This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
File: ioDqhWIqoHAhvfSshBiw2aU5rOE.mft (raw, json)
Hash identifier: d8EINWkFRVAHK2WZWo/0tYm5cMK4cRRAQFyPLFi2PdI=
Subject key identifier: E8:3F:FE:86:01:C3:1E:33:E3:35:27:3E:FE:B8:51:FB:3A:0E:0C:57
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Certificate issuer: /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial: 0575
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
Manifest number: 0567
Signing time: Thu 04 Dec 2025 22:00:53 +0000
Manifest this update: Thu 04 Dec 2025 22:00:52 +0000
Manifest next update: Thu 11 Dec 2025 22:00:52 +0000
Files and hashes: 1: ioDqhWIqoHAhvfSshBiw2aU5rOE.crl (hash: 7jJMNd2AKZLkaALGAd3ymeHjbPrmgogLLp2cWj3jqMM=)
2: 3A549A1EB00211F0A3A86535C4F9AE02.roa (hash: O1i4s2Zr51Hi0mPfbBoKpN4N/jUayIwH+cV3RnZNMM4=)
3: DA0AD156799211EFADCD2257C4F9AE02.roa (hash: knZ5ekXVEf4sYcirbL+CCT4b4jXdUdcrAEg+dwXTAho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1397 (0x575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Validity
Not Before: Dec 4 22:00:52 2025 GMT
Not After : Dec 11 22:00:52 2025 GMT
Subject: CN=69320495-70c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a5:aa:c7:2f:67:8b:18:87:b2:67:b6:a1:0c:
0e:bc:cf:f1:c3:6e:78:5c:9e:a7:d2:b7:9e:5b:41:
19:da:e7:f1:78:1b:26:a9:18:0b:32:e1:b1:f4:d9:
7e:a3:7f:db:d3:bd:02:36:7e:94:93:e2:49:5f:23:
e4:02:42:5c:17:1e:d9:36:00:0f:c6:2a:b4:6b:3a:
b2:92:f3:d9:a7:1a:0d:54:17:4c:c2:27:cb:c5:83:
67:b8:e9:17:4e:8f:90:71:8f:01:22:b2:4d:21:a7:
d0:e3:71:dc:59:e3:02:6a:a5:a9:02:99:80:d8:7e:
21:85:7b:59:0a:3f:99:7d:9e:69:d2:b1:d1:77:56:
6a:82:80:2c:92:47:2e:74:ac:3a:ed:fd:e6:9b:96:
72:81:a0:e0:96:fc:f1:ee:3d:7d:7d:a2:32:d5:16:
21:0c:d5:43:22:3b:33:b4:29:e4:6a:11:8c:d6:85:
53:d9:63:d6:9b:46:35:0f:b6:fc:d3:ff:a3:9a:fa:
5a:79:7a:93:e9:42:3e:92:50:1d:42:9b:dd:6f:b9:
8d:de:88:3c:99:2f:c7:f7:9d:e1:33:b6:39:6d:80:
1a:78:76:bf:f2:cd:4a:84:5f:86:54:e0:54:71:d7:
00:e8:ac:76:86:d2:02:b4:90:10:29:21:d3:55:d5:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3F:FE:86:01:C3:1E:33:E3:35:27:3E:FE:B8:51:FB:3A:0E:0C:57
X509v3 Authority Key Identifier:
keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:ca:30:43:90:0f:b2:5c:8e:d6:9b:fa:d1:06:94:8a:b9:4c:
80:50:91:90:a7:f5:4e:93:56:27:d1:13:39:92:0e:b0:0c:1f:
88:dc:d7:c9:5c:bb:43:72:c4:27:cf:a7:65:f9:6e:ae:21:8b:
a0:ab:88:b7:1a:51:a2:e8:bc:62:41:57:cb:60:e9:7e:b8:20:
b6:4a:c7:22:d1:58:5e:61:71:fe:29:f4:22:07:2f:d0:09:ad:
3e:da:ae:8b:69:c5:47:09:ff:5d:86:1e:38:11:d1:f3:59:11:
fe:93:10:e5:15:eb:3e:21:ea:17:f4:03:af:f5:d9:cb:21:5e:
0b:fd:bf:24:da:13:a2:36:5a:17:85:73:89:bc:d7:bc:ee:b5:
32:ad:6a:20:ca:2d:09:4c:38:12:b2:98:c5:4a:ad:a2:de:a5:
ac:f3:25:48:ff:2f:f6:61:78:35:10:f0:2e:f7:64:c6:5d:09:
85:44:04:d4:2f:02:76:de:aa:10:80:39:61:31:54:70:8d:44:
bf:f8:2a:a8:92:16:b0:91:a2:22:05:5e:51:15:a0:18:84:a0:
57:e5:5d:d0:1b:b9:da:6c:56:fa:9a:2a:5f:a2:cd:2e:ae:9d:
76:72:eb:bf:84:2f:0b:c5:c4:ab:98:00:6a:6a:ca:e2:cc:89:
85:12:5c:ad
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5
QTUzOUFDRTEwHhcNMjUxMjA0MjIwMDUyWhcNMjUxMjExMjIwMDUyWjAYMRYwFAYD
VQQDEw02OTMyMDQ5NS03MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyaWqxy9nixiHsme2oQwOvM/xw254XJ6n0reeW0EZ2ufxeBsmqRgLMuGx9Nl+
o3/b070CNn6Uk+JJXyPkAkJcFx7ZNgAPxiq0azqykvPZpxoNVBdMwifLxYNnuOkX
To+QcY8BIrJNIafQ43HcWeMCaqWpApmA2H4hhXtZCj+ZfZ5p0rHRd1ZqgoAskkcu
dKw67f3mm5ZygaDglvzx7j19faIy1RYhDNVDIjsztCnkahGM1oVT2WPWm0Y1D7b8
0/+jmvpaeXqT6UI+klAdQpvdb7mN3og8mS/H953hM7Y5bYAaeHa/8s1KhF+GVOBU
cdcA6Kx2htICtJAQKSHTVdXrkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg//oYB
wx4z4zUnPv64Ufs6DgxXMB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx
N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDlCRS9CMDlDM0NFMjExN0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9I
QWh2ZlNzaEJpdzJhVTVyT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAFyjBDkA+yXI7Wm/rRBpSKuUyAUJGQp/VOk1Yn0RM5kg6wDB+I3NfJ
XLtDcsQnz6dl+W6uIYugq4i3GlGi6LxiQVfLYOl+uCC2Ssci0VheYXH+KfQiBy/Q
Ca0+2q6LacVHCf9dhh44EdHzWRH+kxDlFes+IeoX9AOv9dnLIV4L/b8k2hOiNloX
hXOJvNe87rUyrWogyi0JTDgSspjFSq2i3qWs8yVI/y/2YXg1EPAu92TGXQmFRATU
LwJ23qoQgDlhMVRwjUS/+CqokhawkaIiBV5RFaAYhKBX5V3QG7nabFb6mipfos0u
rp12cuu/hC8LxcSrmABqasrizImFElyt
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:08 2025 by rpki-client