This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json)
Hash identifier: emPA5wU11pcLYIO0so9RfjYIwUtrRlODICZqJXj1Eqo=
Subject key identifier: A1:5D:B7:6D:EB:CF:84:76:66:47:5C:77:1B:2B:E3:26:33:BD:37:47
Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Certificate serial: 020F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
Manifest number: 0205
Signing time: Fri 05 Dec 2025 00:47:14 +0000
Manifest this update: Fri 05 Dec 2025 00:47:13 +0000
Manifest next update: Fri 12 Dec 2025 00:47:13 +0000
Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: LqR5qzVERzt4RY0LnFFuCaMUFPXhfDN3BQpXZwqzOiE=)
2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434
Validity
Not Before: Dec 5 00:47:13 2025 GMT
Not After : Dec 12 00:47:13 2025 GMT
Subject: CN=69322b91-0df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:2e:53:d9:dd:26:2b:39:b8:7f:de:09:e6:
d7:47:f8:c6:4d:9c:ca:17:81:16:87:18:ce:93:2b:
30:46:8f:c5:1e:bd:48:be:e3:46:3f:95:50:f2:15:
2b:e8:0b:63:e7:70:5b:9e:d7:63:b3:1c:84:d6:51:
11:f7:a8:13:07:69:40:44:6f:95:9d:af:b5:72:87:
8d:c6:57:d7:50:dc:18:35:42:c4:68:ec:64:a6:58:
1b:1e:b6:f9:65:b1:8d:72:0c:ef:7e:76:66:38:ac:
ff:43:5f:7c:c8:b7:53:c2:04:96:04:56:b4:d7:33:
b8:1d:94:59:68:5f:72:e7:c3:53:51:7d:63:4d:54:
33:ea:8d:39:c5:ea:8f:79:9e:d9:58:77:3a:0d:09:
42:4a:b1:45:8e:92:d1:a8:52:a4:dc:6e:c7:63:02:
9d:c7:b8:71:9d:59:7d:fe:36:9a:0d:d6:92:ab:a5:
a2:a3:7f:7c:93:23:e5:ab:8c:c7:d2:34:e4:a9:78:
4e:dd:84:dd:36:a9:c1:54:de:6e:43:c5:19:f4:bc:
a0:24:67:dd:88:64:12:e8:36:4f:bd:59:ba:5c:fb:
94:02:22:c0:f2:8b:55:9d:e5:3c:a9:3d:e2:aa:d9:
d9:48:c1:a6:b2:35:bf:68:58:29:bc:24:52:62:aa:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5D:B7:6D:EB:CF:84:76:66:47:5C:77:1B:2B:E3:26:33:BD:37:47
X509v3 Authority Key Identifier:
keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:00:0d:63:2e:4d:d8:0f:8c:14:c1:bc:82:15:d7:4e:6c:19:
4b:60:9a:0c:49:ef:ab:af:58:b6:ae:66:7c:6b:f6:e7:5d:7a:
41:d2:cb:13:fb:a7:56:c7:70:f1:49:58:f6:6b:ce:a2:75:c3:
4e:9b:6d:cc:73:b9:fa:86:c7:42:6e:fc:9c:c5:5c:e8:2a:fe:
96:98:b3:99:fd:63:d0:8e:d7:b7:19:60:87:5c:ad:4b:dc:a4:
80:93:56:bf:66:f2:23:48:d5:a2:18:4a:b2:44:99:f8:be:f0:
97:2c:87:9b:22:57:db:d4:76:f0:61:77:70:8d:f1:7b:77:73:
e1:89:1a:d4:5a:cb:c4:54:8b:7b:82:20:44:3b:68:bc:e7:37:
d7:e5:8f:1e:f5:52:e5:72:74:f7:eb:c8:f3:f6:e4:ac:75:07:
02:5b:3c:0f:57:4c:7b:ed:f8:1e:b8:ed:b7:2f:f5:7f:27:a8:
e8:d7:d2:99:78:c2:be:7f:8d:95:4e:e3:ce:73:4a:7e:57:38:
71:2a:f6:39:02:b3:67:e9:1f:1a:34:f7:b0:08:05:2e:47:f2:
5f:04:80:fa:f8:3d:b9:1f:1b:a4:97:f6:b0:de:ac:7a:96:d9:
f6:61:1d:1c:1b:d7:e8:8f:b6:b7:b1:58:cd:91:05:4f:6f:d5:
e6:5f:c4:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy
MDFFQTY0MzQwHhcNMjUxMjA1MDA0NzEzWhcNMjUxMjEyMDA0NzEzWjAYMRYwFAYD
VQQDEw02OTMyMmI5MS0wZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2AuU9ndJis5uH/eCebXR/jGTZzKF4EWhxjOkyswRo/FHr1IvuNGP5VQ8hUr
6Atj53BbntdjsxyE1lER96gTB2lARG+Vna+1coeNxlfXUNwYNULEaOxkplgbHrb5
ZbGNcgzvfnZmOKz/Q198yLdTwgSWBFa01zO4HZRZaF9y58NTUX1jTVQz6o05xeqP
eZ7ZWHc6DQlCSrFFjpLRqFKk3G7HYwKdx7hxnVl9/jaaDdaSq6Wio398kyPlq4zH
0jTkqXhO3YTdNqnBVN5uQ8UZ9LygJGfdiGQS6DZPvVm6XPuUAiLA8otVneU8qT3i
qtnZSMGmsjW/aFgpvCRSYqpGMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFdt23r
z4R2Zkdcdxsr4yYzvTdHMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND
NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa
RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG
ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCBAA1jLk3YD4wUwbyCFddObBlLYJoMSe+rr1i2rmZ8a/bnXXpB0ssT
+6dWx3DxSVj2a86idcNOm23Mc7n6hsdCbvycxVzoKv6WmLOZ/WPQjte3GWCHXK1L
3KSAk1a/ZvIjSNWiGEqyRJn4vvCXLIebIlfb1HbwYXdwjfF7d3PhiRrUWsvEVIt7
giBEO2i85zfX5Y8e9VLlcnT368jz9uSsdQcCWzwPV0x77fgeuO23L/V/J6jo19KZ
eMK+f42VTuPOc0p+VzhxKvY5ArNn6R8aNPewCAUuR/JfBID6+D25Hxukl/aw3qx6
ltn2YR0cG9foj7a3sVjNkQVPb9XmX8ST
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:03:02 2025 by rpki-client