This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json)
Hash identifier: fbYb3oAiAfnORt3qo2wbdDeww0QUniNJ/8sRoZdow1w=
Subject key identifier: 7E:F2:85:C6:31:49:3A:41:40:CD:EF:39:B8:60:4A:C5:08:8A:A0:B6
Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Certificate serial: F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
Manifest number: E6
Signing time: Fri 05 Dec 2025 03:37:02 +0000
Manifest this update: Fri 05 Dec 2025 03:37:01 +0000
Manifest next update: Fri 12 Dec 2025 03:37:01 +0000
Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: XQB2j3WXdR7LdTMMeipEnm2RM+74LkJ23jdlUBAQ1Sg=)
2: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: bYiGlJTSCLhia07K1lJYXHC5JgOu+61a9mLQrwhq6HI=)
3: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: mbFfYSX+BdjEnhF4lUo27j9bjQ0kInCW9ZTNXOQrp2Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:37:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086
Validity
Not Before: Dec 5 03:37:01 2025 GMT
Not After : Dec 12 03:37:01 2025 GMT
Subject: CN=6932535e-1f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:e1:ae:4f:f9:13:8a:45:75:d7:f2:da:96:
00:96:51:f9:2b:3c:99:5d:77:61:55:ae:c6:b5:99:
6b:f9:f2:81:b2:f2:2b:29:93:64:c2:8e:dc:74:9b:
ce:60:45:12:7c:8a:27:31:76:42:af:24:3e:a1:8c:
44:4b:36:fe:61:25:88:9c:81:a1:8b:22:df:d5:f6:
ba:1e:f3:9b:fa:00:d2:e7:03:83:00:54:34:e6:e2:
cc:e2:76:86:8a:61:4a:aa:c7:96:94:e6:6f:91:d1:
45:f5:bb:76:35:4e:a1:55:b8:55:c9:00:1f:25:32:
90:95:63:f8:fc:ab:34:1a:cd:22:9c:f8:0e:50:5b:
ce:5d:81:59:fb:e3:0b:3d:6a:a9:7b:50:36:ad:9b:
00:6f:bb:75:50:78:87:c3:87:ba:91:4b:9b:10:af:
2e:a4:8b:da:de:eb:38:ae:3a:45:da:b6:74:24:53:
36:d0:f5:63:19:48:df:0f:7f:f7:93:fd:b8:62:26:
99:a0:35:e3:d4:63:18:97:85:67:57:08:f7:0a:ab:
e7:18:af:6b:c7:23:4d:22:89:0b:b0:ef:eb:05:c7:
98:1b:62:be:7e:57:bc:b3:82:ec:58:8a:a3:cd:c8:
50:b0:de:ef:e7:06:a4:01:78:cb:20:4a:9b:de:4c:
fa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F2:85:C6:31:49:3A:41:40:CD:EF:39:B8:60:4A:C5:08:8A:A0:B6
X509v3 Authority Key Identifier:
keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:62:ec:ce:f1:f8:3a:75:19:e8:8e:f2:ef:3e:9e:43:81:4d:
49:99:1a:0e:3b:b9:d9:b7:12:31:70:dd:89:75:6e:d7:c6:35:
5f:6e:51:6d:4b:db:e4:d1:86:61:93:92:7d:d8:bf:f0:5a:58:
c7:61:9e:0e:3c:df:8e:6f:26:1c:55:11:2a:8d:0b:5c:2f:75:
ea:52:9c:f8:1e:ad:ea:f2:1b:a0:74:cb:07:1d:26:83:59:c1:
b3:25:30:1d:93:98:96:1f:02:50:f7:cf:aa:4e:f7:99:f2:8b:
aa:43:e4:5d:4d:13:9e:49:84:e2:2d:83:d9:15:2e:19:35:a1:
6d:1e:c1:d4:3b:8b:32:f7:5b:fe:8d:ad:a5:94:28:5e:4d:22:
ba:dc:23:10:29:b6:39:c2:9e:66:3f:20:1a:bf:1e:fb:d6:e0:
fd:57:47:20:93:9d:14:de:86:c4:89:ea:fd:b9:30:07:65:37:
6a:d4:9c:be:94:f3:01:08:9a:f3:e3:22:d5:bc:12:f6:14:b2:
14:31:49:91:09:44:5d:8d:ec:56:12:a1:a7:d6:9c:98:92:2c:
3b:bb:4d:72:e0:e0:5a:4a:20:8a:8b:72:e4:6a:0d:49:8c:66:
cd:23:38:cd:4e:2a:92:1b:e5:e0:b7:24:69:2a:a1:77:0a:bc:
d1:1f:37:71
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw
MjI3QjkwODYwHhcNMjUxMjA1MDMzNzAxWhcNMjUxMjEyMDMzNzAxWjAYMRYwFAYD
VQQDEw02OTMyNTM1ZS0xZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt7Phrk/5E4pFddfy2pYAllH5KzyZXXdhVa7GtZlr+fKBsvIrKZNkwo7cdJvO
YEUSfIonMXZCryQ+oYxESzb+YSWInIGhiyLf1fa6HvOb+gDS5wODAFQ05uLM4naG
imFKqseWlOZvkdFF9bt2NU6hVbhVyQAfJTKQlWP4/Ks0Gs0inPgOUFvOXYFZ++ML
PWqpe1A2rZsAb7t1UHiHw4e6kUubEK8upIva3us4rjpF2rZ0JFM20PVjGUjfD3/3
k/24YiaZoDXj1GMYl4VnVwj3CqvnGK9rxyNNIokLsO/rBceYG2K+fle8s4LsWIqj
zchQsN7v5wakAXjLIEqb3kz6LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7yhcYx
STpBQM3vObhgSsUIiqC2MB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2
RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3
VzNKMXNhcHJfZm9DSjdrSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBAYuzO8fg6dRnojvLvPp5DgU1JmRoOO7nZtxIxcN2JdW7XxjVfblFt
S9vk0YZhk5J92L/wWljHYZ4OPN+ObyYcVREqjQtcL3XqUpz4Hq3q8hugdMsHHSaD
WcGzJTAdk5iWHwJQ98+qTveZ8ouqQ+RdTROeSYTiLYPZFS4ZNaFtHsHUO4sy91v+
ja2llCheTSK63CMQKbY5wp5mPyAavx771uD9V0cgk50U3obEier9uTAHZTdq1Jy+
lPMBCJrz4yLVvBL2FLIUMUmRCURdjexWEqGn1pyYkiw7u01y4OBaSiCKi3Lkag1J
jGbNIzjNTiqSG+XgtyRpKqF3CrzRHzdx
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:52:47 2025 by rpki-client