This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json)
Hash identifier: hwspnygjg1HqgKr/ZEBZAHHrjNt7stdl7tCmkSFsGbo=
Subject key identifier: 4A:C4:62:33:3E:A7:49:4D:CA:62:E4:B7:BD:DA:E0:53:6B:E6:E1:81
Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01
Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
Manifest number: 0100
Signing time: Sun 21 Dec 2025 04:19:15 +0000
Manifest this update: Sun 21 Dec 2025 04:19:15 +0000
Manifest next update: Sun 28 Dec 2025 04:19:15 +0000
Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: eXMUSPM9bTJJ7/+mEB3AzZ5vp+ryI75r12aucieU61Y=)
2: 99DDC906ABCF11F09186B30FC4F9AE02.roa (hash: ERTLamQHXAize+DQS050C0oNyt0XOaqRatFR9EGeJt8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl
rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
Validity
Not Before: Dec 21 04:19:15 2025 GMT
Not After : Dec 28 04:19:15 2025 GMT
Subject: CN=69477543-4558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:00:d4:14:a7:5c:cb:7e:2c:7f:db:b3:1c:09:
a3:c5:c7:45:aa:38:ad:e9:c3:11:1b:d9:77:9c:e0:
12:1d:8b:42:97:4f:ab:1b:1d:72:68:eb:f0:c5:53:
52:e8:53:e4:9f:89:a9:9c:21:0d:c1:9c:a1:34:df:
69:60:67:ed:ce:b9:51:63:0e:64:63:51:3c:28:a6:
21:13:71:54:96:7a:f2:59:0f:86:b3:03:50:ec:3d:
96:72:d1:7a:7c:d4:b3:4a:bd:00:25:4d:12:f9:fb:
70:24:f9:f8:8a:c2:2a:cc:29:c6:03:07:b2:f3:87:
26:c5:07:67:b5:7d:28:ff:7c:2e:1e:9a:11:1f:2d:
7a:2e:0d:f1:3c:29:dc:a0:fb:88:37:69:84:8a:ad:
f4:da:7f:3c:04:3f:a2:0e:fb:f4:f1:0f:a2:7e:c7:
b5:c3:f0:c1:4b:45:2a:b9:83:b5:8c:71:cf:54:55:
86:5a:ed:cf:ae:61:6b:2d:4b:63:bc:cc:01:ed:04:
e8:90:b2:09:15:a7:eb:0c:77:f5:75:85:9c:5b:83:
3c:4e:48:9e:82:84:f1:87:04:71:54:c1:c5:ae:37:
35:08:83:7f:aa:af:d0:b6:f9:8e:5e:3b:10:a8:37:
2a:99:e3:8c:57:1c:88:15:16:dd:ac:71:c8:c1:26:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C4:62:33:3E:A7:49:4D:CA:62:E4:B7:BD:DA:E0:53:6B:E6:E1:81
X509v3 Authority Key Identifier:
keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:fe:26:44:22:65:c1:bb:4d:cd:ab:36:c2:95:68:d4:72:ef:
f4:c6:ff:32:d7:3b:de:f3:80:0f:24:93:9f:8b:a7:53:f5:dd:
cc:87:71:d8:2a:e7:64:a7:85:74:26:31:65:6d:ff:26:1c:a4:
41:83:01:b0:bc:06:d5:cb:a6:c8:8f:1e:23:84:16:7a:27:60:
c8:07:4c:9b:70:91:78:d6:b1:02:8e:b7:fd:ec:8d:0e:e0:53:
f6:8a:c6:c0:50:ee:d0:f8:9d:e8:b0:0e:dc:77:48:aa:cf:d5:
6f:54:ee:5a:4d:0f:ba:9e:7d:af:65:4e:35:24:40:90:96:7e:
33:83:f1:cc:39:9e:2c:83:3e:9f:d5:07:31:54:e4:25:16:2c:
34:2e:d0:c5:db:6c:da:6c:6b:b9:03:c9:33:68:24:7f:e5:92:
72:b1:7b:86:60:c2:84:bb:8d:69:15:ab:54:33:96:df:71:43:
52:84:24:0f:18:2b:12:5e:1d:d2:3a:99:cf:81:b3:53:f2:ff:
e0:3f:0d:c0:68:f7:a9:5f:e7:08:3b:91:eb:52:66:a8:98:ab:
f8:91:63:98:23:54:e0:7a:a3:8f:88:15:ce:ad:77:e0:00:16:
9a:fe:95:3b:e0:4b:35:1f:f4:39:90:f0:ba:63:58:5c:c4:fe:
e3:25:05:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC
Mjk3QkI4MDEwHhcNMjUxMjIxMDQxOTE1WhcNMjUxMjI4MDQxOTE1WjAYMRYwFAYD
VQQDDA02OTQ3NzU0My00NTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4QDUFKdcy34sf9uzHAmjxcdFqjit6cMRG9l3nOASHYtCl0+rGx1yaOvwxVNS
6FPkn4mpnCENwZyhNN9pYGftzrlRYw5kY1E8KKYhE3FUlnryWQ+GswNQ7D2WctF6
fNSzSr0AJU0S+ftwJPn4isIqzCnGAwey84cmxQdntX0o/3wuHpoRHy16Lg3xPCnc
oPuIN2mEiq302n88BD+iDvv08Q+ifse1w/DBS0UquYO1jHHPVFWGWu3PrmFrLUtj
vMwB7QTokLIJFafrDHf1dYWcW4M8TkiegoTxhwRxVMHFrjc1CIN/qq/QtvmOXjsQ
qDcqmeOMVxyIFRbdrHHIwSbZJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErEYjM+
p0lNymLkt73a4FNr5uGBMB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE
REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1
QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF
c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA5/iZEImXBu03NqzbClWjUcu/0xv8y1zve84APJJOfi6dT9d3Mh3HY
Kudkp4V0JjFlbf8mHKRBgwGwvAbVy6bIjx4jhBZ6J2DIB0ybcJF41rECjrf97I0O
4FP2isbAUO7Q+J3osA7cd0iqz9VvVO5aTQ+6nn2vZU41JECQln4zg/HMOZ4sgz6f
1QcxVOQlFiw0LtDF22zabGu5A8kzaCR/5ZJysXuGYMKEu41pFatUM5bfcUNShCQP
GCsSXh3SOpnPgbNT8v/gPw3AaPepX+cIO5HrUmaomKv4kWOYI1TgeqOPiBXOrXfg
ABaa/pU74Es1H/Q5kPC6Y1hcxP7jJQX6
-----END CERTIFICATE-----
Generated at Sun Dec 21 12:06:01 2025 by rpki-client