This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
File: FSDys0q93K6U-pIu9HV802FA8lQ.mft (raw, json)
Hash identifier: Khurias6gmrlMSKyYKk2qE+x+qUbmHYYBF9kZXeQRMs=
Subject key identifier: BA:66:13:C6:73:E4:99:92:94:42:EC:EF:23:10:E6:45:01:B7:52:D1
Authority key identifier: 15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
Certificate issuer: /CN=A9143FE9/serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Certificate serial: 0772
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
Manifest number: 0765
Signing time: Sat 06 Dec 2025 20:39:59 +0000
Manifest this update: Sat 06 Dec 2025 20:39:58 +0000
Manifest next update: Sat 13 Dec 2025 20:39:58 +0000
Files and hashes: 1: FSDys0q93K6U-pIu9HV802FA8lQ.crl (hash: PoAwkp8sKC7luVzpq9k7IlR1hq8gAOkol8gnCTZGY5A=)
2: A6864ACE7BA911EDB41A851EC4F9AE02.roa (hash: in5sPndy+m94d5TFTDzmLk0rnuoauLzhEu9bOOaeDaw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1906 (0x772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143FE9, serialNumber=1520F2B34ABDDCAE94FA922EF4757CD36140F254
Validity
Not Before: Dec 6 20:39:58 2025 GMT
Not After : Dec 13 20:39:58 2025 GMT
Subject: CN=6934949e-58b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:82:3d:00:d6:c2:c5:f3:46:03:83:b4:ec:
9d:76:7e:2d:9e:7d:08:17:0f:c7:14:87:71:c1:ff:
80:d5:8f:78:f7:98:2a:dd:30:6b:db:35:ee:15:25:
2a:a1:6c:07:f1:99:ea:08:51:56:54:b2:b2:65:aa:
69:21:e9:7c:f6:6b:02:48:23:3f:6e:7d:79:91:72:
4e:fe:ad:8d:18:fc:14:1b:4c:b6:89:26:c3:60:15:
05:78:ba:8e:bb:f5:5f:0c:11:88:2f:de:84:d1:9c:
d0:59:66:c1:16:0f:48:88:49:0e:a1:fe:e9:17:10:
d3:8a:c8:39:5c:14:ce:57:6f:97:a0:58:14:34:70:
97:d6:1c:45:c1:67:45:bd:04:28:40:fc:49:95:68:
1d:f0:35:6c:43:85:de:61:f0:3d:c5:e9:ff:68:2a:
73:13:d4:02:5e:83:31:94:41:fe:07:3b:08:16:d7:
d4:38:87:0b:62:38:aa:31:e8:75:5f:e2:cf:bd:cd:
ac:db:d1:b6:78:55:50:37:77:cb:37:49:99:67:d0:
0d:6e:cc:70:a2:b2:d4:54:55:b3:a8:83:d0:93:36:
bd:e5:9a:d0:0a:b7:4c:ca:b8:cd:63:af:fe:30:0d:
60:37:88:b5:50:53:00:49:b6:db:c2:f6:52:ad:fd:
4d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:66:13:C6:73:E4:99:92:94:42:EC:EF:23:10:E6:45:01:B7:52:D1
X509v3 Authority Key Identifier:
keyid:15:20:F2:B3:4A:BD:DC:AE:94:FA:92:2E:F4:75:7C:D3:61:40:F2:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSDys0q93K6U-pIu9HV802FA8lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143FE9/F9E65E20443811EBAD443F74C4F9AE02/FSDys0q93K6U-pIu9HV802FA8lQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:cb:58:bd:1d:2d:18:e0:56:26:f1:df:bf:07:23:41:3c:ef:
97:ed:ea:e7:85:5e:83:bb:ca:a6:12:bc:fd:cf:28:4f:01:f0:
74:cc:40:d2:44:b7:fe:ad:5e:c2:33:85:0d:df:92:66:73:d4:
66:bc:c6:ea:3a:7e:00:c5:b1:58:2b:cf:77:de:f2:41:9f:24:
b6:c1:d4:ef:f0:51:fc:1f:77:83:c7:cb:f7:dc:a5:2d:1e:d3:
5b:f2:61:b6:95:7d:71:7a:62:ca:9f:2e:0f:70:90:6d:4d:0a:
2a:96:57:aa:43:7a:b3:86:a4:bd:7f:ea:6a:ef:f4:e4:ff:69:
f1:a0:a4:02:3a:ee:d8:ee:7f:02:f9:ba:b3:c2:fc:a6:54:06:
36:a3:8f:5e:2e:43:88:e7:d6:78:89:5a:a5:d4:c0:53:6c:52:
68:22:4a:0b:bc:65:79:40:44:d6:72:0c:bf:9e:8e:03:bd:a0:
61:91:95:bd:40:fe:63:5f:b6:ee:36:cf:5e:57:2f:14:63:3b:
17:82:70:eb:56:69:87:95:7c:4f:8e:d2:01:c8:a8:aa:f3:6a:
7e:2b:8a:ce:9b:a6:08:3b:3e:06:21:04:2b:98:c4:12:4f:8e:
3e:48:51:23:7c:d2:69:2a:88:3e:31:4e:9f:15:48:f5:18:cf:
5f:11:35:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNGRTkxMTAvBgNVBAUTKDE1MjBGMkIzNEFCRERDQUU5NEZBOTIyRUY0NzU3Q0Qz
NjE0MEYyNTQwHhcNMjUxMjA2MjAzOTU4WhcNMjUxMjEzMjAzOTU4WjAYMRYwFAYD
VQQDEw02OTM0OTQ5ZS01OGI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwR2CPQDWwsXzRgODtOyddn4tnn0IFw/HFIdxwf+A1Y9495gq3TBr2zXuFSUq
oWwH8ZnqCFFWVLKyZappIel89msCSCM/bn15kXJO/q2NGPwUG0y2iSbDYBUFeLqO
u/VfDBGIL96E0ZzQWWbBFg9IiEkOof7pFxDTisg5XBTOV2+XoFgUNHCX1hxFwWdF
vQQoQPxJlWgd8DVsQ4XeYfA9xen/aCpzE9QCXoMxlEH+BzsIFtfUOIcLYjiqMeh1
X+LPvc2s29G2eFVQN3fLN0mZZ9ANbsxworLUVFWzqIPQkza95ZrQCrdMyrjNY6/+
MA1gN4i1UFMASbbbwvZSrf1NdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpmE8Zz
5JmSlELs7yMQ5kUBt1LRMB8GA1UdIwQYMBaAFBUg8rNKvdyulPqSLvR1fNNhQPJU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0ZFOS9GOUU2NUUyMDQ0
MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNLNlUtcEl1OUhWODAyRkE4
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZTRHlzMHE5M0s2VS1wSXU5SFY4MDJGQThsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
M0ZFOS9GOUU2NUUyMDQ0MzgxMUVCQUQ0NDNGNzRDNEY5QUUwMi9GU0R5czBxOTNL
NlUtcEl1OUhWODAyRkE4bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBly1i9HS0Y4FYm8d+/ByNBPO+X7ernhV6Du8qmErz9zyhPAfB0zEDS
RLf+rV7CM4UN35Jmc9RmvMbqOn4AxbFYK8933vJBnyS2wdTv8FH8H3eDx8v33KUt
HtNb8mG2lX1xemLKny4PcJBtTQoqlleqQ3qzhqS9f+pq7/Tk/2nxoKQCOu7Y7n8C
+bqzwvymVAY2o49eLkOI59Z4iVql1MBTbFJoIkoLvGV5QETWcgy/no4DvaBhkZW9
QP5jX7buNs9eVy8UYzsXgnDrVmmHlXxPjtIByKiq82p+K4rOm6YIOz4GIQQrmMQS
T44+SFEjfNJpKog+MU6fFUj1GM9fETVl
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:33:48 2025 by rpki-client