This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json)
Hash identifier: aPAj4Om6fxrKDnrHPsHe2SqQ0WsTxnnWAYNfDqPLiYk=
Subject key identifier: 16:55:21:30:11:A6:2D:92:80:00:31:F6:2D:15:EA:7B:BB:52:75:AF
Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Certificate serial: 0CD2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
Manifest number: 0CBF
Signing time: Thu 04 Dec 2025 17:44:45 +0000
Manifest this update: Thu 04 Dec 2025 17:44:44 +0000
Manifest next update: Thu 11 Dec 2025 17:44:44 +0000
Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: MbJRo9l1CvWIyGcM4IWwGSthB1SrIfPkv+O+n9C9oq4=)
2: BD34B926367911F083BF6873C4F9AE02.roa (hash: gVVuychvzE/ZHYNs+vgLYCt8oBc+ibgZ1VucbwwNR3g=)
3: A869B800367611F088B7726AC4F9AE02.roa (hash: qXTym7QHgjU7nxjj/BiwpmavJHmxjME0/DCrUXeMI8A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:44:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3282 (0xcd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0
Validity
Not Before: Dec 4 17:44:44 2025 GMT
Not After : Dec 11 17:44:44 2025 GMT
Subject: CN=6931c88c-12da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:32:f4:71:c2:12:9e:d7:df:1c:d7:c3:20:
8d:c3:2b:d3:f9:75:5b:d4:c6:34:a0:09:60:bf:70:
33:f7:1e:34:fb:a7:9e:ff:03:eb:83:a5:60:0c:1b:
43:10:7b:b2:0e:24:3b:d7:66:e7:a6:11:17:ca:3a:
72:26:f2:4c:fe:53:39:46:58:a2:82:cb:34:c8:9a:
31:8e:d1:ac:95:9c:7f:a9:81:2b:be:61:90:d3:b3:
97:d8:4f:17:2d:d1:e3:80:00:2f:30:d1:1d:53:93:
53:20:f5:82:78:f2:96:53:de:b0:73:06:27:f6:ae:
81:5e:15:3b:67:e1:91:0e:f0:e4:b6:08:0d:62:d4:
93:6c:39:53:7e:67:54:76:c1:35:d8:f4:c5:3e:65:
ea:94:b3:4b:3e:3f:1e:ec:e0:64:1f:71:88:51:3d:
7d:41:61:52:8d:66:6a:c0:c8:33:5f:f6:7d:5f:e5:
e4:cf:ca:b6:65:d3:7f:6f:16:ab:ea:1f:9d:36:bc:
8d:a0:26:ad:10:22:f8:80:0a:fc:e3:98:82:9e:bd:
b6:d1:7f:92:77:8d:5f:fd:56:a8:1e:cf:c6:4f:ed:
a1:a1:80:b8:51:2b:66:5c:be:27:81:e2:9e:e4:fb:
66:7c:bb:68:32:9a:a6:76:d6:46:89:24:78:a3:39:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:55:21:30:11:A6:2D:92:80:00:31:F6:2D:15:EA:7B:BB:52:75:AF
X509v3 Authority Key Identifier:
keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:69:be:48:5e:ca:0a:6b:ea:50:07:27:d2:08:cd:13:78:bd:
6e:82:1a:04:9b:26:82:75:de:0c:c6:45:ce:70:45:23:72:89:
48:cc:93:f3:f3:55:63:17:c4:59:cb:c7:80:21:8c:3d:03:24:
bc:37:39:8a:d3:ee:2a:17:2a:c4:93:40:24:34:37:b3:08:d2:
72:fc:da:cb:57:9e:5b:14:92:45:e3:93:c8:10:0e:c0:84:53:
9c:56:27:b5:d9:cc:75:24:b7:a1:a2:18:a5:94:3e:b6:02:7a:
31:fc:be:14:39:69:e2:f7:5b:ed:76:22:b6:e8:ad:3f:bf:06:
97:c2:0e:e3:3c:bd:e5:1d:2b:3d:96:41:80:d8:28:8c:ac:7c:
75:8c:a2:d8:02:d8:5a:49:97:99:1b:30:ae:14:68:70:45:be:
c9:84:e8:24:3e:81:d8:f3:67:06:b4:d9:58:d9:db:dd:f7:c0:
24:bf:20:a6:f7:1e:e9:32:dc:0e:68:ea:23:1b:89:e8:4e:f1:
27:6b:c2:cb:90:9b:de:85:e7:aa:88:1f:97:e6:0e:bf:4f:90:
3c:8d:7e:5d:5d:ba:30:fc:a7:b4:da:c0:d6:1f:d8:b2:8d:18:
7a:a0:49:26:74:49:c2:ee:e9:e9:e4:08:e0:80:37:60:68:64:
1c:8b:32:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG
ODlENjlDQzAwHhcNMjUxMjA0MTc0NDQ0WhcNMjUxMjExMTc0NDQ0WjAYMRYwFAYD
VQQDEw02OTMxYzg4Yy0xMmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArYYy9HHCEp7X3xzXwyCNwyvT+XVb1MY0oAlgv3Az9x40+6ee/wPrg6VgDBtD
EHuyDiQ712bnphEXyjpyJvJM/lM5Rliigss0yJoxjtGslZx/qYErvmGQ07OX2E8X
LdHjgAAvMNEdU5NTIPWCePKWU96wcwYn9q6BXhU7Z+GRDvDktggNYtSTbDlTfmdU
dsE12PTFPmXqlLNLPj8e7OBkH3GIUT19QWFSjWZqwMgzX/Z9X+Xkz8q2ZdN/bxar
6h+dNryNoCatECL4gAr845iCnr220X+Sd41f/VaoHs/GT+2hoYC4UStmXL4ngeKe
5PtmfLtoMpqmdtZGiSR4ozmpDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZVITAR
pi2SgAAx9i0V6nu7UnWvMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz
RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu
TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M
TUcwVXBrTUFjb2I0blduTUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCvab5IXsoKa+pQByfSCM0TeL1ughoEmyaCdd4MxkXOcEUjcolIzJPz
81VjF8RZy8eAIYw9AyS8NzmK0+4qFyrEk0AkNDezCNJy/NrLV55bFJJF45PIEA7A
hFOcVie12cx1JLehohillD62Anox/L4UOWni91vtdiK26K0/vwaXwg7jPL3lHSs9
lkGA2CiMrHx1jKLYAthaSZeZGzCuFGhwRb7JhOgkPoHY82cGtNlY2dvd98AkvyCm
9x7pMtwOaOojG4noTvEna8LLkJveheeqiB+X5g6/T5A8jX5dXbow/Ke02sDWH9iy
jRh6oEkmdEnC7unp5AjggDdgaGQcizL9
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:44:48 2025 by rpki-client