This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json)
Hash identifier: k/msd8/vc0TFDoE1YeI8S8mNcDnBaGKyhGUAxtlaSfs=
Subject key identifier: 84:68:26:6C:A4:85:AA:02:79:53:C5:6B:CA:11:2F:0A:A9:AE:74:0F
Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7
Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
Manifest number: 0100
Signing time: Fri 05 Dec 2025 03:09:46 +0000
Manifest this update: Fri 05 Dec 2025 03:09:45 +0000
Manifest next update: Fri 12 Dec 2025 03:09:45 +0000
Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: lRkZ78271FZdQbx7hH3CuA+SgR6tK2XKpFjfuz1zzMc=)
2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: UDZYmG58wyjbsalkwL0khlvNfAUCeUpCV/XCm2ms8Lo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl
rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:09:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7
Validity
Not Before: Dec 5 03:09:45 2025 GMT
Not After : Dec 12 03:09:45 2025 GMT
Subject: CN=69324cfa-0998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:43:4a:ec:82:36:d2:06:f1:ff:f3:ff:f5:5d:
a0:c2:58:82:2c:cd:c2:dd:3c:2d:27:ad:3f:cb:cd:
24:6a:c2:c8:6e:2a:c0:1b:4f:76:65:00:ed:3e:0f:
c9:16:7f:f1:81:77:4e:c8:bc:2e:81:16:75:7e:a1:
ea:75:47:ee:5c:64:4f:c6:3a:55:9c:7f:19:be:86:
e1:19:b6:78:42:9b:8a:ce:76:66:4b:9f:f3:34:5d:
95:3e:cb:ae:39:08:f9:9d:9c:e7:38:d3:c3:17:7a:
ac:47:b3:16:4f:5d:2b:bc:26:d0:32:f2:24:63:15:
3f:85:37:74:99:2d:87:66:cf:31:ea:cf:dd:da:57:
88:56:7b:d5:ce:75:d3:9e:75:c3:6f:ae:67:e8:c8:
d3:6b:c3:78:d7:f9:ce:c9:75:c6:1f:d4:54:a7:1f:
4e:c0:39:6f:75:83:00:11:ee:a0:7c:2a:73:2e:1f:
b1:96:3f:a5:3d:da:95:c7:2e:c5:fc:67:48:a3:5a:
be:82:1b:62:bf:72:e9:1c:e4:7d:b0:54:75:68:6d:
ac:54:4d:19:16:b8:4e:2e:5d:7a:f9:25:0c:0c:14:
38:44:a9:ea:db:a5:ab:73:e3:81:18:cf:4e:8a:ac:
77:3f:44:76:c1:78:a4:27:a8:a6:25:94:5a:c4:d8:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:26:6C:A4:85:AA:02:79:53:C5:6B:CA:11:2F:0A:A9:AE:74:0F
X509v3 Authority Key Identifier:
keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:10:67:40:15:be:6b:60:77:39:96:4d:9e:2f:b3:39:4d:70:
2a:e5:84:be:c4:44:ea:fb:2a:72:34:82:55:b0:d9:16:7d:e5:
95:3f:5e:8d:4c:1f:65:ed:b2:cd:1f:e2:e8:c1:11:1a:18:35:
6a:0e:9a:2f:51:0b:76:d9:5b:db:c2:5f:a8:7c:cb:fd:37:ee:
82:8f:24:8c:1b:cb:8e:96:18:5b:c3:33:aa:20:b6:9f:57:09:
46:3c:4a:0a:28:4e:23:17:38:36:46:99:42:3c:99:64:3c:53:
9a:f9:69:33:f0:2e:e3:0d:15:46:0c:62:1c:61:5d:03:8f:01:
50:0a:e8:5f:a4:d8:87:d6:81:39:02:f5:c8:22:51:a3:54:30:
15:62:2c:6f:47:e8:85:d7:66:50:25:45:6e:05:8c:f2:3c:4a:
83:e4:af:d0:8c:ca:92:ed:42:cc:e6:6d:4b:99:c3:c6:17:67:
ba:33:aa:50:5c:fd:44:e0:11:5f:7f:f7:3d:74:04:63:b8:88:
0a:31:39:c2:1c:99:36:00:0f:f2:1d:cb:07:1c:6d:e7:7d:cb:
76:ee:ba:4e:be:a8:8f:8d:9b:46:60:a8:f1:e7:5e:5d:da:4f:
12:d7:9f:5e:8e:f1:c1:61:04:bf:31:a8:ce:7f:64:60:72:c4:
6c:ad:89:b5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0
MDlBMkI2RDcwHhcNMjUxMjA1MDMwOTQ1WhcNMjUxMjEyMDMwOTQ1WjAYMRYwFAYD
VQQDEw02OTMyNGNmYS0wOTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo0NK7II20gbx//P/9V2gwliCLM3C3TwtJ60/y80kasLIbirAG092ZQDtPg/J
Fn/xgXdOyLwugRZ1fqHqdUfuXGRPxjpVnH8ZvobhGbZ4QpuKznZmS5/zNF2VPsuu
OQj5nZznONPDF3qsR7MWT10rvCbQMvIkYxU/hTd0mS2HZs8x6s/d2leIVnvVznXT
nnXDb65n6MjTa8N41/nOyXXGH9RUpx9OwDlvdYMAEe6gfCpzLh+xlj+lPdqVxy7F
/GdIo1q+ghtiv3LpHOR9sFR1aG2sVE0ZFrhOLl16+SUMDBQ4RKnq26Wrc+OBGM9O
iqx3P0R2wXikJ6imJZRaxNgg1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRoJmyk
haoCeVPFa8oRLwqprnQPMB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5
NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0
dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj
cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2EGdAFb5rYHc5lk2eL7M5TXAq5YS+xETq+ypyNIJVsNkWfeWVP16N
TB9l7bLNH+LowREaGDVqDpovUQt22Vvbwl+ofMv9N+6CjySMG8uOlhhbwzOqILaf
VwlGPEoKKE4jFzg2RplCPJlkPFOa+Wkz8C7jDRVGDGIcYV0DjwFQCuhfpNiH1oE5
AvXIIlGjVDAVYixvR+iF12ZQJUVuBYzyPEqD5K/QjMqS7ULM5m1LmcPGF2e6M6pQ
XP1E4BFff/c9dARjuIgKMTnCHJk2AA/yHcsHHG3nfct27rpOvqiPjZtGYKjx515d
2k8S159ejvHBYQS/MajOf2RgcsRsrYm1
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:24:03 2025 by rpki-client