This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json)
Hash identifier: p3DcNNpdUPQ6x03ysourv5ZAsNjG417ZBIugteES09o=
Subject key identifier: A0:DD:4E:57:1B:0F:B4:B3:75:A1:19:C9:61:2F:FB:F6:AD:F1:73:3F
Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Certificate serial: 0196
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
Manifest number: 0193
Signing time: Fri 05 Dec 2025 01:41:44 +0000
Manifest this update: Fri 05 Dec 2025 01:41:43 +0000
Manifest next update: Fri 12 Dec 2025 01:41:43 +0000
Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: YXnJZlTvTdkh3sot0YvSn+Am7bKhhNQ6322ofVIZH0k=)
2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: SLZLEvFIQqMp4oAp0p1ONi54RA8FIOFPctbNnoAuAEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE
Validity
Not Before: Dec 5 01:41:43 2025 GMT
Not After : Dec 12 01:41:43 2025 GMT
Subject: CN=69323857-92b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:75:33:e3:27:91:9d:bb:7b:76:36:0a:70:
6b:f9:2a:35:8f:e3:98:3a:0e:c9:2e:bf:f7:45:28:
12:9e:7c:d4:15:27:02:50:a2:34:67:13:e7:7d:16:
9f:f4:72:2f:cc:d5:24:32:2c:4d:9e:87:9f:a7:23:
1b:e7:af:5f:43:2f:1e:3b:1a:04:a2:9c:67:eb:8f:
5a:91:48:ca:cb:ba:8d:89:f3:30:f4:1a:d3:d4:d1:
58:21:25:db:8c:a4:63:ea:5a:f6:e4:c7:eb:73:45:
e1:a9:0d:09:b9:a7:44:62:40:cc:e4:79:cc:36:94:
03:09:d9:6f:ee:b4:2f:dd:89:19:3b:bd:1a:ca:66:
4f:c5:8e:5a:a8:7f:ad:56:37:b3:c7:47:0e:3d:3e:
98:de:4d:28:0f:89:5d:2a:75:8d:46:62:26:c0:ad:
3e:7a:be:5f:cf:09:02:a3:ff:b1:3f:18:ed:36:95:
aa:81:50:8a:69:41:69:a8:1a:35:34:ec:4d:f5:06:
05:9c:d1:a8:a1:0c:48:c0:08:b1:12:ba:10:6f:3e:
ae:f9:de:bc:f8:c7:d4:82:35:56:ad:74:a3:2f:95:
80:d1:59:35:99:5e:38:4f:aa:f2:71:10:e6:f8:78:
bc:5e:a5:69:49:95:b8:d2:88:24:f6:66:e8:16:48:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DD:4E:57:1B:0F:B4:B3:75:A1:19:C9:61:2F:FB:F6:AD:F1:73:3F
X509v3 Authority Key Identifier:
keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9b:b8:56:15:02:03:60:fd:3a:41:94:40:9c:d3:32:14:f8:
18:50:83:3e:13:7c:c6:58:91:37:60:ea:31:6e:0e:8c:1a:34:
06:ca:5a:d3:50:a0:1c:9a:76:bf:f7:b5:6b:c3:7d:ab:98:a4:
99:50:a3:9a:d1:6d:d3:d7:45:68:63:a3:20:2d:0b:cd:b3:13:
74:20:7b:73:3e:21:fa:83:13:a7:62:b6:fc:32:30:60:a6:d0:
53:c8:f0:ea:a5:c0:ac:79:9e:54:50:77:38:cf:46:d9:67:6b:
d7:ab:82:8f:57:2f:db:47:b7:cd:63:4b:13:15:13:70:67:1b:
be:e5:6b:92:50:e3:af:37:30:13:48:ce:a3:c7:9b:d4:c0:6f:
64:d1:10:73:9a:a2:f4:f5:b1:68:ca:40:a2:46:ff:11:63:cb:
33:f3:0e:90:49:b7:9a:6f:d9:de:55:7c:cd:fe:03:92:f2:11:
d4:38:81:46:9b:e6:ab:c8:e1:5f:b0:d1:05:c9:4a:0b:41:aa:
26:a7:2f:2c:cb:05:91:7d:4b:bd:c0:2f:83:15:18:22:8f:49:
c5:56:d0:55:03:35:56:49:92:4a:76:48:60:f1:69:e3:65:42:
5d:c8:41:fb:1e:b7:b9:bd:45:c3:1b:93:a8:86:a9:d1:e3:5c:
4e:be:b6:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDgwQjIxMTAvBgNVBAUTKDE1N0REQjMyM0QzNjUzNTA0RTMwODI0RTY5RTBEQjAz
NzUzQTY4Q0UwHhcNMjUxMjA1MDE0MTQzWhcNMjUxMjEyMDE0MTQzWjAYMRYwFAYD
VQQDEw02OTMyMzg1Ny05MmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxvl1M+MnkZ27e3Y2CnBr+So1j+OYOg7JLr/3RSgSnnzUFScCUKI0ZxPnfRaf
9HIvzNUkMixNnoefpyMb569fQy8eOxoEopxn649akUjKy7qNifMw9BrT1NFYISXb
jKRj6lr25Mfrc0XhqQ0JuadEYkDM5HnMNpQDCdlv7rQv3YkZO70aymZPxY5aqH+t
Vjezx0cOPT6Y3k0oD4ldKnWNRmImwK0+er5fzwkCo/+xPxjtNpWqgVCKaUFpqBo1
NOxN9QYFnNGooQxIwAixEroQbz6u+d68+MfUgjVWrXSjL5WA0Vk1mV44T6rycRDm
+Hi8XqVpSZW40ogk9mboFkiCtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKDdTlcb
D7SzdaEZyWEv+/at8XM/MB8GA1UdIwQYMBaAFBV92zI9NlNQTjCCTmng2wN1OmjO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODBCMi80MUNCQjY0RTY4
RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUxQk9NSUpPYWVEYkEzVTZh
TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFNNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODBCMi80MUNCQjY0RTY4RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUx
Qk9NSUpPYWVEYkEzVTZhTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPm7hWFQIDYP06QZRAnNMyFPgYUIM+E3zGWJE3YOoxbg6MGjQGylrT
UKAcmna/97Vrw32rmKSZUKOa0W3T10VoY6MgLQvNsxN0IHtzPiH6gxOnYrb8MjBg
ptBTyPDqpcCseZ5UUHc4z0bZZ2vXq4KPVy/bR7fNY0sTFRNwZxu+5WuSUOOvNzAT
SM6jx5vUwG9k0RBzmqL09bFoykCiRv8RY8sz8w6QSbeab9neVXzN/gOS8hHUOIFG
m+aryOFfsNEFyUoLQaompy8sywWRfUu9wC+DFRgij0nFVtBVAzVWSZJKdkhg8Wnj
ZUJdyEH7Hre5vUXDG5OohqnR41xOvrYq
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:21:33 2025 by rpki-client