This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
File: AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft (raw, json)
Hash identifier: zSHgz1FGbB9Vv9ve7w7q6MYUUPPg/Ovg+SD471heX8g=
Subject key identifier: BE:2A:37:33:96:51:E7:FD:BE:69:DC:43:D6:6C:74:74:AD:EE:97:E2
Authority key identifier: 00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
Certificate issuer: /CN=A916E9E3/serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Certificate serial: 2E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
Manifest number: 28
Signing time: Fri 05 Dec 2025 05:36:01 +0000
Manifest this update: Fri 05 Dec 2025 05:36:01 +0000
Manifest next update: Fri 12 Dec 2025 05:36:01 +0000
Files and hashes: 1: AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl (hash: wJ3TVaPkooNEEI9d1vEP1ISNXdoJDMA22RCpUtz/lyU=)
2: 9F57DB96B42211F09BF7B44BC4F9AE02.roa (hash: GSocOIU4gJGXAsCNtlbHDTRRIj+08JXL+H5AQwRagYs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9E3, serialNumber=0084F47A4372C8F8A7D51183D5036C593D19E1C3
Validity
Not Before: Dec 5 05:36:01 2025 GMT
Not After : Dec 12 05:36:01 2025 GMT
Subject: CN=69326f41-b120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:bf:f0:47:d9:0c:22:d3:60:39:b7:00:12:
85:62:cb:fc:a4:89:b1:55:80:28:85:c3:8c:51:46:
2c:cb:ef:00:91:55:50:ce:33:90:10:ff:cd:5b:ee:
6e:f0:7a:7d:ed:d9:98:04:50:fc:d4:52:88:18:31:
c7:56:08:08:e6:c5:55:0c:c5:7c:dd:92:af:d4:f0:
38:ff:bc:75:48:cc:0c:c4:2a:80:d6:31:e9:8b:1c:
bd:27:f0:40:de:5f:0c:f9:cf:5a:93:8f:a7:ac:35:
ae:dd:2a:6c:c4:e6:96:50:bb:6b:cf:d2:aa:e7:10:
ea:fd:e0:40:ff:56:15:b7:cc:7f:48:9f:68:d2:6d:
a5:3e:e0:87:25:00:cf:1f:6d:02:8f:e6:24:47:47:
9f:08:54:38:9e:f9:ad:8f:52:3c:d6:46:2b:a8:35:
57:b2:b8:3e:2d:ac:8b:eb:79:b7:c8:94:9f:e6:f6:
30:68:79:5a:0b:1b:e3:13:56:00:23:b6:51:48:b4:
22:80:61:a1:8e:d7:8e:a8:78:fc:f1:4b:3f:fc:f7:
e7:3c:c6:6a:60:ee:e1:48:f7:31:e4:3e:bf:6c:33:
5a:45:79:28:f5:85:cc:bb:e2:35:f4:02:98:71:05:
51:29:c1:eb:e4:83:fe:39:95:fc:b5:17:05:9d:04:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2A:37:33:96:51:E7:FD:BE:69:DC:43:D6:6C:74:74:AD:EE:97:E2
X509v3 Authority Key Identifier:
keyid:00:84:F4:7A:43:72:C8:F8:A7:D5:11:83:D5:03:6C:59:3D:19:E1:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AIT0ekNyyPin1RGD1QNsWT0Z4cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9E3/44CE4ED2A3A411F092013E29C4F9AE02/AIT0ekNyyPin1RGD1QNsWT0Z4cM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:f1:89:f5:e3:a7:33:9c:0b:a8:67:df:6a:f4:da:7d:fe:54:
a5:79:97:98:58:76:2b:ad:19:a4:9a:93:dc:51:4f:ed:6b:95:
39:5e:e0:c2:af:f0:97:62:3a:62:c8:d4:d9:c2:6d:0f:69:f7:
bc:d1:5b:8b:91:a0:51:18:2c:8f:99:b1:a8:67:d0:7e:c3:ef:
d8:b0:64:9a:b8:fa:47:6b:2c:6f:f6:51:c0:5a:96:9d:21:69:
7c:5d:14:3d:47:55:06:6f:c5:3b:1f:9c:e1:cf:d5:ad:27:9f:
2b:d6:02:a0:e9:db:df:77:11:08:e7:d8:73:da:2c:e2:28:70:
ee:cc:db:10:47:fc:2f:18:b2:58:52:04:31:ff:7b:d4:88:4b:
19:b1:e7:e6:85:a6:29:58:39:93:99:2c:c8:07:c6:3d:c4:7d:
a7:de:57:91:0f:21:7a:aa:35:a7:91:3e:ea:ee:30:35:6d:5b:
9e:aa:8c:e3:c8:29:16:9f:37:dc:f7:42:26:af:d9:0d:c2:0d:
18:6a:61:fa:02:bc:6c:26:ca:12:08:cd:af:81:71:d6:83:9a:
fc:9c:eb:18:ae:8e:93:37:62:50:f8:2d:bb:c8:95:47:d6:fe:
a2:f3:48:d8:b5:21:12:ea:e7:d4:31:e3:65:97:d8:21:cc:4e:
be:2d:44:00
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
RTlFMzExMC8GA1UEBRMoMDA4NEY0N0E0MzcyQzhGOEE3RDUxMTgzRDUwMzZDNTkz
RDE5RTFDMzAeFw0yNTEyMDUwNTM2MDFaFw0yNTEyMTIwNTM2MDFaMBgxFjAUBgNV
BAMTDTY5MzI2ZjQxLWIxMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxBb/wR9kMItNgObcAEoViy/ykibFVgCiFw4xRRizL7wCRVVDOM5AQ/81b7m7w
en3t2ZgEUPzUUogYMcdWCAjmxVUMxXzdkq/U8Dj/vHVIzAzEKoDWMemLHL0n8EDe
Xwz5z1qTj6esNa7dKmzE5pZQu2vP0qrnEOr94ED/VhW3zH9In2jSbaU+4IclAM8f
bQKP5iRHR58IVDie+a2PUjzWRiuoNVeyuD4trIvrebfIlJ/m9jBoeVoLG+MTVgAj
tlFItCKAYaGO146oePzxSz/89+c8xmpg7uFI9zHkPr9sM1pFeSj1hcy74jX0Aphx
BVEpwevkg/45lfy1FwWdBB5HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvio3M5ZR
5/2+adxD1mx0dK3ul+IwHwYDVR0jBBgwFoAUAIT0ekNyyPin1RGD1QNsWT0Z4cMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZFOUUzLzQ0Q0U0RUQyQTNB
NDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBpbjFSR0QxUU5zV1QwWjRj
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQUlUMGVrTnl5UGluMVJHRDFRTnNXVDBaNGNNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZF
OUUzLzQ0Q0U0RUQyQTNBNDExRjA5MjAxM0UyOUM0RjlBRTAyL0FJVDBla055eVBp
bjFSR0QxUU5zV1QwWjRjTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGHxifXjpzOcC6hn32r02n3+VKV5l5hYdiutGaSak9xRT+1rlTle4MKv
8JdiOmLI1NnCbQ9p97zRW4uRoFEYLI+Zsahn0H7D79iwZJq4+kdrLG/2UcBalp0h
aXxdFD1HVQZvxTsfnOHP1a0nnyvWAqDp2993EQjn2HPaLOIocO7M2xBH/C8YslhS
BDH/e9SISxmx5+aFpilYOZOZLMgHxj3EfafeV5EPIXqqNaeRPuruMDVtW56qjOPI
KRafN9z3Qiav2Q3CDRhqYfoCvGwmyhIIza+BcdaDmvyc6xiujpM3YlD4LbvIlUfW
/qLzSNi1IRLq59Qx42WX2CHMTr4tRAA=
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:17:33 2025 by rpki-client