This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json)
Hash identifier: NCjZ4meDOu5VXnSlYOMKiqnT/NntvB/DktUWLTUncbU=
Subject key identifier: C3:69:18:5D:7B:4B:C6:9A:02:E3:B5:F4:DB:88:1E:50:AF:4A:31:0A
Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Certificate serial: 032D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
Manifest number: 030A
Signing time: Thu 04 Dec 2025 23:40:18 +0000
Manifest this update: Thu 04 Dec 2025 23:40:18 +0000
Manifest next update: Thu 11 Dec 2025 23:40:18 +0000
Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: eUiqBiqdJeOwmeJblOkGbWCAPKcL6UsmTS+FM7MQSXs=)
2: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: i91dJKVTb6GLG1R30/IzaT1OTBlo0JQsHaeOVz47T3o=)
3: 03D6E39A824C11F0B2CA540FC4F9AE02.roa (hash: sh0P7r2XibS/gx2Xt0Uiy2ulD+jkzyj/uW0sx5+8aeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Validity
Not Before: Dec 4 23:40:18 2025 GMT
Not After : Dec 11 23:40:18 2025 GMT
Subject: CN=69321be2-a628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:54:e0:ad:8b:0f:fd:49:2d:04:cf:8d:a8:
23:85:04:2f:58:2e:c5:d6:5b:77:3d:9c:96:20:9a:
4e:c4:a5:fb:04:99:bb:85:29:dc:8d:cf:cb:a3:3b:
33:0b:6e:0a:ec:ee:19:d6:7d:51:00:62:77:48:9e:
25:ca:7c:79:9a:b0:81:5f:28:23:52:7b:fb:11:76:
24:a4:6f:ba:b7:7b:22:1e:70:5d:e1:db:c9:3f:ba:
4d:8c:66:1b:71:68:b5:b3:e6:f0:bc:8a:4f:bc:78:
b6:07:0d:ff:1a:82:0e:01:c7:dc:89:37:6c:fd:f7:
68:df:be:68:c0:c8:b9:8e:de:63:b9:cc:5a:c0:e4:
1d:c6:57:e0:e5:23:a5:ac:0f:8b:2f:09:e0:db:2a:
3f:36:2e:b8:fc:4f:d0:77:e6:79:9b:28:91:7a:d9:
f6:32:3f:6f:b4:da:87:c1:54:95:54:06:6a:3d:34:
f7:fc:c8:29:2c:be:ac:17:23:92:9f:06:77:ac:aa:
34:46:f7:6f:2d:b5:ed:b5:e2:5e:26:05:b9:ae:c6:
7e:14:06:82:bf:ac:29:a1:1d:81:eb:bd:46:d3:66:
27:d5:5b:82:fa:b9:6e:3c:a9:fd:f0:85:f8:8e:36:
ca:14:35:06:cc:50:22:86:3a:ef:97:0e:af:65:32:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:69:18:5D:7B:4B:C6:9A:02:E3:B5:F4:DB:88:1E:50:AF:4A:31:0A
X509v3 Authority Key Identifier:
keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:6b:18:ca:6e:f8:1b:14:d4:cf:36:66:de:d0:86:0c:59:49:
9f:d0:e2:ed:50:0b:47:17:d5:39:1e:11:0e:57:d0:98:9e:1d:
18:57:ff:6b:63:08:35:3f:63:fc:ea:eb:54:4c:a2:a4:4f:91:
a5:04:18:ce:f9:46:ec:81:cd:49:3d:1f:bf:34:5f:75:07:72:
0f:04:a2:36:14:c8:2f:44:3e:cb:3f:03:28:6d:e5:fa:5a:c6:
ea:ac:d9:59:84:dc:4e:a8:9b:e1:5b:ee:69:30:2c:94:4a:83:
bd:3c:87:ba:c1:ce:1c:03:db:59:fc:47:0a:d8:ac:e7:59:4d:
8a:b1:95:10:99:e9:bd:9f:17:6d:7f:4b:ce:36:cb:91:88:dc:
d8:ba:43:73:df:41:fe:c8:46:c5:a6:6a:46:a0:5f:4e:a8:36:
1b:55:c6:11:4b:a6:48:f1:88:3b:b2:d4:e3:3a:a1:63:7a:b5:
3f:87:b4:a2:ee:6c:69:66:8f:de:1b:c7:44:84:34:53:86:69:
06:f6:c7:39:e2:4d:2f:23:c5:5c:f9:66:24:c7:28:89:6a:2d:
70:e0:52:b8:79:44:b6:d5:43:56:bc:44:9d:70:ca:6f:7e:43:
15:2a:6f:dc:39:5f:d9:6e:cc:ce:8c:2e:ca:6c:73:8e:58:11:
b5:43:11:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB
MEQ3NjE1MTIwHhcNMjUxMjA0MjM0MDE4WhcNMjUxMjExMjM0MDE4WjAYMRYwFAYD
VQQDEw02OTMyMWJlMi1hNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyllU4K2LD/1JLQTPjagjhQQvWC7F1lt3PZyWIJpOxKX7BJm7hSncjc/Lozsz
C24K7O4Z1n1RAGJ3SJ4lynx5mrCBXygjUnv7EXYkpG+6t3siHnBd4dvJP7pNjGYb
cWi1s+bwvIpPvHi2Bw3/GoIOAcfciTds/fdo375owMi5jt5jucxawOQdxlfg5SOl
rA+LLwng2yo/Ni64/E/Qd+Z5myiRetn2Mj9vtNqHwVSVVAZqPTT3/MgpLL6sFyOS
nwZ3rKo0RvdvLbXtteJeJgW5rsZ+FAaCv6wpoR2B671G02Yn1VuC+rluPKn98IX4
jjbKFDUGzFAihjrvlw6vZTIK8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNpGF17
S8aaAuO19NuIHlCvSjEKMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4
RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG
UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ
RGxOTExtaGY0ZEtnMTJGUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4axjKbvgbFNTPNmbe0IYMWUmf0OLtUAtHF9U5HhEOV9CYnh0YV/9r
Ywg1P2P86utUTKKkT5GlBBjO+Ubsgc1JPR+/NF91B3IPBKI2FMgvRD7LPwMobeX6
WsbqrNlZhNxOqJvhW+5pMCyUSoO9PIe6wc4cA9tZ/EcK2KznWU2KsZUQmem9nxdt
f0vONsuRiNzYukNz30H+yEbFpmpGoF9OqDYbVcYRS6ZI8Yg7stTjOqFjerU/h7Si
7mxpZo/eG8dEhDRThmkG9sc54k0vI8Vc+WYkxyiJai1w4FK4eUS21UNWvESdcMpv
fkMVKm/cOV/ZbszOjC7KbHOOWBG1QxGi
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:11:57 2025 by rpki-client