This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json)
Hash identifier: mDcgkhLv15fQNMulJ7w0GKt4nPhgiTYcGyjXnu6AvT8=
Subject key identifier: 0E:72:5A:D1:3E:C8:52:45:EF:D7:FF:D9:14:E7:65:3D:34:1D:0C:E2
Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
Manifest number: 0151
Signing time: Fri 05 Dec 2025 02:32:52 +0000
Manifest this update: Fri 05 Dec 2025 02:32:51 +0000
Manifest next update: Fri 12 Dec 2025 02:32:51 +0000
Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: KvBqa70chpQK1sha1LvGhoKEvAGDsflBLxYdhbKr8Kk=)
2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 1JT4JL5zieWvYxgXcbCI6LK5Unc1DnkiTfLB/8ABEcM=)
3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Zgo+bSd3ddxUsWa4WgDo/fUl+UPnYadDGveXRl2dsm4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B
Validity
Not Before: Dec 5 02:32:51 2025 GMT
Not After : Dec 12 02:32:51 2025 GMT
Subject: CN=69324453-314f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:23:d6:90:d3:5c:1c:fa:2e:50:fa:50:36:
8f:e7:69:6e:70:a5:49:5c:c8:65:10:26:73:92:51:
1d:cb:4d:0f:c3:6e:9a:52:df:8a:a1:82:a8:5f:9f:
cb:59:23:3d:03:2d:ef:01:b8:5f:44:ad:96:2e:0b:
39:be:07:42:94:a3:6e:c9:c1:d5:4e:a7:72:43:5d:
8d:9e:c3:57:09:25:aa:24:11:5c:3d:5a:4b:d5:18:
84:32:35:cb:e4:a6:5c:5f:ba:a6:e7:50:da:a9:10:
9f:f1:3a:fc:9f:4e:39:b9:66:ac:54:e9:a2:21:95:
dc:37:ef:31:47:97:76:f4:61:51:df:8d:d3:51:55:
08:04:21:ec:37:10:4c:f6:60:95:5e:4b:44:2b:d3:
37:20:37:f2:a8:1c:de:2d:f2:c5:af:ad:f7:da:6f:
af:42:71:b0:fd:dc:f1:64:25:84:76:ea:4e:c4:d0:
c0:3a:c5:73:5a:75:6a:74:16:38:00:5f:85:99:9b:
83:72:ca:ce:0c:52:47:b9:ee:6c:ec:0e:df:4b:58:
83:78:26:69:9d:a4:f8:57:1f:b7:07:e8:ad:93:cf:
6e:53:df:3e:a4:63:0b:24:d8:f7:16:a4:88:a1:00:
d3:28:96:c9:28:49:7a:db:f6:98:33:33:9a:f1:9c:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:72:5A:D1:3E:C8:52:45:EF:D7:FF:D9:14:E7:65:3D:34:1D:0C:E2
X509v3 Authority Key Identifier:
keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:34:42:fa:be:56:cc:55:75:67:bd:c0:f0:36:be:70:62:76:
1b:3f:d6:0d:89:97:96:7e:e4:02:31:0c:37:82:2e:97:4b:35:
6c:bb:92:3d:17:3f:26:20:5c:82:60:8d:36:8a:b8:12:96:8b:
54:22:9c:02:70:2e:83:f3:ff:cf:02:25:65:da:42:2f:51:68:
7a:4d:1f:b1:1b:e5:54:ed:7c:fd:47:3d:1a:63:77:cc:af:cb:
29:08:3e:4c:02:8f:fd:c3:aa:1a:ae:a1:46:78:be:c3:f3:aa:
40:9f:eb:b1:1f:75:ee:63:5f:b9:56:1b:a4:35:b3:34:33:f6:
5b:02:5d:f1:d1:d9:3f:55:c1:5a:2e:af:40:6f:2b:48:f7:78:
a0:6b:bb:ea:04:a7:cb:65:a8:ab:9b:a2:5d:41:e3:9a:95:46:
68:cd:e0:fd:e6:8f:d8:0e:81:fd:f9:80:35:e1:97:8a:f0:40:
46:9a:75:9b:69:a4:2a:3d:d2:61:d9:e6:61:4f:c1:fa:35:f6:
75:94:05:ca:28:09:e2:a2:74:be:ec:eb:ab:60:2c:bc:65:5d:
49:ce:1f:02:cf:4d:13:8c:6f:7b:2e:a1:76:ac:5d:52:bb:4b:
60:b1:0c:9b:a0:5f:fb:6c:b1:ce:e0:e1:5d:46:89:65:0a:be:
8e:68:9b:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF
NUQwNkE0NEIwHhcNMjUxMjA1MDIzMjUxWhcNMjUxMjEyMDIzMjUxWjAYMRYwFAYD
VQQDEw02OTMyNDQ1My0zMTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt3Qj1pDTXBz6LlD6UDaP52lucKVJXMhlECZzklEdy00Pw26aUt+KoYKoX5/L
WSM9Ay3vAbhfRK2WLgs5vgdClKNuycHVTqdyQ12NnsNXCSWqJBFcPVpL1RiEMjXL
5KZcX7qm51DaqRCf8Tr8n045uWasVOmiIZXcN+8xR5d29GFR343TUVUIBCHsNxBM
9mCVXktEK9M3IDfyqBzeLfLFr6332m+vQnGw/dzxZCWEdupOxNDAOsVzWnVqdBY4
AF+FmZuDcsrODFJHue5s7A7fS1iDeCZpnaT4Vx+3B+itk89uU98+pGMLJNj3FqSI
oQDTKJbJKEl62/aYMzOa8ZxnmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5yWtE+
yFJF79f/2RTnZT00HQziMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC
NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw
RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV
QWpqQTlyM3BFVmJsMEdwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjNEL6vlbMVXVnvcDwNr5wYnYbP9YNiZeWfuQCMQw3gi6XSzVsu5I9
Fz8mIFyCYI02irgSlotUIpwCcC6D8//PAiVl2kIvUWh6TR+xG+VU7Xz9Rz0aY3fM
r8spCD5MAo/9w6oarqFGeL7D86pAn+uxH3XuY1+5VhukNbM0M/ZbAl3x0dk/VcFa
Lq9AbytI93iga7vqBKfLZairm6JdQeOalUZozeD95o/YDoH9+YA14ZeK8EBGmnWb
aaQqPdJh2eZhT8H6NfZ1lAXKKAnionS+7OurYCy8ZV1Jzh8Cz00TjG97LqF2rF1S
u0tgsQyboF/7bLHO4OFdRollCr6OaJtJ
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:03:46 2025 by rpki-client