This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json)
Hash identifier: ntjfbg5xnJ1G/GhEss5UbFaxDbnZc04c+vAvD65Ugmk=
Subject key identifier: 8C:FA:1D:C4:7D:A2:29:9F:05:DD:BE:83:3C:AA:85:3A:FC:8F:AA:2F
Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Certificate serial: 0A51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
Manifest number: 0A41
Signing time: Sat 06 Dec 2025 15:48:54 +0000
Manifest this update: Sat 06 Dec 2025 15:48:54 +0000
Manifest next update: Sat 13 Dec 2025 15:48:54 +0000
Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: jm7DuMPvAFmtD7s0G7kVBlDJ1256V1fQnXSbcRYPQwg=)
2: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: iLsqzUs1EOc2H2HJP2UkL+mYLQ5HY7IBKFpu82r2gzI=)
3: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: fSyqxt+thtJ8EftQ6rivJuvYTMv0PKjtJE/N/crpwfo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2641 (0xa51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7
Validity
Not Before: Dec 6 15:48:54 2025 GMT
Not After : Dec 13 15:48:54 2025 GMT
Subject: CN=69345066-4230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:83:50:f6:fd:f9:36:97:47:f3:43:50:9e:
97:de:3e:02:39:d0:1d:d8:aa:41:a3:6f:d3:08:0d:
91:35:94:97:18:3e:86:ef:45:c3:f6:9e:d1:7d:bc:
c2:11:3f:36:cb:8b:94:e9:a2:31:5b:b6:0a:8d:ce:
bd:04:2b:ff:a3:a3:86:ff:e8:78:8d:13:6d:c4:49:
1f:71:3d:96:0d:97:4f:46:37:f8:72:2d:40:ef:54:
ac:94:26:07:98:8c:6a:f0:73:1d:57:43:7c:d9:17:
dc:26:0a:51:6b:94:2a:87:b2:f6:9c:2e:28:cd:ac:
5a:12:c3:80:d4:27:dc:95:c8:b5:ea:94:99:fa:ff:
3f:39:cc:34:a8:9a:51:df:e5:23:e8:ed:99:07:95:
ef:17:9b:64:7a:ef:94:cf:a0:30:fd:d5:4d:0e:6f:
a2:b5:78:49:60:d4:91:9e:ab:bd:d0:c0:38:b4:83:
4d:15:8d:a3:3b:a5:ce:4c:a2:99:2f:1b:3f:f5:2f:
4a:5a:10:1d:82:e2:36:7b:26:8f:18:e4:94:35:63:
71:09:93:0d:9e:3c:76:22:7f:0b:31:85:ca:1b:2d:
59:df:24:fc:10:d9:2f:75:45:56:a9:9c:4b:16:f3:
1c:1c:4c:13:07:ef:bb:3a:41:83:36:43:34:35:7f:
74:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FA:1D:C4:7D:A2:29:9F:05:DD:BE:83:3C:AA:85:3A:FC:8F:AA:2F
X509v3 Authority Key Identifier:
keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:9d:7b:c0:2f:93:e8:f2:80:35:d1:b6:be:82:34:78:f6:65:
93:86:a6:a8:77:8a:72:e0:e8:59:dd:ed:8c:95:71:d8:b5:63:
ac:99:bb:20:79:59:d1:33:88:22:e4:c1:70:a9:51:d8:74:d7:
1d:75:23:d9:e3:f8:14:8e:15:14:3e:c8:a8:ea:2c:71:44:34:
40:df:3d:0a:2d:4e:4e:1e:b1:b1:8f:b0:88:40:86:14:e2:b1:
72:ce:76:2d:9b:67:c8:a3:2c:82:57:b3:98:94:9b:bf:6a:11:
1a:c5:a2:19:08:0c:c0:67:63:36:10:05:07:8b:d8:0b:a8:b9:
36:6f:30:b5:05:4b:6f:9a:10:71:61:da:07:6b:da:70:2f:ca:
0f:d8:3d:80:93:57:b0:6e:4d:da:23:4a:ea:6b:cd:01:2d:db:
ee:51:83:b9:ef:ca:0a:a6:5e:03:1f:a7:35:b1:26:75:e5:bf:
92:54:0f:6c:64:6a:f5:5b:68:53:45:cd:ce:0f:6a:4d:54:20:
b8:ba:9b:03:bb:e9:56:26:93:40:2f:9c:69:b2:8c:d8:dc:50:
f7:ee:90:84:de:4b:f8:d7:ce:f9:b8:65:2c:20:6d:28:53:68:
0b:37:7f:cf:fe:bd:16:42:fd:55:3b:40:a6:1d:73:13:45:81:
df:66:b9:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICClEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx
MzE3NEJGQTcwHhcNMjUxMjA2MTU0ODU0WhcNMjUxMjEzMTU0ODU0WjAYMRYwFAYD
VQQDEw02OTM0NTA2Ni00MjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwNWDUPb9+TaXR/NDUJ6X3j4COdAd2KpBo2/TCA2RNZSXGD6G70XD9p7RfbzC
ET82y4uU6aIxW7YKjc69BCv/o6OG/+h4jRNtxEkfcT2WDZdPRjf4ci1A71SslCYH
mIxq8HMdV0N82RfcJgpRa5Qqh7L2nC4ozaxaEsOA1Cfclci16pSZ+v8/Ocw0qJpR
3+Uj6O2ZB5XvF5tkeu+Uz6Aw/dVNDm+itXhJYNSRnqu90MA4tINNFY2jO6XOTKKZ
Lxs/9S9KWhAdguI2eyaPGOSUNWNxCZMNnjx2In8LMYXKGy1Z3yT8ENkvdUVWqZxL
FvMcHEwTB++7OkGDNkM0NX90fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIz6HcR9
oimfBd2+gzyqhTr8j6ovMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF
RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2
NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN
ejR2Tmo0bU1CbW9URjB2NmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnnXvAL5Po8oA10ba+gjR49mWThqaod4py4OhZ3e2MlXHYtWOsmbsg
eVnRM4gi5MFwqVHYdNcddSPZ4/gUjhUUPsio6ixxRDRA3z0KLU5OHrGxj7CIQIYU
4rFyznYtm2fIoyyCV7OYlJu/ahEaxaIZCAzAZ2M2EAUHi9gLqLk2bzC1BUtvmhBx
YdoHa9pwL8oP2D2Ak1ewbk3aI0rqa80BLdvuUYO578oKpl4DH6c1sSZ15b+SVA9s
ZGr1W2hTRc3OD2pNVCC4upsDu+lWJpNAL5xpsozY3FD37pCE3kv41875uGUsIG0o
U2gLN3/P/r0WQv1VO0CmHXMTRYHfZrm2
-----END CERTIFICATE-----
Generated at Sun Dec 7 15:07:17 2025 by rpki-client