This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File: _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier: eoVnR3tBXx4nEHn8Ee1DC7Mw2o2vZDdbMsZVVjq11bc=
Subject key identifier: B7:4E:45:6D:22:9E:A6:99:05:AE:18:35:31:EE:3A:6A:9C:62:E9:D8
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer: /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial: 1D5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number: 1D14
Signing time: Thu 04 Dec 2025 15:54:21 +0000
Manifest this update: Thu 04 Dec 2025 15:54:20 +0000
Manifest next update: Thu 11 Dec 2025 15:54:20 +0000
Files and hashes: 1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: 6E0iTsuufd4KgMNeQKtWzv4nAAt1PBkGna4Uqj+/zYg=)
2: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: lfXXFKA1BewBY10R96banzWyiiHGZ5/wupAGz1DuT5w=)
3: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: qeTmmubtmqrY2/e8m/Tsiuz4+UZv7NeRmzZbrXj/lVI=)
4: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: RFFbNib+EOfTMtyfuUsNL0crZ/n9uw59zoxUUo7ALbc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7515 (0x1d5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Validity
Not Before: Dec 4 15:54:20 2025 GMT
Not After : Dec 11 15:54:20 2025 GMT
Subject: CN=6931aead-5a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:ee:65:2a:15:e8:32:9b:33:3d:00:c9:6e:
8e:47:63:60:db:82:dc:8c:90:7d:60:b3:00:a7:89:
28:8a:cb:59:18:a6:42:31:9d:de:c7:72:a3:1c:0c:
9e:3d:66:43:f0:86:78:a2:df:10:7f:bc:6e:57:45:
81:a5:ba:f7:84:43:aa:fa:b5:21:a0:ec:33:bf:61:
81:f0:04:84:41:d7:86:e2:0c:17:4c:54:e8:ae:c2:
9a:2d:23:04:d3:35:36:da:1b:b3:33:b6:6b:e9:25:
73:77:3e:bf:31:4d:39:e9:90:c1:3d:1c:fb:61:9c:
a0:b3:0b:d4:53:08:a5:e9:be:cd:83:5e:5d:98:84:
b6:d4:bc:d8:4d:92:98:83:85:cc:9e:a2:52:dd:c4:
ee:99:e2:84:37:4c:dc:98:fa:e1:d1:03:26:40:1e:
8f:f6:3a:f8:3e:9b:ef:69:87:d0:7c:d3:71:6d:64:
1e:0e:d7:77:b3:f6:04:42:d8:e6:56:a3:09:4c:d4:
c7:d2:83:db:8b:8c:ff:00:f2:31:39:21:58:d7:aa:
4d:b2:a6:67:d3:1f:b0:cb:37:43:53:da:c2:9b:11:
8d:f3:58:f2:36:b3:19:0b:82:90:08:8b:f3:ef:b8:
76:2c:96:0a:08:2e:24:c7:2b:5c:c4:ad:6e:ac:78:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4E:45:6D:22:9E:A6:99:05:AE:18:35:31:EE:3A:6A:9C:62:E9:D8
X509v3 Authority Key Identifier:
keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:39:07:b9:20:a9:f0:e6:98:98:d0:1e:91:67:07:1d:a1:ec:
5e:84:7b:e5:cb:b4:e5:17:6b:e2:21:32:0d:42:94:bf:87:bd:
f9:fe:da:f2:7a:fa:0f:31:be:f0:e6:c1:f7:b3:b0:f4:0e:0e:
74:9c:02:e3:7d:15:ea:96:0e:24:f9:7b:5d:a1:72:0b:53:4a:
35:92:75:31:be:87:52:9d:f7:c0:0a:6d:1f:06:bc:9f:2c:a3:
7b:d7:a0:d8:a8:b1:47:00:14:4c:06:a3:8a:6f:91:3b:2d:d0:
ee:44:4c:ea:a9:96:26:44:ef:d8:fb:d5:ad:38:9e:ce:67:4a:
2b:0a:dd:7b:4e:e4:03:c1:e7:49:9f:37:13:89:d2:de:86:9b:
1a:06:98:bd:b3:92:85:da:fa:01:4b:11:99:e4:f7:5e:a2:15:
90:f7:cc:4f:1f:09:e2:41:57:25:f3:30:95:25:65:0f:2d:7b:
78:ff:8a:0a:f2:3c:d7:ac:1c:c1:52:fd:27:93:f8:c9:15:68:
66:ac:03:2a:e8:11:29:0b:9a:50:c3:d6:6f:c6:59:4e:cb:50:
de:3c:f9:6f:41:6b:8c:ad:e7:88:ac:b6:47:04:15:f6:80:5e:
f7:87:a5:63:25:dc:c4:1f:31:0f:4e:09:16:45:3a:9d:1f:53:
67:52:da:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBEMjcxMTAvBgNVBAUTKEZGQ0QyMERDQTY4REU0MzJGMjE5MUI3QjYzMzI4NkJD
OTg3RTQyRUMwHhcNMjUxMjA0MTU1NDIwWhcNMjUxMjExMTU1NDIwWjAYMRYwFAYD
VQQDEw02OTMxYWVhZC01YTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzjvuZSoV6DKbMz0AyW6OR2Ng24LcjJB9YLMAp4koistZGKZCMZ3ex3KjHAye
PWZD8IZ4ot8Qf7xuV0WBpbr3hEOq+rUhoOwzv2GB8ASEQdeG4gwXTFTorsKaLSME
0zU22huzM7Zr6SVzdz6/MU056ZDBPRz7YZygswvUUwil6b7Ng15dmIS21LzYTZKY
g4XMnqJS3cTumeKEN0zcmPrh0QMmQB6P9jr4PpvvaYfQfNNxbWQeDtd3s/YEQtjm
VqMJTNTH0oPbi4z/APIxOSFY16pNsqZn0x+wyzdDU9rCmxGN81jyNrMZC4KQCIvz
77h2LJYKCC4kxytcxK1urHi9DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdORW0i
nqaZBa4YNTHuOmqcYunYMB8GA1UdIwQYMBaAFP/NINymjeQy8hkbe2MyhryYfkLs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEQyNy8yQTYxQ0E4QUQz
NTkxMUU2QjU1QUZBNzBDNEY5QUUwMi9fODBnM0thTjVETHlHUnQ3WXpLR3ZKaC1R
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL184MGczS2FONURMeUdSdDdZektHdkpoLVF1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEQyNy8yQTYxQ0E4QUQzNTkxMUU2QjU1QUZBNzBDNEY5QUUwMi9fODBnM0thTjVE
THlHUnQ3WXpLR3ZKaC1RdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATOQe5IKnw5piY0B6RZwcdoexehHvly7TlF2viITINQpS/h735/try
evoPMb7w5sH3s7D0Dg50nALjfRXqlg4k+XtdoXILU0o1knUxvodSnffACm0fBryf
LKN716DYqLFHABRMBqOKb5E7LdDuREzqqZYmRO/Y+9WtOJ7OZ0orCt17TuQDwedJ
nzcTidLehpsaBpi9s5KF2voBSxGZ5PdeohWQ98xPHwniQVcl8zCVJWUPLXt4/4oK
8jzXrBzBUv0nk/jJFWhmrAMq6BEpC5pQw9ZvxllOy1DePPlvQWuMreeIrLZHBBX2
gF73h6VjJdzEHzEPTgkWRTqdH1NnUtrh
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:22 2025 by rpki-client