This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
File: f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft (raw, json)
Hash identifier: 3HJvvWg12Gq7z8wxgBf/LIuoSsu3677MXDPA7pattiE=
Subject key identifier: 70:9C:D0:EC:66:A1:61:C8:3B:91:56:2E:AA:49:B2:FC:EF:D0:E0:E3
Authority key identifier: 7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7
Certificate issuer: /CN=A915BA28/serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7
Certificate serial: 111C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
Manifest number: 110C
Signing time: Sat 06 Dec 2025 16:46:57 +0000
Manifest this update: Sat 06 Dec 2025 16:46:56 +0000
Manifest next update: Sat 13 Dec 2025 16:46:56 +0000
Files and hashes: 1: f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl (hash: mBnSH34MDlQW+5bNWp3FSy4dZymym/5ecBPRLUdT93M=)
2: C90C4476FBA611E9BA00AB33C4F9AE02.roa (hash: NnH6JwaNK1mn9Fuhu8l0BoHKZMPd4NWjCo7VE8NdvTQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl
rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4380 (0x111c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BA28, serialNumber=7F6045A376765BF82792AA705BBD899519CB19C7
Validity
Not Before: Dec 6 16:46:56 2025 GMT
Not After : Dec 13 16:46:56 2025 GMT
Subject: CN=69345e01-bd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:3f:95:87:74:00:81:af:eb:ea:c5:5b:f0:
69:60:41:c1:dd:47:66:fd:ce:a6:e2:ef:57:37:cf:
b7:56:c8:c2:61:8e:a0:72:2f:f3:e2:be:45:a2:66:
f5:1a:68:14:6f:5e:b3:9d:00:a7:26:9c:19:89:14:
1b:b5:45:a3:11:1c:0b:58:54:be:d7:95:60:70:38:
e8:36:8b:2b:40:91:bc:0a:96:d5:12:24:5b:ae:ee:
85:23:22:3b:11:fb:8a:66:c5:90:f7:e5:64:8d:0a:
c4:6d:07:c7:a2:b4:da:3f:4c:24:c9:41:1f:6d:b9:
bc:bd:ed:30:9b:11:53:be:16:fe:ad:33:27:b9:fb:
b7:af:8a:d0:35:c9:ef:b7:d7:0b:5f:cb:8b:e7:fb:
f6:8e:5b:0f:65:83:d8:86:fc:2f:65:4f:64:c1:f6:
64:7c:07:50:0c:cb:34:6b:0b:9f:03:e3:18:fb:af:
d8:a4:f2:ed:76:4d:25:b5:2f:99:8b:11:2b:ac:1a:
57:a4:dd:4c:13:28:6c:85:cd:a0:ba:61:d4:99:f9:
a8:00:01:d7:d2:f5:7f:c7:46:e5:17:66:ce:8a:c4:
35:b3:c1:94:db:38:45:5a:b1:3f:ac:01:64:c9:41:
7b:7c:48:60:6f:8d:4d:39:a6:77:17:d0:0a:bc:f0:
2d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:D0:EC:66:A1:61:C8:3B:91:56:2E:AA:49:B2:FC:EF:D0:E0:E3
X509v3 Authority Key Identifier:
keyid:7F:60:45:A3:76:76:5B:F8:27:92:AA:70:5B:BD:89:95:19:CB:19:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2BFo3Z2W_gnkqpwW72JlRnLGcc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BA28/A47D2028285511E9AD381151C4F9AE02/f2BFo3Z2W_gnkqpwW72JlRnLGcc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:d4:77:19:7b:6c:ec:21:ff:a9:92:e0:e5:e9:f4:4d:52:d1:
69:0b:cd:46:20:b6:99:85:93:b5:c4:47:0c:d5:17:bb:0f:db:
40:ce:2a:9f:05:40:56:d6:55:1d:fe:36:53:30:41:9c:60:5b:
bd:23:d5:65:1c:c1:48:49:3d:c2:b0:93:dd:07:b2:ff:5a:a8:
5f:6c:16:17:67:e2:22:dd:50:0d:d4:cd:e3:14:06:8c:1f:df:
16:8e:a4:59:c0:9f:7a:ff:d3:cc:38:40:0e:a8:09:e5:d4:41:
7b:72:78:a0:cf:1a:35:a2:a5:93:55:d5:5c:d6:0c:67:84:92:
c1:82:58:32:b7:30:c0:c4:49:cc:3e:bc:b6:94:5b:b3:db:e7:
80:91:f0:bc:cb:0e:1e:f5:fa:39:b4:5b:35:e9:9d:19:10:d8:
af:43:1a:85:c8:a5:4e:be:b5:de:5e:6a:c5:a2:9b:fd:4e:c9:
86:43:97:50:1e:0a:2f:46:d3:b6:7c:a1:44:b6:e6:7f:5d:11:
b5:63:fd:99:fb:c0:6d:0c:f0:1b:51:76:af:83:9a:47:3b:37:
34:d8:71:8b:26:26:36:3e:cd:15:46:fd:d9:d6:52:31:51:81:
90:05:fa:90:ab:3b:33:5c:3b:e7:2d:2c:d8:7c:42:53:ca:65:
3a:6d:ca:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICERwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJBMjgxMTAvBgNVBAUTKDdGNjA0NUEzNzY3NjVCRjgyNzkyQUE3MDVCQkQ4OTk1
MTlDQjE5QzcwHhcNMjUxMjA2MTY0NjU2WhcNMjUxMjEzMTY0NjU2WjAYMRYwFAYD
VQQDEw02OTM0NWUwMS1iZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0PI/lYd0AIGv6+rFW/BpYEHB3Udm/c6m4u9XN8+3VsjCYY6gci/z4r5Fomb1
GmgUb16znQCnJpwZiRQbtUWjERwLWFS+15VgcDjoNosrQJG8CpbVEiRbru6FIyI7
EfuKZsWQ9+VkjQrEbQfHorTaP0wkyUEfbbm8ve0wmxFTvhb+rTMnufu3r4rQNcnv
t9cLX8uL5/v2jlsPZYPYhvwvZU9kwfZkfAdQDMs0awufA+MY+6/YpPLtdk0ltS+Z
ixErrBpXpN1MEyhshc2gumHUmfmoAAHX0vV/x0blF2bOisQ1s8GU2zhFWrE/rAFk
yUF7fEhgb41NOaZ3F9AKvPAtCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCc0Oxm
oWHIO5FWLqpJsvzv0ODjMB8GA1UdIwQYMBaAFH9gRaN2dlv4J5KqcFu9iZUZyxnH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkEyOC9BNDdEMjAyODI4
NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldfZ25rcXB3VzcySmxSbkxH
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2YyQkZvM1oyV19nbmtxcHdXNzJKbFJuTEdjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QkEyOC9BNDdEMjAyODI4NTUxMUU5QUQzODExNTFDNEY5QUUwMi9mMkJGbzNaMldf
Z25rcXB3VzcySmxSbkxHY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB01HcZe2zsIf+pkuDl6fRNUtFpC81GILaZhZO1xEcM1Re7D9tAziqf
BUBW1lUd/jZTMEGcYFu9I9VlHMFIST3CsJPdB7L/WqhfbBYXZ+Ii3VAN1M3jFAaM
H98WjqRZwJ96/9PMOEAOqAnl1EF7cnigzxo1oqWTVdVc1gxnhJLBglgytzDAxEnM
Pry2lFuz2+eAkfC8yw4e9fo5tFs16Z0ZENivQxqFyKVOvrXeXmrFopv9TsmGQ5dQ
HgovRtO2fKFEtuZ/XRG1Y/2Z+8BtDPAbUXavg5pHOzc02HGLJiY2Ps0VRv3Z1lIx
UYGQBfqQqzszXDvnLSzYfEJTymU6bcps
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:45 2025 by rpki-client