This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
File: AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json)
Hash identifier: W6LYFK5itwcT54rQ9jz3H3yeVEIDihN/ncAORSWRnMI=
Subject key identifier: 9F:0B:22:AF:3F:88:AE:FD:D1:DD:86:05:A0:F2:83:8B:9F:B8:EB:72
Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
Certificate issuer: /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Certificate serial: 1734
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
Manifest number: 1721
Signing time: Sat 06 Dec 2025 16:13:52 +0000
Manifest this update: Sat 06 Dec 2025 16:13:51 +0000
Manifest next update: Sat 13 Dec 2025 16:13:51 +0000
Files and hashes: 1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: p9kv+YgyKcEdJSSaa95hjsQh1DcC76dh9cqFC/lHvVw=)
2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: 822Cv07i81nzITiBp8oPidqObRAFnQ5Dsa+D8sFZUvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5940 (0x1734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Validity
Not Before: Dec 6 16:13:51 2025 GMT
Not After : Dec 13 16:13:51 2025 GMT
Subject: CN=69345640-75e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2b:f6:10:34:38:f1:3d:8f:95:6d:fe:14:90:
46:89:40:26:ed:5d:ba:c7:aa:41:b9:ec:34:10:a4:
df:d1:35:ab:36:0a:78:14:24:fe:d0:a9:4d:e7:fd:
39:91:32:90:88:54:93:d4:1e:dc:ba:6e:1a:03:29:
fb:44:8e:4c:30:c1:47:33:68:3b:82:e1:22:b8:65:
b8:89:4a:51:bc:da:db:3d:ea:e3:e3:9e:5d:af:71:
17:c4:8d:e9:53:c5:87:59:1a:ce:11:2f:77:ba:29:
a4:6c:42:e3:18:19:c9:fa:35:7d:fb:55:bd:91:0c:
99:e7:aa:57:db:21:1a:96:82:f8:0b:21:d1:da:35:
48:73:db:3c:3c:51:ec:82:c9:78:4b:de:49:59:59:
f8:d4:f7:56:de:a8:ae:5f:db:60:e8:b2:95:86:f7:
d1:b8:5f:cc:f8:41:4f:4c:4b:62:df:4a:13:64:47:
e7:78:05:20:cb:8d:1d:4a:09:d9:c6:71:9c:54:17:
72:c2:18:b8:df:fd:43:80:e3:26:d3:3b:8c:c0:42:
c0:b9:f4:53:67:d8:d9:f9:8a:ee:c4:6f:68:2d:cd:
e6:cb:c7:d9:f7:63:05:8f:6e:d3:29:3a:41:48:70:
3d:5a:1f:5e:c5:1e:d9:a8:63:0e:6d:f2:8a:51:a6:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0B:22:AF:3F:88:AE:FD:D1:DD:86:05:A0:F2:83:8B:9F:B8:EB:72
X509v3 Authority Key Identifier:
keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:61:57:fe:68:70:ea:ff:a9:85:7c:74:7a:4c:74:fd:26:a6:
98:2b:b0:3d:92:43:3e:9d:6c:d2:0a:58:7d:5d:7a:07:8a:b1:
77:fd:31:e5:d8:db:10:d0:9d:1b:ea:a3:3e:f7:07:49:34:f0:
54:c5:e4:59:af:31:c5:ef:9a:fc:f0:44:2d:e2:8b:30:8d:ae:
35:32:aa:c9:ca:c8:06:6b:6a:89:d9:2f:db:8c:7e:22:51:17:
2e:1c:d9:4b:88:00:43:a0:d6:58:b8:e2:74:75:b4:c5:73:ca:
2c:72:96:98:bd:91:98:b6:9f:be:07:a3:39:9f:02:43:95:70:
dc:dd:f7:fe:f7:ca:aa:04:14:0c:a0:f5:83:86:86:c2:60:bd:
8f:34:67:ce:c3:ba:f4:c2:ea:e4:3f:5e:00:42:d7:eb:d0:89:
ff:6e:2c:3d:1c:cc:8f:41:b4:f0:22:c5:5d:87:92:b3:92:c7:
ba:aa:59:b2:5f:15:90:e8:78:51:a8:14:9c:de:bf:dd:42:1c:
f7:50:88:c9:b3:32:10:40:32:aa:24:9c:1c:6e:3f:73:3d:36:
48:e6:03:fa:a6:73:73:ea:0d:dd:1f:5e:60:37:3c:6a:b3:7d:
39:5f:fc:61:2f:52:b9:42:7d:34:9f:68:50:d4:fe:fb:c2:a9:
63:3a:70:46
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD
M0MwMkVDRjQwHhcNMjUxMjA2MTYxMzUxWhcNMjUxMjEzMTYxMzUxWjAYMRYwFAYD
VQQDEw02OTM0NTY0MC03NWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5iv2EDQ48T2PlW3+FJBGiUAm7V26x6pBuew0EKTf0TWrNgp4FCT+0KlN5/05
kTKQiFST1B7cum4aAyn7RI5MMMFHM2g7guEiuGW4iUpRvNrbPerj455dr3EXxI3p
U8WHWRrOES93uimkbELjGBnJ+jV9+1W9kQyZ56pX2yEaloL4CyHR2jVIc9s8PFHs
gsl4S95JWVn41PdW3qiuX9tg6LKVhvfRuF/M+EFPTEti30oTZEfneAUgy40dSgnZ
xnGcVBdywhi43/1DgOMm0zuMwELAufRTZ9jZ+YruxG9oLc3my8fZ92MFj27TKTpB
SHA9Wh9exR7ZqGMObfKKUaYOOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8LIq8/
iK790d2GBaDyg4ufuOtyMB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB
NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6
anpyN1dhaldKeFhEd0M3UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAaYVf+aHDq/6mFfHR6THT9JqaYK7A9kkM+nWzSClh9XXoHirF3/THl
2NsQ0J0b6qM+9wdJNPBUxeRZrzHF75r88EQt4oswja41MqrJysgGa2qJ2S/bjH4i
URcuHNlLiABDoNZYuOJ0dbTFc8oscpaYvZGYtp++B6M5nwJDlXDc3ff+98qqBBQM
oPWDhobCYL2PNGfOw7r0wurkP14AQtfr0In/biw9HMyPQbTwIsVdh5Kzkse6qlmy
XxWQ6HhRqBSc3r/dQhz3UIjJszIQQDKqJJwcbj9zPTZI5gP6pnNz6g3dH15gNzxq
s305X/xhL1K5Qn00n2hQ1P77wqljOnBG
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:51 2025 by rpki-client