This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json)
Hash identifier: lQ+g3njB0o5phOY0VFoBgYDB9yHoObA6N3nckcvoIfU=
Subject key identifier: CB:05:C4:E6:09:67:E6:BC:8E:A6:EA:9E:F8:EE:FC:8B:14:C5:EA:79
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial: 025F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
Manifest number: 024F
Signing time: Wed 17 Dec 2025 01:12:26 +0000
Manifest this update: Wed 17 Dec 2025 01:12:26 +0000
Manifest next update: Wed 24 Dec 2025 01:12:26 +0000
Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: TpfeiZCVdcbKz+n06r6jGxaratJQWTy+uch8BNnysrc=)
2: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: LaP0YhIMPBKWNFUEp0aNCBhEMDr2b8V3vIh2Qxwj/jw=)
3: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: /rubUqM8iakBB4nVHyGXJxMwm5Edukun5UH3RjpHupI=)
4: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: SZ6kzINKdgGfoDPlHAn87OJmgfXdX29J/2qyR/Wg9Eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 01:12:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 607 (0x25f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Validity
Not Before: Dec 17 01:12:26 2025 GMT
Not After : Dec 24 01:12:26 2025 GMT
Subject: CN=6942037a-c559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:d0:f4:ef:1f:89:e3:00:6b:f5:e5:ec:94:
53:fd:ad:19:c2:15:6e:1e:29:31:fb:50:4a:f6:ed:
de:3f:a3:8c:39:d5:7d:b3:b3:c3:d8:16:d6:d5:3c:
41:05:a2:22:f1:59:de:d1:72:96:e8:a9:00:e4:da:
da:fc:93:95:b0:74:34:2b:bf:bd:31:0e:df:06:fa:
d0:48:b6:bd:65:d1:e3:b2:68:91:cb:06:40:a6:61:
95:09:12:b8:d3:0e:72:ae:41:2e:cd:da:1a:e7:07:
85:64:e8:3a:4d:b3:c7:ad:ba:5b:56:e6:81:09:ee:
95:8a:f0:7d:95:8f:2f:b9:a8:08:a7:67:44:65:77:
be:e1:a3:8e:2d:44:2f:da:47:00:67:4c:d3:2f:dd:
20:cd:b7:b3:2b:8d:6d:cd:f8:79:0d:87:cb:f6:54:
63:03:b4:41:84:21:b7:45:2d:a1:ca:05:8b:e0:57:
b0:34:80:31:80:5b:cb:94:a2:39:13:41:a8:75:80:
85:7c:41:af:88:e8:73:f0:2e:f6:a6:d5:b8:b3:8c:
a0:c6:04:a3:77:17:0b:17:64:e4:ab:ae:1b:4b:fc:
98:c9:45:d8:9b:79:06:6a:00:ab:f3:e2:42:7b:8d:
5c:07:d3:1e:4e:53:07:e7:fd:2a:c2:bb:16:30:70:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:05:C4:E6:09:67:E6:BC:8E:A6:EA:9E:F8:EE:FC:8B:14:C5:EA:79
X509v3 Authority Key Identifier:
keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:df:34:b7:e4:94:24:7d:1b:73:e3:f5:ca:9c:e6:cc:7e:5e:
84:27:2c:90:d7:b0:d4:73:84:2c:e7:9e:75:05:f6:26:00:13:
3a:60:40:ea:81:b5:5b:f6:9e:46:c8:c5:ad:ac:a1:e7:c3:a0:
e9:cb:9a:a9:ae:ab:fd:a3:55:6d:8f:fd:f3:f5:85:e3:f9:6e:
ac:58:86:92:be:ae:a2:61:29:4d:05:3b:04:14:93:b3:3e:1b:
3b:21:21:9d:2a:78:5d:ef:39:19:6e:f1:65:3d:45:1e:6d:12:
42:61:ff:94:67:6e:ef:77:9f:53:39:9d:4d:5c:ce:d1:0e:62:
15:d3:ab:fa:1e:bc:09:55:8e:7e:66:27:6e:42:4c:3c:c4:4e:
d8:78:67:1f:8f:aa:4e:f9:74:ef:da:0e:00:11:28:fe:ef:c7:
bd:ef:87:4b:78:de:36:76:0f:95:9b:5e:9d:b2:1f:42:51:6b:
0f:db:e0:14:a8:76:4e:2a:d6:82:53:40:e1:92:14:ac:55:13:
1b:38:19:dc:14:f2:be:10:82:54:b3:bf:5c:45:50:a2:ed:cf:
f7:e7:fb:74:c6:7d:da:8d:26:ad:b3:72:12:12:25:78:bc:74:
67:7d:b6:08:21:d1:12:4f:3a:22:74:c0:51:12:67:3e:ba:0f:
e1:59:41:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1
Rjg1MDNCMTQwHhcNMjUxMjE3MDExMjI2WhcNMjUxMjI0MDExMjI2WjAYMRYwFAYD
VQQDDA02OTQyMDM3YS1jNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsaDQ9O8fieMAa/Xl7JRT/a0ZwhVuHikx+1BK9u3eP6OMOdV9s7PD2BbW1TxB
BaIi8Vne0XKW6KkA5Nra/JOVsHQ0K7+9MQ7fBvrQSLa9ZdHjsmiRywZApmGVCRK4
0w5yrkEuzdoa5weFZOg6TbPHrbpbVuaBCe6VivB9lY8vuagIp2dEZXe+4aOOLUQv
2kcAZ0zTL90gzbezK41tzfh5DYfL9lRjA7RBhCG3RS2hygWL4FewNIAxgFvLlKI5
E0GodYCFfEGviOhz8C72ptW4s4ygxgSjdxcLF2Tkq64bS/yYyUXYm3kGagCr8+JC
e41cB9MeTlMH5/0qwrsWMHCl0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsFxOYJ
Z+a8jqbqnvju/IsUxep5MB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB
MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj
RFhjVmNkLUctTTFmaFFPeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJ3zS35JQkfRtz4/XKnObMfl6EJyyQ17DUc4Qs5551BfYmABM6YEDq
gbVb9p5GyMWtrKHnw6Dpy5qprqv9o1Vtj/3z9YXj+W6sWIaSvq6iYSlNBTsEFJOz
Phs7ISGdKnhd7zkZbvFlPUUebRJCYf+UZ27vd59TOZ1NXM7RDmIV06v6HrwJVY5+
ZiduQkw8xE7YeGcfj6pO+XTv2g4AESj+78e974dLeN42dg+Vm16dsh9CUWsP2+AU
qHZOKtaCU0DhkhSsVRMbOBncFPK+EIJUs79cRVCi7c/35/t0xn3ajSats3ISEiV4
vHRnfbYIIdESTzoidMBREmc+ug/hWUHc
-----END CERTIFICATE-----
Generated at Fri Dec 19 00:30:45 2025 by rpki-client