV/bQHctQ15o6MB8GA1UdIwQYMBaAFKZL5ErLAOS9rkSRsPoM1wmdLHJ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODhEOS9GODNFM0ZDRUFE
QkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVMMnVSSkd3LWd6WENaMHNj
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3BrdmtTc3NBNUwydVJKR3ctZ3pYQ1owc2Nudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODhEOS9GODNFM0ZDRUFEQkMxMUVGQjMwMjk4M0VDNEY5QUUwMi9wa3ZrU3NzQTVM
MnVSSkd3LWd6WENaMHNjbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQApWEvDXTsYVf6w4eYTazvp4HrV9bdTHY0z4G7me+u+sJWlrtsuzett
+91uksoRPp1C9Hbff4GJoY8QYKyzWa6cNeZS1Sy1xNE0MBPMf5nYLIHqCSAlmmg0
I4x5Y3RzDeFsOmszZTHz8PYYXESiHFradTRJPvWd+1ITJGc3N32YHyw39d7Ov6Iu
xajjNWjUz0On55n6HGe43jbnvYnjrzCWM7pH0HBalzaOmgerni9qTq/LvwgUo//v
nO2qIm7/OUVLG1GBtXpexYIXc49SuTx5bYU4/a84HNYQxBi6tudT/NtXSUCe8WDe
PCY4yWSDyA+/vqBRYKScpmZJgknLKFPt
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:20:07 2025 by rpki-client