This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
File: f83sMfr6flJ9p6lwOTIED4RVgVk.mft (raw, json)
Hash identifier: NvWM71ozo9NO+D4Kmpm/k1sL3u9A59bxeJXogmqvTD4=
Subject key identifier: 92:26:03:41:14:90:46:29:E8:BB:CD:F4:FE:C4:53:1F:06:27:56:0D
Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
Certificate issuer: /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Certificate serial: 036D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
Manifest number: 034B
Signing time: Thu 04 Dec 2025 23:29:56 +0000
Manifest this update: Thu 04 Dec 2025 23:29:55 +0000
Manifest next update: Thu 11 Dec 2025 23:29:55 +0000
Files and hashes: 1: f83sMfr6flJ9p6lwOTIED4RVgVk.crl (hash: 8pzKnkBDGhCv4EtUzKOWE+4DQjvdvSLgFKMllp6XAiw=)
2: 81EEF49E801711EF8566D481C4F9AE02.roa (hash: kGDq/OHD1l2DSUn6HN/fSE9IJdA1C+dG59/8ecfdLJw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl
rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Validity
Not Before: Dec 4 23:29:55 2025 GMT
Not After : Dec 11 23:29:55 2025 GMT
Subject: CN=69321973-00f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:65:5b:7c:2d:3b:b5:3a:24:73:6b:2c:d4:
11:f0:72:c0:aa:68:2c:50:d6:fa:d4:9e:f7:f5:de:
52:9e:15:d9:53:ff:54:3a:f2:45:06:b8:ce:57:ec:
9c:f1:3d:d6:be:66:24:b4:e1:83:e2:10:30:a8:ae:
cf:56:40:d3:cb:0a:47:06:20:87:60:39:af:b7:4d:
13:79:fa:9b:ea:df:61:3d:51:94:79:03:31:24:fa:
20:d1:0e:a7:4e:2e:33:f1:11:59:b4:03:e7:ba:fe:
1d:2b:e3:21:7d:88:bc:d3:1f:a2:b0:3b:74:46:e9:
28:89:e5:05:a8:1b:3b:06:cd:9e:b8:d0:82:55:5f:
a9:60:98:3d:18:5d:95:de:4c:8b:de:37:b5:a1:73:
e2:8b:38:a9:db:5b:95:6a:72:1f:d0:fe:8f:eb:06:
82:96:1a:95:b6:2b:a9:76:6f:2b:63:36:88:3a:86:
d0:61:54:3f:42:09:57:91:2a:22:ce:20:8d:ac:5b:
c0:15:44:6b:21:58:71:c5:30:1c:3c:d0:d8:f7:89:
b2:1d:02:93:22:ca:65:65:32:e1:c0:a1:a5:a1:d1:
0a:07:a0:92:fb:0b:54:8a:4d:6e:2c:87:18:21:57:
81:0a:d5:ef:5d:a2:db:5d:fd:73:d1:a5:81:a1:f5:
41:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:26:03:41:14:90:46:29:E8:BB:CD:F4:FE:C4:53:1F:06:27:56:0D
X509v3 Authority Key Identifier:
keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:58:2c:ad:4c:f3:8b:52:0f:00:13:1e:99:a0:a8:e3:2c:b1:
cb:20:09:b8:73:02:f9:51:56:e9:51:0e:1e:dc:55:2c:5a:51:
ed:66:de:69:fa:88:b5:18:d5:19:17:fd:05:6e:ed:0d:61:f5:
a6:1f:94:2d:35:b5:a2:ea:62:b9:14:92:b2:42:1f:19:43:24:
c0:08:21:e0:f3:b2:82:e7:4a:a8:b2:e1:d6:17:f7:80:37:55:
cb:63:b4:8b:3f:27:ac:92:52:fa:c4:5a:b6:4e:fe:49:a4:e9:
bb:37:dd:82:91:20:43:dc:16:4e:63:51:d2:d2:b0:0c:d6:8c:
25:e2:58:30:26:e9:50:0a:da:d2:3f:85:31:77:af:7d:c8:2a:
59:03:cc:b1:08:36:81:f2:59:7d:13:17:48:7d:99:69:80:28:
05:6b:79:9d:b7:90:ff:cf:ff:2e:e5:81:46:58:8f:6d:8e:fe:
02:f8:73:88:ad:0b:0b:8a:03:51:e4:61:da:4a:d1:a2:0f:a7:
c9:3a:0b:05:fe:1d:d4:97:c3:5e:8b:0f:d6:5b:2f:9f:8d:0e:
69:70:a6:7c:0f:60:6a:d6:48:d4:6b:a3:29:30:eb:8c:f6:a8:
6c:e3:9a:7a:be:8f:21:96:c8:65:23:dc:1d:05:53:2c:d9:99:
88:81:10:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzlCRjcxMTAvBgNVBAUTKDdGQ0RFQzMxRkFGQTdFNTI3REE3QTk3MDM5MzIwNDBG
ODQ1NTgxNTkwHhcNMjUxMjA0MjMyOTU1WhcNMjUxMjExMjMyOTU1WjAYMRYwFAYD
VQQDEw02OTMyMTk3My0wMGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyxNlW3wtO7U6JHNrLNQR8HLAqmgsUNb61J739d5SnhXZU/9UOvJFBrjOV+yc
8T3WvmYktOGD4hAwqK7PVkDTywpHBiCHYDmvt00Tefqb6t9hPVGUeQMxJPog0Q6n
Ti4z8RFZtAPnuv4dK+MhfYi80x+isDt0RukoieUFqBs7Bs2euNCCVV+pYJg9GF2V
3kyL3je1oXPiizip21uVanIf0P6P6waClhqVtiupdm8rYzaIOobQYVQ/QglXkSoi
ziCNrFvAFURrIVhxxTAcPNDY94myHQKTIsplZTLhwKGlodEKB6CS+wtUik1uLIcY
IVeBCtXvXaLbXf1z0aWBofVBIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJImA0EU
kEYp6LvN9P7EUx8GJ1YNMB8GA1UdIwQYMBaAFH/N7DH6+n5SfaepcDkyBA+EVYFZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUJGNy80QjY2RjEyQ0Yy
QzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZsSjlwNmx3T1RJRUQ0UlZn
VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Y4M3NNZnI2ZmxKOXA2bHdPVElFRDRSVmdWay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OUJGNy80QjY2RjEyQ0YyQzcxMUVDOEI4MTk2ODdDNEY5QUUwMi9mODNzTWZyNmZs
SjlwNmx3T1RJRUQ0UlZnVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwWCytTPOLUg8AEx6ZoKjjLLHLIAm4cwL5UVbpUQ4e3FUsWlHtZt5p
+oi1GNUZF/0Fbu0NYfWmH5QtNbWi6mK5FJKyQh8ZQyTACCHg87KC50qosuHWF/eA
N1XLY7SLPyesklL6xFq2Tv5JpOm7N92CkSBD3BZOY1HS0rAM1owl4lgwJulQCtrS
P4Uxd699yCpZA8yxCDaB8ll9ExdIfZlpgCgFa3mdt5D/z/8u5YFGWI9tjv4C+HOI
rQsLigNR5GHaStGiD6fJOgsF/h3Ul8Neiw/WWy+fjQ5pcKZ8D2Bq1kjUa6MpMOuM
9qhs45p6vo8hlshlI9wdBVMs2ZmIgRC2
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:43 2025 by rpki-client