This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
File: PcXSlD7UrPqSa3dnapi-yLPJea4.mft (raw, json)
Hash identifier: koD7Hs33dexJ6xXQMS/l7Ly+DjVd5RSwiP3s4Goxmm0=
Subject key identifier: 85:59:7D:33:27:78:2B:79:76:7A:F6:EE:87:0B:FE:CE:80:81:68:BA
Authority key identifier: 3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
Certificate issuer: /CN=A916AF8E/serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Certificate serial: 07CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
Manifest number: 07C7
Signing time: Thu 04 Dec 2025 20:17:54 +0000
Manifest this update: Thu 04 Dec 2025 20:17:53 +0000
Manifest next update: Thu 11 Dec 2025 20:17:53 +0000
Files and hashes: 1: PcXSlD7UrPqSa3dnapi-yLPJea4.crl (hash: Lpu/gqarBIfkpNcH3LMIl2IsmFIE1SequFQNgTlboDs=)
2: 499DE3FC1C1611EB8BD35065C4F9AE02.roa (hash: QnFh/0YdNLZr/ZfMn+21+lOUTuFHow1/2U5v+xOLivo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:17:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1999 (0x7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916AF8E, serialNumber=3DC5D2943ED4ACFA926B77676A98BEC8B3C979AE
Validity
Not Before: Dec 4 20:17:53 2025 GMT
Not After : Dec 11 20:17:53 2025 GMT
Subject: CN=6931ec72-67d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:d7:49:e9:ec:79:06:08:37:8c:64:4f:a7:
89:33:28:80:f6:a3:40:ab:09:ae:8e:ae:93:fa:a8:
cb:0e:f3:bc:8b:e7:54:b5:b4:d7:f6:ae:a4:6a:1a:
23:10:3a:a4:b9:25:9d:b5:8a:9d:5c:85:47:68:c3:
50:9b:24:c4:b5:a7:8f:40:aa:22:4c:ca:f5:fd:fa:
82:5c:b8:ef:a0:96:eb:89:cb:28:ab:b6:7f:62:66:
22:76:f6:af:a4:67:cd:23:b5:bd:83:48:0c:32:c3:
c1:7b:b0:30:00:39:c4:f2:ed:5b:7c:90:91:5d:64:
67:72:a2:93:56:3b:47:97:0c:a6:b7:df:24:21:d2:
7e:b7:45:99:bb:b4:85:a6:ec:c3:4e:45:f7:cf:36:
38:30:22:66:bf:bf:bc:56:7e:e9:c1:dc:65:e9:ce:
98:8f:e5:99:73:64:f7:9c:0a:18:32:f3:86:34:54:
c7:d3:e8:81:36:9c:25:e7:d3:5d:c2:8d:46:45:5f:
d1:38:db:9c:78:15:1c:7a:4b:35:7d:33:4c:56:a9:
1b:57:8c:76:d3:0c:e2:9e:c5:88:ae:cb:ac:57:1d:
2b:7c:dc:24:f9:75:6b:94:d3:d8:5d:29:da:ee:4e:
49:04:56:85:77:81:9e:62:8c:ad:27:95:75:12:a1:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:59:7D:33:27:78:2B:79:76:7A:F6:EE:87:0B:FE:CE:80:81:68:BA
X509v3 Authority Key Identifier:
keyid:3D:C5:D2:94:3E:D4:AC:FA:92:6B:77:67:6A:98:BE:C8:B3:C9:79:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PcXSlD7UrPqSa3dnapi-yLPJea4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AF8E/D94A75941C1411EBB036DC63C4F9AE02/PcXSlD7UrPqSa3dnapi-yLPJea4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:1e:a9:df:69:56:c4:0b:9b:57:a8:a7:59:37:4d:52:ac:00:
dd:c3:9b:b8:8d:15:cd:78:e1:80:4d:01:45:fc:d2:a9:92:c5:
06:d6:aa:0a:ce:66:72:5c:a1:d7:36:5f:9e:a2:70:11:49:32:
bb:4d:0c:79:eb:46:32:4e:2f:15:36:a1:63:ef:d7:13:40:82:
18:61:e7:2e:43:77:6b:9c:cb:db:9b:a6:26:54:0e:b0:a5:5a:
d3:2a:e8:b8:a9:94:9f:d2:93:1d:45:c4:84:c4:78:84:6f:70:
1a:64:0d:0f:e0:fd:df:d3:75:19:d3:55:7e:e2:c8:8a:58:76:
f9:e7:63:97:2d:d8:fd:77:63:4b:11:e3:be:24:ae:ae:66:ac:
0b:9c:b6:8c:7d:ad:87:b3:52:5d:8a:e5:51:06:ca:89:f3:d5:
05:b5:1a:71:ce:70:a0:1c:53:a0:84:5a:1e:ee:72:40:d1:2b:
5a:69:70:ee:12:1a:ac:31:ee:de:09:55:fe:43:65:1d:77:53:
02:14:40:3c:a9:51:88:f3:cc:ee:dc:4b:72:b5:de:d9:0d:bb:
35:e0:c8:f9:1d:4b:aa:1d:6c:97:d2:44:94:cb:b3:21:2a:88:
a8:bd:fb:55:25:2b:df:a3:cb:b5:e4:15:df:aa:f4:ae:0d:9c:
11:e0:e6:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFGOEUxMTAvBgNVBAUTKDNEQzVEMjk0M0VENEFDRkE5MjZCNzc2NzZBOThCRUM4
QjNDOTc5QUUwHhcNMjUxMjA0MjAxNzUzWhcNMjUxMjExMjAxNzUzWjAYMRYwFAYD
VQQDEw02OTMxZWM3Mi02N2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsljXSenseQYIN4xkT6eJMyiA9qNAqwmujq6T+qjLDvO8i+dUtbTX9q6kahoj
EDqkuSWdtYqdXIVHaMNQmyTEtaePQKoiTMr1/fqCXLjvoJbricsoq7Z/YmYidvav
pGfNI7W9g0gMMsPBe7AwADnE8u1bfJCRXWRncqKTVjtHlwymt98kIdJ+t0WZu7SF
puzDTkX3zzY4MCJmv7+8Vn7pwdxl6c6Yj+WZc2T3nAoYMvOGNFTH0+iBNpwl59Nd
wo1GRV/RONuceBUceks1fTNMVqkbV4x20wzinsWIrsusVx0rfNwk+XVrlNPYXSna
7k5JBFaFd4GeYoytJ5V1EqESbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVZfTMn
eCt5dnr27ocL/s6AgWi6MB8GA1UdIwQYMBaAFD3F0pQ+1Kz6kmt3Z2qYvsizyXmu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUY4RS9EOTRBNzU5NDFD
MTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQcVNhM2RuYXBpLXlMUEpl
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BjWFNsRDdVclBxU2EzZG5hcGkteUxQSmVhNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUY4RS9EOTRBNzU5NDFDMTQxMUVCQjAzNkRDNjNDNEY5QUUwMi9QY1hTbEQ3VXJQ
cVNhM2RuYXBpLXlMUEplYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUHqnfaVbEC5tXqKdZN01SrADdw5u4jRXNeOGATQFF/NKpksUG1qoK
zmZyXKHXNl+eonARSTK7TQx560YyTi8VNqFj79cTQIIYYecuQ3drnMvbm6YmVA6w
pVrTKui4qZSf0pMdRcSExHiEb3AaZA0P4P3f03UZ01V+4siKWHb552OXLdj9d2NL
EeO+JK6uZqwLnLaMfa2Hs1JdiuVRBsqJ89UFtRpxznCgHFOghFoe7nJA0StaaXDu
EhqsMe7eCVX+Q2Udd1MCFEA8qVGI88zu3Etytd7ZDbs14Mj5HUuqHWyX0kSUy7Mh
KoiovftVJSvfo8u15BXfqvSuDZwR4OYs
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:28:10 2025 by rpki-client