This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json)
Hash identifier: jFCGkcnS83eBtt3ADNU+px+wdwqGonvn7FrNIYmeA0Y=
Subject key identifier: C7:46:2D:45:11:BC:37:BD:28:F5:F0:A9:AA:B4:24:F3:7C:2F:01:33
Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90
Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
Certificate serial: 0635
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
Manifest number: 0635
Signing time: Sat 06 Dec 2025 21:34:04 +0000
Manifest this update: Sat 06 Dec 2025 21:34:04 +0000
Manifest next update: Sat 13 Dec 2025 21:34:04 +0000
Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: DBi5nrtWdXBOq7baqGNd/u72LakZmN+yHCSD8AR3gZU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl
rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1589 (0x635)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990
Validity
Not Before: Dec 6 21:34:04 2025 GMT
Not After : Dec 13 21:34:04 2025 GMT
Subject: CN=6934a14c-269b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2c:50:1c:2b:86:44:49:61:97:70:c7:e1:25:
ec:f3:e7:cc:df:a0:fe:dc:f7:f0:4f:fd:cf:97:98:
26:74:6a:fe:49:4c:fd:0b:37:e6:05:b1:f9:b8:f1:
6a:43:36:23:b9:06:18:ea:16:1d:24:54:7e:51:93:
e8:8f:36:a5:6e:8c:4f:11:ab:f4:d5:dd:78:13:9a:
91:2c:37:ab:fe:1d:bd:3a:7c:1a:bb:3b:d5:aa:c6:
57:21:a0:13:fe:de:35:b3:7c:00:ce:3e:97:72:39:
5c:c4:2d:25:26:4d:9c:09:c5:f9:ea:fa:54:70:76:
b5:8d:55:7e:e7:2c:73:04:f2:ea:cc:b8:10:77:18:
2e:e6:fc:b2:ef:a2:76:0e:fa:54:e2:e0:21:03:f3:
74:8f:6c:77:8f:dd:4a:f2:82:45:bb:2c:24:11:87:
38:77:0a:70:14:d6:93:40:f3:6f:fe:0e:aa:c7:20:
c5:42:9e:48:d0:47:3e:a3:6b:83:ff:56:fa:27:5d:
8d:2f:a0:18:88:e8:43:36:67:8e:e4:4e:1f:44:ee:
2a:4c:e8:91:10:ea:33:f3:48:84:6e:ed:25:3f:38:
2a:34:e9:3f:bf:4e:80:36:00:2f:dc:48:72:f0:a2:
36:bf:11:9b:dc:0b:5e:71:29:46:ab:4e:fe:0f:fa:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:46:2D:45:11:BC:37:BD:28:F5:F0:A9:AA:B4:24:F3:7C:2F:01:33
X509v3 Authority Key Identifier:
keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:67:9a:3e:d0:2b:28:af:2e:39:3c:d1:10:71:03:f8:b5:b9:
0c:ee:3e:ee:39:17:20:a6:63:5c:75:c1:a9:1a:04:ff:cb:6d:
88:73:43:3f:ba:65:d6:e0:3c:af:05:6e:6e:75:b9:65:3c:b7:
5a:e3:2f:49:a0:bc:5e:63:5a:6b:17:f4:ac:ba:1b:7c:b0:ae:
77:4d:bc:12:0a:81:b6:77:2b:0f:64:a3:f3:25:7f:36:c9:65:
59:95:72:46:83:f5:c6:0f:f8:dd:23:4a:f6:4a:fb:5e:ec:36:
ef:39:b7:9a:46:84:db:ee:14:89:2b:df:64:9e:f0:f3:05:ae:
ec:a5:c9:57:d6:b5:c9:75:bc:23:de:c2:7f:0c:1e:32:17:2f:
f4:3a:d4:fa:55:3e:0c:bc:2e:79:ec:f4:9d:b7:7c:4d:88:ba:
50:20:dd:a9:c0:e3:86:3a:df:96:22:19:f4:68:10:81:32:83:
aa:18:41:89:0b:4f:12:50:55:48:8e:32:60:fc:a4:51:21:db:
0f:c1:2d:64:dd:bd:5d:f3:f0:0b:bf:08:78:b8:09:91:4f:04:
09:2e:64:e0:15:95:35:10:9e:d5:9a:d1:7c:ac:98:36:27:be:
7b:0c:9c:65:da:92:ea:8b:ac:c5:cc:03:5a:b8:db:59:82:e1:
a5:96:ba:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg1MDYxMTAvBgNVBAUTKEE0RUMxN0I1RkQyRDQ0Q0QyREREMDU1QkY1MzQxMzlG
NjhGQzY5OTAwHhcNMjUxMjA2MjEzNDA0WhcNMjUxMjEzMjEzNDA0WjAYMRYwFAYD
VQQDEw02OTM0YTE0Yy0yNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9SxQHCuGRElhl3DH4SXs8+fM36D+3PfwT/3Pl5gmdGr+SUz9CzfmBbH5uPFq
QzYjuQYY6hYdJFR+UZPojzalboxPEav01d14E5qRLDer/h29OnwauzvVqsZXIaAT
/t41s3wAzj6XcjlcxC0lJk2cCcX56vpUcHa1jVV+5yxzBPLqzLgQdxgu5vyy76J2
DvpU4uAhA/N0j2x3j91K8oJFuywkEYc4dwpwFNaTQPNv/g6qxyDFQp5I0Ec+o2uD
/1b6J12NL6AYiOhDNmeO5E4fRO4qTOiREOoz80iEbu0lPzgqNOk/v06ANgAv3Ehy
8KI2vxGb3AtecSlGq07+D/rolwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdGLUUR
vDe9KPXwqaq0JPN8LwEzMB8GA1UdIwQYMBaAFKTsF7X9LUTNLd0FW/U0E59o/GmQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODUwNi8xNTlFQjY5MkI3
QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJNMHQzUVZiOVRRVG4yajhh
WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BPd1h0ZjB0Uk0wdDNRVmI5VFFUbjJqOGFaQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODUwNi8xNTlFQjY5MkI3QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJN
MHQzUVZiOVRRVG4yajhhWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCdZ5o+0Csory45PNEQcQP4tbkM7j7uORcgpmNcdcGpGgT/y22Ic0M/
umXW4DyvBW5udbllPLda4y9JoLxeY1prF/Ssuht8sK53TbwSCoG2dysPZKPzJX82
yWVZlXJGg/XGD/jdI0r2Svte7DbvObeaRoTb7hSJK99knvDzBa7spclX1rXJdbwj
3sJ/DB4yFy/0OtT6VT4MvC557PSdt3xNiLpQIN2pwOOGOt+WIhn0aBCBMoOqGEGJ
C08SUFVIjjJg/KRRIdsPwS1k3b1d8/ALvwh4uAmRTwQJLmTgFZU1EJ7VmtF8rJg2
J757DJxl2pLqi6zFzANauNtZguGllroR
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:56:02 2025 by rpki-client