This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
File: rpODqTtsWhNdJhOpfF3slgliM_E.mft (raw, json)
Hash identifier: B5RBUtsNhq9HJLyfw6vnmP/GMSUqh6LD0FNCPp0/ukg=
Subject key identifier: 10:3E:B6:10:31:CD:BB:3A:25:35:FB:57:20:93:81:1B:01:79:F8:CE
Authority key identifier: AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
Certificate issuer: /CN=A917748E/serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Certificate serial: 0249
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
Manifest number: 0249
Signing time: Fri 05 Dec 2025 00:06:03 +0000
Manifest this update: Fri 05 Dec 2025 00:06:02 +0000
Manifest next update: Fri 12 Dec 2025 00:06:02 +0000
Files and hashes: 1: rpODqTtsWhNdJhOpfF3slgliM_E.crl (hash: 9Zdp3mlJpGlBTKbEfgW5QPcIWgE+fmeKpf66eDelAIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917748E, serialNumber=AE9383A93B6C5A135D2613A97C5DEC96096233F1
Validity
Not Before: Dec 5 00:06:02 2025 GMT
Not After : Dec 12 00:06:02 2025 GMT
Subject: CN=693221eb-b528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:e2:d6:d2:13:11:6f:e1:e0:58:0e:4c:45:
c1:75:9d:c3:09:98:ca:a1:88:00:9f:07:71:d7:a1:
6b:7b:5c:11:41:4f:9c:c1:2c:f4:cd:bd:8d:d5:e7:
9e:d5:b4:a6:88:cb:e1:04:bc:ab:6d:6f:83:35:99:
47:f5:10:cb:b2:54:c6:42:11:dd:1c:34:67:b1:95:
9c:a7:2d:65:37:4c:89:9c:a7:e1:65:9f:17:7d:c9:
1e:ca:ff:6a:be:1a:1a:6a:c9:32:a1:77:41:0e:93:
c2:ce:e1:32:48:8c:16:e3:df:96:12:c8:3c:47:0c:
03:8d:53:ea:7f:d4:a2:b2:32:c0:a8:17:04:15:fd:
49:a5:19:aa:42:2b:60:a7:04:68:f7:85:01:ac:63:
96:67:41:a7:21:c3:d1:37:1c:df:20:f8:b3:fd:ab:
99:56:1c:db:06:f5:90:58:d5:ef:43:bb:89:32:6f:
14:a8:74:32:eb:8d:8a:33:bf:88:01:19:db:e0:34:
42:26:6f:1a:87:a4:ab:13:16:ed:c2:86:2a:91:f6:
df:7e:23:bc:1e:a7:c5:f8:f3:78:72:18:d3:d6:4b:
3f:86:82:6b:c1:61:16:14:ea:b9:65:49:73:19:72:
b9:8b:41:cd:29:22:86:dd:6a:78:d2:8b:76:38:be:
66:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3E:B6:10:31:CD:BB:3A:25:35:FB:57:20:93:81:1B:01:79:F8:CE
X509v3 Authority Key Identifier:
keyid:AE:93:83:A9:3B:6C:5A:13:5D:26:13:A9:7C:5D:EC:96:09:62:33:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rpODqTtsWhNdJhOpfF3slgliM_E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917748E/571159E24FA911EDADE5157CC4F9AE02/rpODqTtsWhNdJhOpfF3slgliM_E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:9c:aa:21:4f:b3:80:67:60:14:d4:71:59:f1:c6:e5:60:3f:
3b:0a:c6:2d:6f:c8:0d:4d:64:a2:9b:90:de:8e:d0:7c:62:67:
a0:fe:7c:38:64:11:4b:ab:7b:05:7d:4b:3f:cf:49:e7:7a:39:
5d:36:2e:71:cc:22:cd:d0:df:b4:8b:a2:26:3e:68:1a:a6:f0:
60:c9:3d:20:16:63:cc:df:fa:90:fa:55:18:03:d9:03:ec:3c:
e8:ce:68:c5:20:98:2c:e6:e8:20:c3:18:d1:81:24:bb:48:c6:
d9:33:8e:7b:e5:c0:75:17:11:27:7c:75:34:a4:2c:a2:32:94:
5c:a6:fe:43:d9:2d:c7:cc:e1:4a:3e:69:6f:14:d1:f0:0f:32:
33:dd:f6:96:b9:ad:76:dc:d4:79:ec:5c:b1:7e:b2:42:ad:c3:
e8:11:42:fb:6b:9e:42:c5:d2:48:33:5c:ea:be:45:46:55:aa:
df:0a:eb:6c:be:4c:81:c2:a4:41:9d:1b:6c:23:88:dd:3d:9c:
da:26:ac:e7:1e:19:19:bd:26:14:3e:f6:6b:63:0f:7d:b1:5d:
c2:b6:b5:a3:6e:c3:65:48:27:0e:de:0c:03:be:69:11:67:a7:
2a:ae:b1:dd:6c:58:62:7f:89:2a:23:8e:dd:d7:f0:36:ad:10:
79:4e:7a:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzc0OEUxMTAvBgNVBAUTKEFFOTM4M0E5M0I2QzVBMTM1RDI2MTNBOTdDNURFQzk2
MDk2MjMzRjEwHhcNMjUxMjA1MDAwNjAyWhcNMjUxMjEyMDAwNjAyWjAYMRYwFAYD
VQQDEw02OTMyMjFlYi1iNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLzi1tITEW/h4FgOTEXBdZ3DCZjKoYgAnwdx16Fre1wRQU+cwSz0zb2N1eee
1bSmiMvhBLyrbW+DNZlH9RDLslTGQhHdHDRnsZWcpy1lN0yJnKfhZZ8Xfckeyv9q
vhoaaskyoXdBDpPCzuEySIwW49+WEsg8RwwDjVPqf9SisjLAqBcEFf1JpRmqQitg
pwRo94UBrGOWZ0GnIcPRNxzfIPiz/auZVhzbBvWQWNXvQ7uJMm8UqHQy642KM7+I
ARnb4DRCJm8ah6SrExbtwoYqkfbffiO8HqfF+PN4chjT1ks/hoJrwWEWFOq5ZUlz
GXK5i0HNKSKG3Wp40ot2OL5mnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBA+thAx
zbs6JTX7VyCTgRsBefjOMB8GA1UdIwQYMBaAFK6Tg6k7bFoTXSYTqXxd7JYJYjPx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzQ4RS81NzExNTlFMjRG
QTkxMUVEQURFNTE1N0NDNEY5QUUwMi9ycE9EcVR0c1doTmRKaE9wZkYzc2xnbGlN
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JwT0RxVHRzV2hOZEpoT3BmRjNzbGdsaU1fRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzQ4RS81NzExNTlFMjRGQTkxMUVEQURFNTE1N0NDNEY5QUUwMi9ycE9EcVR0c1do
TmRKaE9wZkYzc2xnbGlNX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAInKohT7OAZ2AU1HFZ8cblYD87CsYtb8gNTWSim5DejtB8Ymeg/nw4
ZBFLq3sFfUs/z0nnejldNi5xzCLN0N+0i6ImPmgapvBgyT0gFmPM3/qQ+lUYA9kD
7DzozmjFIJgs5uggwxjRgSS7SMbZM4575cB1FxEnfHU0pCyiMpRcpv5D2S3HzOFK
PmlvFNHwDzIz3faWua123NR57FyxfrJCrcPoEUL7a55CxdJIM1zqvkVGVarfCuts
vkyBwqRBnRtsI4jdPZzaJqznHhkZvSYUPvZrYw99sV3CtrWjbsNlSCcO3gwDvmkR
Z6cqrrHdbFhif4kqI47d1/A2rRB5TnrJ
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:59:06 2025 by rpki-client