This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
File: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft (raw, json)
Hash identifier: QFehDC+sbU1xw9hGJ6YQNsRIL3B+q6eXYMTEUftqfKU=
Subject key identifier: B6:1F:54:19:52:F2:8A:A0:58:93:89:40:54:6D:D7:EF:72:89:54:32
Authority key identifier: FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
Certificate issuer: /CN=A913FF2C/serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Certificate serial: 04B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
Manifest number: 04A8
Signing time: Thu 04 Dec 2025 22:33:21 +0000
Manifest this update: Thu 04 Dec 2025 22:33:20 +0000
Manifest next update: Thu 11 Dec 2025 22:33:20 +0000
Files and hashes: 1: _j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl (hash: bbXRLTCQpCLrafXADKTHxkZ0eh4SxZBFo9py1IoafVc=)
2: 3615B9806CB911EE91852F72C4F9AE02.roa (hash: oX7iVEw87PxrlXLRiZsATHbTumAb9Jcb4paecAnP08M=)
3: A46DD938EF8D11EEAF47227BC4F9AE02.roa (hash: ySDLsUnA1Px9ZdN4Rj4bZJvdBUg6R7IdLHrHlc350Os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1208 (0x4b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FF2C, serialNumber=FE3DA17B54A4D42F7C5C9A8A67D379067A76080E
Validity
Not Before: Dec 4 22:33:20 2025 GMT
Not After : Dec 11 22:33:20 2025 GMT
Subject: CN=69320c31-d40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:fe:13:bf:92:09:1c:4a:80:0c:6a:de:ce:
bc:2e:6f:57:51:91:d1:5f:1c:82:44:21:a3:4d:cd:
48:fa:fd:d2:63:44:4e:21:47:38:1e:28:c4:2e:44:
b3:30:b2:c8:74:f8:8f:a2:2d:a1:b3:e2:d2:80:10:
7e:00:e0:89:d7:63:ef:55:b7:24:e8:db:58:a9:86:
d4:be:f4:ce:3f:17:69:37:16:3f:3b:c8:26:7d:86:
d8:b9:21:cd:5a:46:69:7b:9f:fe:c8:8b:29:ec:fb:
d0:6c:07:bc:94:e1:fe:0f:5a:dd:cc:ab:18:47:7a:
f6:33:67:81:96:e4:bd:93:13:ee:0f:37:e5:05:28:
b4:10:26:c2:67:8e:38:a5:8d:dd:29:cb:5d:0b:ae:
92:c8:25:d1:77:a6:dc:41:fc:0f:99:5a:83:23:d4:
32:26:78:d4:b8:e8:2e:08:6d:ab:94:17:5d:8e:b9:
b6:96:dd:09:3f:55:e7:e0:6c:c1:12:4d:42:a6:26:
bf:03:e2:0e:8b:82:11:25:f0:a8:63:4e:96:3c:d5:
44:9e:7e:73:3c:77:28:0c:bc:8d:ce:c9:a9:34:e5:
15:82:ab:ec:b0:ad:97:1b:cb:87:dd:50:58:05:a7:
91:66:6c:6d:46:46:fc:15:4b:b4:27:5e:03:44:6e:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:54:19:52:F2:8A:A0:58:93:89:40:54:6D:D7:EF:72:89:54:32
X509v3 Authority Key Identifier:
keyid:FE:3D:A1:7B:54:A4:D4:2F:7C:5C:9A:8A:67:D3:79:06:7A:76:08:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FF2C/ED3556DA5F3111EC81CCA878C4F9AE02/_j2he1Sk1C98XJqKZ9N5Bnp2CA4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:9b:9b:5b:d4:33:d7:62:60:5f:24:fa:dc:dc:e6:04:e2:6d:
f1:05:3f:e8:4f:ee:6a:cb:1a:ce:7a:16:14:d2:75:93:50:0e:
6c:34:92:b3:6a:52:27:e3:34:f2:30:8d:4d:03:67:00:05:77:
69:ff:cd:dd:cc:87:15:7c:5d:24:fd:eb:94:57:48:2c:72:d0:
0d:7e:bc:83:3e:79:56:7c:9b:61:8d:69:dd:b9:8a:0d:df:5f:
d7:d7:66:c2:de:dc:0e:0e:fc:ba:1b:df:d4:58:26:14:21:64:
93:dd:5a:30:83:29:6f:0e:e7:41:7c:f9:76:09:cb:b2:fe:14:
d7:98:45:15:8b:68:fd:60:88:2d:f4:94:f3:ae:79:d7:04:18:
f3:33:8f:05:fa:10:5e:99:82:ba:59:2c:7a:6c:9f:28:fe:e5:
d3:f2:77:c5:83:76:3b:98:36:ab:4e:25:9e:10:c9:9a:4c:5f:
e2:d0:34:ec:63:cc:06:75:a3:42:7d:70:4e:ca:08:74:c8:c4:
eb:dd:ca:68:ab:28:0d:f6:4e:f2:66:8a:cb:3e:93:c1:a8:5a:
57:a7:72:88:26:55:dd:40:a7:6f:0c:c2:e0:2f:21:ee:ff:a0:
03:46:30:3a:7d:4f:e5:fc:fa:52:d5:09:51:5b:bf:6d:3b:fe:
5e:96:80:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZGMkMxMTAvBgNVBAUTKEZFM0RBMTdCNTRBNEQ0MkY3QzVDOUE4QTY3RDM3OTA2
N0E3NjA4MEUwHhcNMjUxMjA0MjIzMzIwWhcNMjUxMjExMjIzMzIwWjAYMRYwFAYD
VQQDEw02OTMyMGMzMS1kNDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAww7+E7+SCRxKgAxq3s68Lm9XUZHRXxyCRCGjTc1I+v3SY0ROIUc4HijELkSz
MLLIdPiPoi2hs+LSgBB+AOCJ12PvVbck6NtYqYbUvvTOPxdpNxY/O8gmfYbYuSHN
WkZpe5/+yIsp7PvQbAe8lOH+D1rdzKsYR3r2M2eBluS9kxPuDzflBSi0ECbCZ444
pY3dKctdC66SyCXRd6bcQfwPmVqDI9QyJnjUuOguCG2rlBddjrm2lt0JP1Xn4GzB
Ek1Cpia/A+IOi4IRJfCoY06WPNVEnn5zPHcoDLyNzsmpNOUVgqvssK2XG8uH3VBY
BaeRZmxtRkb8FUu0J14DRG4WaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYfVBlS
8oqgWJOJQFRt1+9yiVQyMB8GA1UdIwQYMBaAFP49oXtUpNQvfFyaimfTeQZ6dggO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkYyQy9FRDM1NTZEQTVG
MzExMUVDODFDQ0E4NzhDNEY5QUUwMi9fajJoZTFTazFDOThYSnFLWjlONUJucDJD
QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19qMmhlMVNrMUM5OFhKcUtaOU41Qm5wMkNBNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkYyQy9FRDM1NTZEQTVGMzExMUVDODFDQ0E4NzhDNEY5QUUwMi9fajJoZTFTazFD
OThYSnFLWjlONUJucDJDQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBym5tb1DPXYmBfJPrc3OYE4m3xBT/oT+5qyxrOehYU0nWTUA5sNJKz
alIn4zTyMI1NA2cABXdp/83dzIcVfF0k/euUV0gsctANfryDPnlWfJthjWnduYoN
31/X12bC3twODvy6G9/UWCYUIWST3VowgylvDudBfPl2Ccuy/hTXmEUVi2j9YIgt
9JTzrnnXBBjzM48F+hBemYK6WSx6bJ8o/uXT8nfFg3Y7mDarTiWeEMmaTF/i0DTs
Y8wGdaNCfXBOygh0yMTr3cpoqygN9k7yZorLPpPBqFpXp3KIJlXdQKdvDMLgLyHu
/6ADRjA6fU/l/PpS1QlRW79tO/5eloDf
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:28:26 2025 by rpki-client