This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json)
Hash identifier: bNf3h0jmA2EgNbzxjrb0G5j1qRWb8w6r8gG5XXep5fI=
Subject key identifier: 6A:E5:55:04:9C:E7:77:72:79:96:65:25:87:6B:84:3E:EF:8D:FB:1D
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial: 025A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
Manifest number: 024A
Signing time: Sun 07 Dec 2025 00:19:48 +0000
Manifest this update: Sun 07 Dec 2025 00:19:48 +0000
Manifest next update: Sun 14 Dec 2025 00:19:48 +0000
Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: 5wj/EjYarMLoQbS3U7IaV8aDA2pyYdpRAKFv2kxPezg=)
2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: /rubUqM8iakBB4nVHyGXJxMwm5Edukun5UH3RjpHupI=)
3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: SZ6kzINKdgGfoDPlHAn87OJmgfXdX29J/2qyR/Wg9Eg=)
4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: LaP0YhIMPBKWNFUEp0aNCBhEMDr2b8V3vIh2Qxwj/jw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602 (0x25a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Validity
Not Before: Dec 7 00:19:48 2025 GMT
Not After : Dec 14 00:19:48 2025 GMT
Subject: CN=6934c824-d7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:3a:1d:83:df:d5:a5:dc:3b:9b:54:6d:71:
49:b4:fd:2b:ca:ce:66:15:92:d3:a8:1a:f4:14:72:
ad:9c:64:8f:bc:e7:e9:52:4f:de:79:91:7a:3a:e5:
f9:45:ad:f6:6d:81:7b:1e:af:cf:da:ea:79:f8:44:
e4:17:1c:14:d4:f6:95:12:75:4b:02:ba:6f:f3:02:
d1:8b:15:da:aa:ef:c2:0d:ec:36:2a:33:01:e6:9e:
0d:f9:71:9d:d9:4b:f3:aa:ab:4e:ac:d0:a3:3d:ff:
63:d3:45:0f:c6:13:97:f7:fa:91:b5:17:69:a2:6a:
b7:35:23:3d:af:b0:01:47:94:2f:0f:01:d3:a9:b0:
cd:9e:5c:4d:d6:40:3a:04:8e:fe:fe:f1:69:20:a5:
9a:5f:a2:5b:70:9c:e5:e3:94:fd:2d:12:8a:7c:81:
79:e8:f5:78:5e:7c:3e:90:5b:35:c6:7a:d9:df:b9:
a8:1a:a6:6a:4c:d8:fb:23:be:e0:10:69:b1:e3:ee:
ab:c5:0b:65:f0:40:c0:1e:91:8a:33:ca:df:e8:dc:
c7:62:f7:8e:39:b1:3a:ed:da:21:d8:d0:9d:14:36:
8c:84:3a:75:d3:02:7f:25:05:db:e9:2b:7b:14:db:
e2:f9:c4:eb:83:6c:f5:31:97:92:14:62:b5:a2:9e:
1a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E5:55:04:9C:E7:77:72:79:96:65:25:87:6B:84:3E:EF:8D:FB:1D
X509v3 Authority Key Identifier:
keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:49:81:55:a5:46:e1:5d:e9:66:89:9b:fb:f3:17:3f:54:d3:
a2:b3:b7:9a:8a:33:5c:c9:8e:87:e4:d8:1d:5b:3b:8a:1f:d3:
7c:91:4a:c5:70:50:02:5f:7a:4c:b4:53:53:d1:2f:f9:57:a4:
e4:d0:b1:f8:25:ca:63:fe:82:d1:fb:84:9b:8b:d3:27:b8:03:
65:24:89:03:66:79:fd:33:90:f5:a3:81:10:06:52:a2:c3:0a:
0d:30:41:c0:e1:9b:5c:53:18:0f:00:d4:c0:46:09:02:8a:77:
8e:0e:ab:ee:9a:80:1b:32:8e:a0:d0:ce:15:0d:ab:3f:bc:0d:
09:a1:ff:f1:19:49:96:11:d6:f3:c8:91:3b:02:d7:ee:53:b4:
c8:18:fe:c3:3f:67:09:ad:a0:15:96:6c:8e:62:ca:10:36:12:
9d:95:99:9c:13:a3:14:42:19:7f:24:fc:a8:a4:49:ab:9a:a8:
09:64:df:d3:91:60:4c:52:d3:d5:c7:4a:eb:2c:4f:52:ee:c7:
06:41:2d:dc:5e:7e:a8:0a:eb:8f:46:a9:4b:fc:be:9a:e2:6f:
60:ab:af:5b:f8:ec:e8:c0:e8:3d:01:85:44:1d:0e:c4:02:6c:
a1:89:f5:01:20:a8:10:ea:6d:bd:5b:18:b3:d8:bc:67:66:b7:
ed:87:4a:de
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1
Rjg1MDNCMTQwHhcNMjUxMjA3MDAxOTQ4WhcNMjUxMjE0MDAxOTQ4WjAYMRYwFAYD
VQQDEw02OTM0YzgyNC1kN2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0bs6HYPf1aXcO5tUbXFJtP0rys5mFZLTqBr0FHKtnGSPvOfpUk/eeZF6OuX5
Ra32bYF7Hq/P2up5+ETkFxwU1PaVEnVLArpv8wLRixXaqu/CDew2KjMB5p4N+XGd
2UvzqqtOrNCjPf9j00UPxhOX9/qRtRdpomq3NSM9r7ABR5QvDwHTqbDNnlxN1kA6
BI7+/vFpIKWaX6JbcJzl45T9LRKKfIF56PV4Xnw+kFs1xnrZ37moGqZqTNj7I77g
EGmx4+6rxQtl8EDAHpGKM8rf6NzHYveOObE67doh2NCdFDaMhDp10wJ/JQXb6St7
FNvi+cTrg2z1MZeSFGK1op4aIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrlVQSc
53dyeZZlJYdrhD7vjfsdMB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB
MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj
RFhjVmNkLUctTTFmaFFPeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCrSYFVpUbhXelmiZv78xc/VNOis7eaijNcyY6H5NgdWzuKH9N8kUrF
cFACX3pMtFNT0S/5V6Tk0LH4Jcpj/oLR+4Sbi9MnuANlJIkDZnn9M5D1o4EQBlKi
wwoNMEHA4ZtcUxgPANTARgkCineODqvumoAbMo6g0M4VDas/vA0Jof/xGUmWEdbz
yJE7AtfuU7TIGP7DP2cJraAVlmyOYsoQNhKdlZmcE6MUQhl/JPyopEmrmqgJZN/T
kWBMUtPVx0rrLE9S7scGQS3cXn6oCuuPRqlL/L6a4m9gq69b+OzowOg9AYVEHQ7E
AmyhifUBIKgQ6m29Wxiz2LxnZrfth0re
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:58:58 2025 by rpki-client