This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
File: fF1W_s9Nolmhwq4euK8HmiqpB7g.mft (raw, json)
Hash identifier: C1mhQuvedYN8DmiK4xn5wD6zOz5HEl9RMX4AtTQfAk4=
Subject key identifier: 95:24:94:89:1E:71:71:68:60:5F:49:55:76:D4:F9:D4:F0:06:16:1D
Authority key identifier: 7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8
Certificate issuer: /CN=A9130AC8/serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8
Certificate serial: 1128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
Manifest number: 111E
Signing time: Sat 06 Dec 2025 16:46:09 +0000
Manifest this update: Sat 06 Dec 2025 16:46:08 +0000
Manifest next update: Sat 13 Dec 2025 16:46:08 +0000
Files and hashes: 1: fF1W_s9Nolmhwq4euK8HmiqpB7g.crl (hash: BJnsk+IKqYB5GNPGAq5afeP/nOANCRKrzpal2cA25+M=)
2: 39D0B1102F7911E9A4F69342C4F9AE02.roa (hash: 5IA8PMVV1zO03OOgtuNwYqi0ljJvdLrmVU/wbQTCdxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl
rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4392 (0x1128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130AC8, serialNumber=7C5D56FECF4DA259A1C2AE1EB8AF079A2AA907B8
Validity
Not Before: Dec 6 16:46:08 2025 GMT
Not After : Dec 13 16:46:08 2025 GMT
Subject: CN=69345dd1-70d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:61:59:d4:08:33:29:75:42:21:92:53:b4:
92:0c:52:f3:a9:9a:93:ac:0f:09:49:84:29:cf:29:
85:af:9a:72:c4:10:42:6e:38:b1:01:fc:26:f2:ad:
18:72:f3:06:f0:40:b7:87:83:eb:07:4a:89:6a:99:
63:e7:26:4d:de:6b:dd:e2:ac:01:59:30:46:4d:aa:
73:92:24:82:7f:4c:80:08:0b:50:95:ae:d6:f0:ee:
3b:2a:49:67:9f:7c:c1:3c:23:cc:8d:01:1d:3f:31:
1f:2a:63:82:cb:6d:c7:ed:2a:d8:15:9b:b0:49:0d:
32:b6:0a:46:7a:46:b4:ab:2e:9b:57:9e:eb:eb:41:
9a:5c:fd:26:0e:37:00:2c:24:ae:d3:81:23:bc:a5:
f8:dd:91:0f:97:97:c2:f5:27:c9:52:03:9b:09:d5:
94:80:51:70:39:6a:f2:53:7b:ab:c4:81:87:08:c4:
1e:f1:74:c9:16:2f:f5:91:19:3b:d2:ca:bf:7b:ff:
e3:ed:c4:44:64:26:c3:6d:95:c1:42:dc:a4:92:ca:
cd:31:a1:2b:94:8c:46:0c:b3:5d:44:2e:e9:e4:db:
3d:af:53:a5:07:51:8d:54:cf:4c:af:28:a9:84:ef:
7d:13:ad:5c:05:47:41:d0:80:45:21:f7:84:39:66:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:24:94:89:1E:71:71:68:60:5F:49:55:76:D4:F9:D4:F0:06:16:1D
X509v3 Authority Key Identifier:
keyid:7C:5D:56:FE:CF:4D:A2:59:A1:C2:AE:1E:B8:AF:07:9A:2A:A9:07:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF1W_s9Nolmhwq4euK8HmiqpB7g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130AC8/FE80F992242B11E9A4B2B333C4F9AE02/fF1W_s9Nolmhwq4euK8HmiqpB7g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:55:4f:bf:98:e1:07:2b:08:39:c4:80:2b:5f:ce:17:ce:ec:
07:3d:a5:2d:44:de:4e:d4:84:67:c2:87:10:61:17:fa:e6:91:
b4:62:e2:6c:b6:11:97:ab:f3:cd:41:b1:8f:4a:21:16:92:f9:
fd:f5:f1:a6:df:ab:b8:56:cf:30:4c:2a:c5:0d:8b:9c:3b:37:
8a:88:6a:d8:38:5b:c9:25:ec:0a:9c:72:1f:59:ee:cb:e0:8a:
c6:2e:5a:00:85:fa:fa:7c:9f:9d:55:ec:6d:4a:26:32:b6:4c:
77:a6:d8:81:98:af:5b:7d:ef:28:af:d7:87:0c:07:ee:d0:72:
b5:67:ea:ed:59:20:38:16:ae:8a:c6:60:00:e2:8f:41:48:5f:
21:8e:d2:20:b2:04:cc:23:89:9d:e5:c4:5f:21:d1:f7:71:d0:
a9:0b:19:78:31:78:c4:71:5b:0a:10:6f:d5:b1:e8:bb:40:69:
fd:60:7d:f0:6b:6f:60:dc:ae:30:a0:f5:ab:8a:71:be:e5:13:
f0:21:3f:9b:81:f9:fa:3b:4d:54:95:03:ce:64:70:fe:c7:82:
43:88:98:47:80:c6:e6:f2:c4:da:22:ac:bb:3e:62:97:14:2e:
f6:95:2d:de:e1:a8:b4:77:6a:42:98:4f:c2:68:13:33:56:37:
05:fd:76:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICESgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBBQzgxMTAvBgNVBAUTKDdDNUQ1NkZFQ0Y0REEyNTlBMUMyQUUxRUI4QUYwNzlB
MkFBOTA3QjgwHhcNMjUxMjA2MTY0NjA4WhcNMjUxMjEzMTY0NjA4WjAYMRYwFAYD
VQQDEw02OTM0NWRkMS03MGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuMNhWdQIMyl1QiGSU7SSDFLzqZqTrA8JSYQpzymFr5pyxBBCbjixAfwm8q0Y
cvMG8EC3h4PrB0qJaplj5yZN3mvd4qwBWTBGTapzkiSCf0yACAtQla7W8O47Kkln
n3zBPCPMjQEdPzEfKmOCy23H7SrYFZuwSQ0ytgpGeka0qy6bV57r60GaXP0mDjcA
LCSu04EjvKX43ZEPl5fC9SfJUgObCdWUgFFwOWryU3urxIGHCMQe8XTJFi/1kRk7
0sq/e//j7cREZCbDbZXBQtykksrNMaErlIxGDLNdRC7p5Ns9r1OlB1GNVM9Mryip
hO99E61cBUdB0IBFIfeEOWZOYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUklIke
cXFoYF9JVXbU+dTwBhYdMB8GA1UdIwQYMBaAFHxdVv7PTaJZocKuHrivB5oqqQe4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEFDOC9GRTgwRjk5MjI0
MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9sbWh3cTRldUs4SG1pcXBC
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZGMVdfczlOb2xtaHdxNGV1SzhIbWlxcEI3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MEFDOC9GRTgwRjk5MjI0MkIxMUU5QTRCMkIzMzNDNEY5QUUwMi9mRjFXX3M5Tm9s
bWh3cTRldUs4SG1pcXBCN2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTVU+/mOEHKwg5xIArX84XzuwHPaUtRN5O1IRnwocQYRf65pG0YuJs
thGXq/PNQbGPSiEWkvn99fGm36u4Vs8wTCrFDYucOzeKiGrYOFvJJewKnHIfWe7L
4IrGLloAhfr6fJ+dVextSiYytkx3ptiBmK9bfe8or9eHDAfu0HK1Z+rtWSA4Fq6K
xmAA4o9BSF8hjtIgsgTMI4md5cRfIdH3cdCpCxl4MXjEcVsKEG/Vsei7QGn9YH3w
a29g3K4woPWrinG+5RPwIT+bgfn6O01UlQPOZHD+x4JDiJhHgMbm8sTaIqy7PmKX
FC72lS3e4ai0d2pCmE/CaBMzVjcF/Xao
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:27:40 2025 by rpki-client