This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
File: B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json)
Hash identifier: GHlLY/I8bXS35ixlf+LNrZyxX4aZDt7ZsEm1fzW8Hgs=
Subject key identifier: C2:69:F1:DD:8B:5E:02:AA:6A:0A:8A:F8:3F:DB:4E:6C:39:25:93:AB
Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2
Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
Certificate serial: 121E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
Manifest number: 1201
Signing time: Thu 04 Dec 2025 16:47:28 +0000
Manifest this update: Thu 04 Dec 2025 16:47:28 +0000
Manifest next update: Thu 11 Dec 2025 16:47:28 +0000
Files and hashes: 1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: umtOCrywXPFSHMob1xr/q1r3SIDMjn4xj/YjmGX4HGo=)
2: 70F8E50039AF11EE8486453DC4F9AE02.roa (hash: CQ2YO4KFwTMH/P0kajoe5d8Btg/O5fE6q6xcjIQsWNk=)
3: BA1EA120E6FC11EE96775810C4F9AE02.roa (hash: sB4pmseHL4MX5nc05THnJz70E6W3QfcckHXpmWVSxtQ=)
4: FEDDF63AE6FC11EE8AD61644C4F9AE02.roa (hash: nPDF1Ky8Z4ZJlPWH1PkLPctnsIih8GHSZ5cqXRTU56A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl
rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4638 (0x121e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2
Validity
Not Before: Dec 4 16:47:28 2025 GMT
Not After : Dec 11 16:47:28 2025 GMT
Subject: CN=6931bb20-b41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:5b:b7:9c:22:f0:45:ff:bd:38:38:b9:b7:
70:46:bc:f4:a6:ec:84:50:3f:b0:b7:c6:0b:71:45:
48:36:d2:1c:b6:20:46:27:b8:2f:f3:b1:4c:3c:5b:
0d:d0:b0:8d:25:9a:78:d4:ce:da:62:37:18:ae:97:
18:1c:a9:37:69:3f:96:ab:05:bb:0d:13:b5:fd:59:
a6:a6:d3:7d:be:1c:3a:45:6b:58:61:9f:49:b6:11:
a8:7b:82:f1:2d:38:00:47:4d:b2:38:2f:24:42:ed:
c0:cf:64:71:6e:08:62:50:ff:46:a0:08:aa:80:e8:
d1:db:14:69:01:10:16:4c:bc:a4:5e:d3:14:15:82:
0b:0a:59:63:a8:e8:ef:22:c1:15:51:c4:b9:db:f2:
14:65:13:c8:52:0a:bb:be:30:5b:15:60:4c:15:03:
e8:f2:58:81:49:db:07:cd:02:84:45:cb:7c:45:d7:
77:b8:06:91:66:6e:b3:50:7a:4c:f2:27:16:f9:de:
6f:7c:05:6d:e3:a7:f0:01:67:74:83:0b:7c:51:32:
a7:69:f7:b8:70:b8:a9:d6:0e:81:01:6b:39:4d:17:
50:67:8c:e1:e9:f6:dc:64:50:bf:ff:2a:e2:59:59:
b0:a8:81:2d:b9:9b:7d:97:fb:cf:e4:4b:c0:5e:74:
8f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:69:F1:DD:8B:5E:02:AA:6A:0A:8A:F8:3F:DB:4E:6C:39:25:93:AB
X509v3 Authority Key Identifier:
keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:48:e8:6f:69:18:84:b8:e6:52:f6:b8:5c:10:70:82:46:c8:
fb:73:2f:3e:0b:24:2e:77:79:83:51:ea:cf:af:97:8c:f2:4b:
eb:90:ea:e9:73:46:16:8e:77:36:2a:5d:36:59:ca:a7:e9:4b:
32:0e:0f:ba:ff:10:ed:4d:1f:82:1a:38:66:71:56:3f:2b:8e:
54:f7:e3:f7:da:bb:97:18:58:4f:a6:42:11:0e:a4:42:6c:62:
cb:ec:9b:4d:1d:7d:a9:d5:32:52:9c:2f:12:eb:69:ae:ff:c8:
18:b8:dc:c9:ed:54:e0:2f:c2:51:84:5f:0a:53:56:cd:56:10:
4f:c2:01:a8:d6:24:80:13:73:f8:63:f3:45:9c:b8:65:8c:4e:
8a:10:d4:6a:2c:4e:a9:19:84:55:f6:6f:2f:23:27:5d:e0:bd:
0d:75:61:1d:2e:51:58:34:fb:0a:c0:25:b4:25:1e:78:20:a8:
ed:61:e6:05:97:2b:64:a0:5e:32:39:52:b4:cc:db:3a:94:6c:
90:c8:c4:e9:56:06:0b:e7:5a:e1:64:3f:ac:57:3c:2d:fc:57:
e2:12:eb:0d:b8:c3:2c:6e:f5:6b:5d:dc:76:da:9c:b1:8b:30:
00:57:98:5d:87:31:60:7e:51:1e:4d:c9:cc:12:67:e6:6f:af:
b2:2c:e7:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1RUYxMTAvBgNVBAUTKDA3NEUxNkNDQTA4MEQ1NDVGRUY0RjJEOEFEQ0I5MDlG
MEVDQjIwQTIwHhcNMjUxMjA0MTY0NzI4WhcNMjUxMjExMTY0NzI4WjAYMRYwFAYD
VQQDEw02OTMxYmIyMC1iNDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxOhbt5wi8EX/vTg4ubdwRrz0puyEUD+wt8YLcUVINtIctiBGJ7gv87FMPFsN
0LCNJZp41M7aYjcYrpcYHKk3aT+WqwW7DRO1/VmmptN9vhw6RWtYYZ9JthGoe4Lx
LTgAR02yOC8kQu3Az2RxbghiUP9GoAiqgOjR2xRpARAWTLykXtMUFYILClljqOjv
IsEVUcS52/IUZRPIUgq7vjBbFWBMFQPo8liBSdsHzQKERct8Rdd3uAaRZm6zUHpM
8icW+d5vfAVt46fwAWd0gwt8UTKnafe4cLip1g6BAWs5TRdQZ4zh6fbcZFC//yri
WVmwqIEtuZt9l/vP5EvAXnSPFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJp8d2L
XgKqagqK+D/bTmw5JZOrMB8GA1UdIwQYMBaAFAdOFsyggNVF/vTy2K3LkJ8OyyCi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTVFRi82MDc3MjlEMEZB
QzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFVWC05UExZcmN1UW53N0xJ
S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0IwNFd6S0NBMVVYLTlQTFlyY3VRbnc3TElLSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTVFRi82MDc3MjlEMEZBQzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFV
WC05UExZcmN1UW53N0xJS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtSOhvaRiEuOZS9rhcEHCCRsj7cy8+CyQud3mDUerPr5eM8kvrkOrp
c0YWjnc2Kl02Wcqn6UsyDg+6/xDtTR+CGjhmcVY/K45U9+P32ruXGFhPpkIRDqRC
bGLL7JtNHX2p1TJSnC8S62mu/8gYuNzJ7VTgL8JRhF8KU1bNVhBPwgGo1iSAE3P4
Y/NFnLhljE6KENRqLE6pGYRV9m8vIydd4L0NdWEdLlFYNPsKwCW0JR54IKjtYeYF
lytkoF4yOVK0zNs6lGyQyMTpVgYL51rhZD+sVzwt/FfiEusNuMMsbvVrXdx22pyx
izAAV5hdhzFgflEeTcnMEmfmb6+yLOdq
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:44:12 2025 by rpki-client