This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
File: mLI8urGE2rGtANEAC4IMmyGkM-w.mft (raw, json)
Hash identifier: Azs7S48TKRlAaNn2TxkpJza9RudnuOaJwpBclziy1Ik=
Subject key identifier: 40:49:81:F1:5E:25:34:94:A0:23:E2:46:30:31:20:7A:55:D2:C1:DA
Authority key identifier: 98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
Certificate issuer: /CN=A9182FBC/serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Certificate serial: 1218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
Manifest number: 11F9
Signing time: Sat 06 Dec 2025 16:41:09 +0000
Manifest this update: Sat 06 Dec 2025 16:41:08 +0000
Manifest next update: Sat 13 Dec 2025 16:41:08 +0000
Files and hashes: 1: mLI8urGE2rGtANEAC4IMmyGkM-w.crl (hash: svcuXRnMoUpTumyWIgu7O6meuM8WhFWXLmGM6zo88T8=)
2: 38F5C602B18711EC9F9FA058C4F9AE02.roa (hash: 864v72yIGP6+fcV9ihOEtR0vSNI9KCZAgVkE2lkVzYA=)
3: 37BC67B4B18711EC9F9FA058C4F9AE02.roa (hash: au9xZxCZeREaDcJouTlLj1rRcc2mSPei8Jd1icPw/ew=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4632 (0x1218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182FBC, serialNumber=98B23CBAB184DAB1AD00D1000B820C9B21A433EC
Validity
Not Before: Dec 6 16:41:08 2025 GMT
Not After : Dec 13 16:41:08 2025 GMT
Subject: CN=69345ca4-cf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:9c:09:84:80:4b:3e:97:a4:67:bf:b9:e9:
26:36:33:58:72:b1:ab:f5:fa:df:0a:8f:c6:20:d5:
0a:d9:5b:56:b3:3b:d3:c9:1d:b1:06:e7:e1:c1:4d:
e8:48:fe:9d:a7:ad:83:a1:47:98:6d:c7:3a:fc:06:
86:e0:6d:53:d9:9f:3c:a5:f3:ee:83:88:c0:c9:6f:
9d:0a:c7:85:b2:75:46:43:17:ad:4d:54:d8:30:3a:
27:2a:15:ed:ed:c4:bd:b1:c0:19:17:bd:d0:f1:39:
75:58:ed:98:45:00:ec:73:d4:a6:10:98:e3:a6:45:
6a:0c:0b:c5:c9:37:48:47:76:04:df:ea:72:59:8e:
6e:59:7d:59:cf:af:cc:be:cc:da:45:5c:bb:b3:93:
92:ef:3b:40:72:f6:9f:9e:a4:b3:c3:e8:76:7e:87:
25:49:e7:cf:ad:6b:1e:ef:87:0d:4c:05:f8:ce:7a:
13:95:dd:dd:14:6c:af:17:dd:a1:04:c7:5c:10:17:
c9:9c:45:85:d6:35:81:bf:81:00:6d:60:04:8a:6a:
f7:8a:c1:b1:8a:c9:2c:d8:ed:bd:9d:47:c5:b6:f9:
c0:c0:26:f7:00:cd:05:f2:ce:5c:f1:b7:9f:4e:4d:
39:b3:9b:5f:a3:61:e3:46:dd:3a:b4:9c:bc:73:ef:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:49:81:F1:5E:25:34:94:A0:23:E2:46:30:31:20:7A:55:D2:C1:DA
X509v3 Authority Key Identifier:
keyid:98:B2:3C:BA:B1:84:DA:B1:AD:00:D1:00:0B:82:0C:9B:21:A4:33:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mLI8urGE2rGtANEAC4IMmyGkM-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FBC/A335B258FCE411E890FC1E37C4F9AE02/mLI8urGE2rGtANEAC4IMmyGkM-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:26:b8:e0:c8:72:6a:3f:11:a1:0a:b0:c8:a5:92:b8:a8:45:
c5:e8:8f:0d:97:e3:c0:43:d5:61:22:73:0d:4a:13:4e:ff:46:
a0:58:c1:b5:ee:1c:a8:bb:4d:a4:87:2f:66:f9:c9:4a:24:78:
cd:50:5c:c0:1f:9f:4d:3a:ce:47:36:1f:97:79:31:66:c2:77:
1c:1e:c0:1b:51:62:ee:e7:3b:5b:f7:d0:55:e2:a1:d1:a6:0c:
45:ee:63:0d:b3:17:62:8a:57:e4:02:61:29:84:51:b3:4f:12:
e2:d5:11:dd:fa:96:09:3f:14:b9:9e:5d:b5:a5:3e:16:4c:44:
e6:cd:61:62:15:63:b0:b9:62:f0:98:72:aa:e4:ca:5d:75:af:
4b:aa:3b:fc:d2:d0:7e:c4:50:50:e2:6f:bb:8d:2d:a1:22:5b:
11:c3:27:bd:58:0a:89:5f:55:89:fd:54:71:11:97:05:e0:b1:
8d:5c:c3:b5:da:cf:cb:6f:a9:14:40:31:49:85:96:b6:28:f6:
a8:b0:94:4a:6a:8d:80:27:3a:cb:e8:a9:66:85:1c:6c:f7:5f:
76:49:78:18:a4:9d:f2:ab:69:88:3a:81:68:37:88:84:22:3e:
e0:a9:83:a0:e8:dc:d0:0e:ed:55:ac:b6:fb:62:c5:97:cc:ab:
83:06:0d:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJGQkMxMTAvBgNVBAUTKDk4QjIzQ0JBQjE4NERBQjFBRDAwRDEwMDBCODIwQzlC
MjFBNDMzRUMwHhcNMjUxMjA2MTY0MTA4WhcNMjUxMjEzMTY0MTA4WjAYMRYwFAYD
VQQDEw02OTM0NWNhNC1jZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwG6cCYSASz6XpGe/uekmNjNYcrGr9frfCo/GINUK2VtWszvTyR2xBufhwU3o
SP6dp62DoUeYbcc6/AaG4G1T2Z88pfPug4jAyW+dCseFsnVGQxetTVTYMDonKhXt
7cS9scAZF73Q8Tl1WO2YRQDsc9SmEJjjpkVqDAvFyTdIR3YE3+pyWY5uWX1Zz6/M
vszaRVy7s5OS7ztAcvafnqSzw+h2foclSefPrWse74cNTAX4znoTld3dFGyvF92h
BMdcEBfJnEWF1jWBv4EAbWAEimr3isGxisks2O29nUfFtvnAwCb3AM0F8s5c8bef
Tk05s5tfo2HjRt06tJy8c+8KvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBJgfFe
JTSUoCPiRjAxIHpV0sHaMB8GA1UdIwQYMBaAFJiyPLqxhNqxrQDRAAuCDJshpDPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZCQy9BMzM1QjI1OEZD
RTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJyR3RBTkVBQzRJTW15R2tN
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21MSTh1ckdFMnJHdEFORUFDNElNbXlHa00tdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MkZCQy9BMzM1QjI1OEZDRTQxMUU4OTBGQzFFMzdDNEY5QUUwMi9tTEk4dXJHRTJy
R3RBTkVBQzRJTW15R2tNLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQByJrjgyHJqPxGhCrDIpZK4qEXF6I8Nl+PAQ9VhInMNShNO/0agWMG1
7hyou02khy9m+clKJHjNUFzAH59NOs5HNh+XeTFmwnccHsAbUWLu5ztb99BV4qHR
pgxF7mMNsxdiilfkAmEphFGzTxLi1RHd+pYJPxS5nl21pT4WTETmzWFiFWOwuWLw
mHKq5Mpdda9Lqjv80tB+xFBQ4m+7jS2hIlsRwye9WAqJX1WJ/VRxEZcF4LGNXMO1
2s/Lb6kUQDFJhZa2KPaosJRKao2AJzrL6KlmhRxs9192SXgYpJ3yq2mIOoFoN4iE
Ij7gqYOg6NzQDu1VrLb7YsWXzKuDBg2q
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:25:36 2025 by rpki-client