This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
File: rIf9aQzGskx4_D9x0y3eDbookNs.mft (raw, json)
Hash identifier: rM7dag+mS9pxdJzjapc/88mwlZFaxTYJvWkrZj+JHwI=
Subject key identifier: BA:D3:47:08:ED:55:B9:6C:88:5D:42:23:7C:CC:12:89:A5:83:B7:95
Authority key identifier: AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
Certificate issuer: /CN=A917C156/serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
Manifest number: 79
Signing time: Fri 05 Dec 2025 04:43:47 +0000
Manifest this update: Fri 05 Dec 2025 04:43:46 +0000
Manifest next update: Fri 12 Dec 2025 04:43:46 +0000
Files and hashes: 1: rIf9aQzGskx4_D9x0y3eDbookNs.crl (hash: cWAu6JN3ekolqY841KmfyJUGfodJX/wlz6dIDHWoGKg=)
2: 82B7AD281C2811F0AF6EDC47C4F9AE02.roa (hash: TOct4YZ3x0uVg6PIqVFGhW7Pj8+y8nCLAaZLvcpqBvw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl
rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C156, serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Validity
Not Before: Dec 5 04:43:46 2025 GMT
Not After : Dec 12 04:43:46 2025 GMT
Subject: CN=69326303-d940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:37:1f:be:0e:95:20:37:8c:78:33:19:08:
d2:84:2c:07:f4:11:67:ca:2f:43:11:60:b0:aa:c1:
40:24:53:33:3b:41:93:1a:21:4d:0b:ad:25:85:42:
9c:a4:ac:1c:75:ce:9f:de:1f:d0:11:b1:9a:cd:96:
bc:59:24:22:30:3c:f5:f7:dc:4e:40:d5:86:87:4e:
a3:4b:5c:8c:ce:df:f0:ef:07:70:4a:26:d3:30:6d:
9b:de:11:dc:49:9d:ff:f9:bc:0a:2c:59:e8:3d:eb:
63:a5:a3:d8:15:c8:02:cc:ab:dd:bf:8f:45:cc:96:
20:e5:88:de:2d:1b:e5:73:27:71:da:d7:fd:9e:89:
82:6c:6a:fc:27:b1:1c:7c:4b:9d:a5:8d:cf:62:ed:
15:fe:17:e5:1c:c2:46:6f:df:d2:d9:70:c6:63:f8:
cc:82:77:19:95:f7:6c:b3:0d:b3:68:65:18:d3:54:
f6:d9:9f:d7:33:1d:a1:86:f4:6d:ed:ca:1f:6f:38:
18:ab:20:c1:53:cd:69:5d:ab:56:22:7b:85:9d:8c:
e3:ab:b5:19:fd:ad:f9:c9:2a:0b:37:f4:e3:ff:41:
5d:5c:20:e7:e4:dc:60:22:0f:fa:4c:4f:f4:6f:a7:
61:c3:9d:a2:96:96:1d:ad:92:b8:a5:51:ca:39:35:
7d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D3:47:08:ED:55:B9:6C:88:5D:42:23:7C:CC:12:89:A5:83:B7:95
X509v3 Authority Key Identifier:
keyid:AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:84:3c:08:b7:ee:fa:a4:47:94:4d:e6:e2:ee:93:f3:f1:84:
1a:b4:f7:23:54:d3:99:6c:31:46:41:aa:94:cc:f8:ea:88:de:
f6:2a:9f:48:9c:01:b6:5f:d3:5f:76:cc:70:c7:2d:4b:5c:d0:
ea:17:23:02:69:58:15:af:6a:d9:e3:b2:16:3f:ef:77:78:26:
1c:60:a2:8e:13:ed:6e:7f:fa:2f:f8:bd:91:33:7d:5d:96:bf:
19:02:58:0b:0d:a0:38:89:9c:9a:db:cf:51:27:25:8f:ce:98:
d9:0b:ce:ab:5c:cd:db:e8:0b:0e:35:d4:cb:03:ef:d2:34:d6:
47:ad:59:18:04:62:69:92:dc:d1:e3:10:b9:82:d8:a3:2c:16:
df:6e:80:1d:95:09:21:bc:a3:36:52:bf:8d:1b:3c:0b:44:15:
8c:c2:0a:67:3c:c1:1e:d5:15:d2:52:6b:55:2d:b2:54:86:6a:
32:ee:dc:6b:88:61:80:b5:fc:c8:b6:d1:6a:51:7d:3d:55:af:
6d:c8:81:01:51:64:9b:ee:06:d4:6e:58:f5:92:8d:d2:df:5c:
3d:04:d8:1a:07:46:f0:f3:6e:34:14:c4:23:4e:da:b8:0a:b1:
f8:3b:a7:3d:fa:c5:92:cf:08:5f:2d:cb:7c:4f:0c:44:9c:47:
b9:b7:43:80
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QzE1NjExMC8GA1UEBRMoQUM4N0ZENjkwQ0M2QjI0Qzc4RkMzRjcxRDMyRERFMERC
QTI4OTBEQjAeFw0yNTEyMDUwNDQzNDZaFw0yNTEyMTIwNDQzNDZaMBgxFjAUBgNV
BAMTDTY5MzI2MzAzLWQ5NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCrkjcfvg6VIDeMeDMZCNKELAf0EWfKL0MRYLCqwUAkUzM7QZMaIU0LrSWFQpyk
rBx1zp/eH9ARsZrNlrxZJCIwPPX33E5A1YaHTqNLXIzO3/DvB3BKJtMwbZveEdxJ
nf/5vAosWeg962Olo9gVyALMq92/j0XMliDliN4tG+VzJ3Ha1/2eiYJsavwnsRx8
S52ljc9i7RX+F+UcwkZv39LZcMZj+MyCdxmV92yzDbNoZRjTVPbZn9czHaGG9G3t
yh9vOBirIMFTzWldq1Yie4WdjOOrtRn9rfnJKgs39OP/QV1cIOfk3GAiD/pMT/Rv
p2HDnaKWlh2tkrilUco5NX0fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUutNHCO1V
uWyIXUIjfMwSiaWDt5UwHwYDVR0jBBgwFoAUrIf9aQzGskx4/D9x0y3eDbookNsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMTU2LzE0MkU2NERFMUMw
MzExRjBBNURDMTU1NkM0RjlBRTAyL3JJZjlhUXpHc2t4NF9EOXgweTNlRGJvb2tO
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcklmOWFRekdza3g0X0Q5eDB5M2VEYm9va05zLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD
MTU2LzE0MkU2NERFMUMwMzExRjBBNURDMTU1NkM0RjlBRTAyL3JJZjlhUXpHc2t4
NF9EOXgweTNlRGJvb2tOcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADuEPAi37vqkR5RN5uLuk/PxhBq09yNU05lsMUZBqpTM+OqI3vYqn0ic
AbZf0192zHDHLUtc0OoXIwJpWBWvatnjshY/73d4Jhxgoo4T7W5/+i/4vZEzfV2W
vxkCWAsNoDiJnJrbz1EnJY/OmNkLzqtczdvoCw411MsD79I01ketWRgEYmmS3NHj
ELmC2KMsFt9ugB2VCSG8ozZSv40bPAtEFYzCCmc8wR7VFdJSa1UtslSGajLu3GuI
YYC1/Mi20WpRfT1Vr23IgQFRZJvuBtRuWPWSjdLfXD0E2BoHRvDzbjQUxCNO2rgK
sfg7pz36xZLPCF8ty3xPDEScR7m3Q4A=
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:25 2025 by rpki-client