This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
File: 1cNfp3myIZlgnD6gpTHFoNMyrQE.mft (raw, json)
Hash identifier: yL/kJXrrn+V8VHmGH2/LcxK3n+HbWyB5yLeQ/8Xcbwc=
Subject key identifier: 42:69:92:36:77:77:C5:AF:13:90:00:AF:99:E1:29:4C:09:D0:C7:1D
Authority key identifier: D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
Certificate issuer: /CN=A912A8BC/serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Certificate serial: 01EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
Manifest number: 01E8
Signing time: Fri 05 Dec 2025 00:54:48 +0000
Manifest this update: Fri 05 Dec 2025 00:54:47 +0000
Manifest next update: Fri 12 Dec 2025 00:54:47 +0000
Files and hashes: 1: 1cNfp3myIZlgnD6gpTHFoNMyrQE.crl (hash: XhyNIXkZ5dPc23ZBlbRIsXy70YQt1o1MHXHFC4px5To=)
2: 4D962E8AE65111ED90E5833EC4F9AE02.roa (hash: 3SQV1F9slNIO5M7UqEAQZkXcxMO9bvgWNAs/r+smThc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:54:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A8BC, serialNumber=D5C35FA779B22199609C3EA0A531C5A0D332AD01
Validity
Not Before: Dec 5 00:54:47 2025 GMT
Not After : Dec 12 00:54:47 2025 GMT
Subject: CN=69322d58-4ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:cb:69:cc:2e:12:bf:f0:f3:06:64:7c:e3:
51:98:45:c3:3c:52:3d:9c:96:f9:cd:b6:af:39:d8:
cc:53:9b:e2:6a:b8:f2:ac:f4:3e:98:c1:26:a5:d0:
7a:c8:23:74:cf:90:55:3b:37:38:d8:4a:ef:0b:2a:
a8:bb:d5:ba:3d:aa:52:20:94:72:ae:ad:50:a0:69:
57:63:20:52:5f:8e:f2:2f:d3:88:90:80:2e:7b:ea:
d2:19:25:6e:35:41:13:71:eb:c3:73:f9:d4:b6:b0:
1c:eb:18:ea:7b:59:ae:af:c0:4f:8d:cc:40:01:79:
58:ec:c7:28:1e:c5:99:a4:f3:d7:14:e2:28:4c:dc:
84:b4:74:01:4f:fc:f0:aa:d3:b7:c1:39:47:7c:67:
25:3c:d1:78:7d:4d:a4:49:31:6f:fd:22:69:f8:7b:
a6:cc:11:29:7e:cd:e5:11:73:42:b9:f7:54:c4:6d:
5d:a2:64:34:33:92:54:60:84:bb:80:65:ae:46:3e:
30:f5:21:36:e0:40:6e:58:d8:90:09:c2:0f:90:4f:
e2:13:74:f4:44:bb:a7:c3:6a:27:08:59:9a:20:d3:
4b:ee:e2:d5:ae:64:82:39:47:57:32:10:81:b1:7f:
22:26:a6:45:7e:1a:05:58:39:fd:59:a7:b6:fe:d8:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:92:36:77:77:C5:AF:13:90:00:AF:99:E1:29:4C:09:D0:C7:1D
X509v3 Authority Key Identifier:
keyid:D5:C3:5F:A7:79:B2:21:99:60:9C:3E:A0:A5:31:C5:A0:D3:32:AD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cNfp3myIZlgnD6gpTHFoNMyrQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A8BC/054A4C50E64D11EDB3F81737C4F9AE02/1cNfp3myIZlgnD6gpTHFoNMyrQE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2f:7a:49:d2:81:93:ce:85:24:86:30:74:ae:d9:22:8c:3d:
77:23:1c:bc:99:97:c5:ca:f5:8a:e1:14:b2:0b:be:00:88:85:
fc:4a:f8:94:19:99:b9:b2:68:f1:6f:30:94:f6:dd:f4:d3:10:
b8:3d:19:fc:64:35:cd:dd:4d:3b:4a:a2:3b:fa:ba:5b:64:76:
bc:fa:e8:61:e6:54:2e:fa:ed:99:5c:7f:dd:04:8f:55:6e:0b:
20:44:2a:cc:c2:35:f1:98:3c:9d:6e:32:29:35:ec:5b:a1:80:
ae:5d:3a:3a:31:23:78:ca:5e:d7:24:64:93:d6:08:40:6d:50:
1b:34:50:75:0d:d1:a8:d7:37:bb:d2:e2:3c:94:3f:25:47:7f:
10:06:a9:76:49:e2:9d:55:22:64:fd:9a:de:c4:00:5f:8f:6e:
f9:04:6b:71:5f:43:3a:10:74:86:17:00:8b:11:7d:a9:81:ad:
b8:b9:e1:40:f2:24:68:8e:37:4a:20:04:ce:bc:81:8e:af:e1:
83:06:80:d5:95:55:5b:00:6e:31:83:60:c6:13:67:f1:5e:0c:
16:49:2f:d7:4e:ca:b5:c9:d7:2a:21:0b:f1:73:68:26:22:1d:
60:13:8a:0a:af:4e:f3:e9:be:a3:1f:b9:ad:56:f8:a4:e3:50:
dc:07:76:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE4QkMxMTAvBgNVBAUTKEQ1QzM1RkE3NzlCMjIxOTk2MDlDM0VBMEE1MzFDNUEw
RDMzMkFEMDEwHhcNMjUxMjA1MDA1NDQ3WhcNMjUxMjEyMDA1NDQ3WjAYMRYwFAYD
VQQDEw02OTMyMmQ1OC00YWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzR3LacwuEr/w8wZkfONRmEXDPFI9nJb5zbavOdjMU5viarjyrPQ+mMEmpdB6
yCN0z5BVOzc42ErvCyqou9W6PapSIJRyrq1QoGlXYyBSX47yL9OIkIAue+rSGSVu
NUETcevDc/nUtrAc6xjqe1mur8BPjcxAAXlY7McoHsWZpPPXFOIoTNyEtHQBT/zw
qtO3wTlHfGclPNF4fU2kSTFv/SJp+HumzBEpfs3lEXNCufdUxG1domQ0M5JUYIS7
gGWuRj4w9SE24EBuWNiQCcIPkE/iE3T0RLunw2onCFmaINNL7uLVrmSCOUdXMhCB
sX8iJqZFfhoFWDn9Wae2/tghAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJpkjZ3
d8WvE5AAr5nhKUwJ0McdMB8GA1UdIwQYMBaAFNXDX6d5siGZYJw+oKUxxaDTMq0B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQThCQy8wNTRBNEM1MEU2
NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUlabGduRDZncFRIRm9OTXly
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFjTmZwM215SVpsZ25ENmdwVEhGb05NeXJRRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QThCQy8wNTRBNEM1MEU2NEQxMUVEQjNGODE3MzdDNEY5QUUwMi8xY05mcDNteUla
bGduRDZncFRIRm9OTXlyUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2L3pJ0oGTzoUkhjB0rtkijD13Ixy8mZfFyvWK4RSyC74AiIX8SviU
GZm5smjxbzCU9t300xC4PRn8ZDXN3U07SqI7+rpbZHa8+uhh5lQu+u2ZXH/dBI9V
bgsgRCrMwjXxmDydbjIpNexboYCuXTo6MSN4yl7XJGST1ghAbVAbNFB1DdGo1ze7
0uI8lD8lR38QBql2SeKdVSJk/ZrexABfj275BGtxX0M6EHSGFwCLEX2pga24ueFA
8iRojjdKIATOvIGOr+GDBoDVlVVbAG4xg2DGE2fxXgwWSS/XTsq1ydcqIQvxc2gm
Ih1gE4oKr07z6b6jH7mtVvik41DcB3Z2
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:57 2025 by rpki-client