This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json)
Hash identifier: yRb7YHbyq9/MSoA4tbrmNoc4EDUzT8aJaVRllhDWO6U=
Subject key identifier: C7:8A:E4:77:16:EB:DC:1A:43:FA:B6:A2:33:AF:18:8E:87:E9:9B:52
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial: 0243
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
Manifest number: 023C
Signing time: Sun 07 Dec 2025 00:22:40 +0000
Manifest this update: Sun 07 Dec 2025 00:22:39 +0000
Manifest next update: Sun 14 Dec 2025 00:22:39 +0000
Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: u+FFEz+xEqPYZuedJKi0E6P9FYJc5CJgP5L05gYhZiE=)
2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: 8+VuZ7fIxTmaLVYpnHMJUk/ecoQHiqToC0QiVIOWMis=)
3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: UKZjo7nlv5xaEfM2Q5iGETEP+0bko/kMccsOgiKgCVA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Validity
Not Before: Dec 7 00:22:39 2025 GMT
Not After : Dec 14 00:22:39 2025 GMT
Subject: CN=6934c8cf-b622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:68:42:fb:c2:23:7b:b9:ef:5f:53:f5:3c:
52:96:d6:30:7c:80:2b:83:5c:f1:82:32:b6:25:59:
67:82:95:1b:79:1b:f4:59:b1:16:2f:89:dd:d7:e5:
95:70:46:86:fb:e2:45:ad:f9:90:8c:67:10:5a:30:
33:f9:ae:4f:61:fd:77:b0:82:14:bd:c2:36:ab:0b:
5f:67:bf:d8:d4:ea:c0:16:fd:81:ac:66:f9:27:ee:
d1:e8:71:55:3f:90:e2:69:7d:54:66:78:88:4f:21:
8a:d6:93:c4:49:22:13:cd:0b:71:2c:cd:03:90:76:
8c:6c:c4:5a:5a:7f:ef:67:a7:11:3b:ec:18:57:c4:
c4:77:f4:18:e7:a9:96:8a:e4:d1:7e:f7:73:2a:0e:
c5:41:22:d0:0f:3e:19:b1:cc:6f:44:bc:9a:ea:5e:
74:cf:ed:88:a8:39:2b:01:89:57:27:7b:f8:80:0a:
26:55:5d:0a:c7:c2:cd:fc:5c:5b:8c:a9:65:e0:2d:
7c:0c:65:a1:42:35:00:f0:19:c8:ab:7c:ee:ba:8e:
48:a6:c1:ed:cc:c4:33:84:55:3f:a3:2d:7b:ee:24:
04:27:0f:ea:ba:1a:70:70:e4:59:b2:40:5b:92:2d:
15:dd:65:2b:ad:9f:56:f2:38:60:7d:6b:50:cf:30:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8A:E4:77:16:EB:DC:1A:43:FA:B6:A2:33:AF:18:8E:87:E9:9B:52
X509v3 Authority Key Identifier:
keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:56:7a:47:e0:eb:c8:4c:34:78:08:bf:34:b7:53:cd:b3:2e:
1e:3e:28:77:d9:23:ed:58:e5:11:60:46:82:83:58:6a:7c:3f:
d9:95:1d:1e:07:4e:81:b1:56:7d:72:56:fc:08:1e:2b:dd:b5:
6c:10:b2:50:18:23:95:a5:c0:17:40:37:3c:19:50:90:50:da:
5d:9b:4f:b6:e9:2d:e0:4f:65:c6:79:a3:8f:cb:49:32:24:ef:
fa:b7:41:ed:76:78:e9:66:46:fa:cb:89:e1:06:10:fa:72:5f:
7d:27:cd:5b:60:91:de:53:0b:f5:a4:0a:c0:fc:6b:27:7f:d4:
99:32:a3:b2:98:9c:e9:9b:03:5e:bb:b5:0f:bd:ce:64:f3:a7:
d5:90:c0:7b:36:b1:7e:59:8e:e3:c7:00:2a:85:76:9b:4e:69:
3e:4f:8e:20:44:b0:4c:91:f6:b0:0b:c0:8e:97:8a:28:51:67:
bb:dc:d0:d1:a6:18:00:4c:d2:e5:ab:f5:39:3e:45:37:db:b2:
01:dd:3c:c7:0c:a1:74:cd:e1:6e:84:fc:8d:3e:4f:df:b2:31:
a8:dc:be:2c:7f:4b:96:67:c4:de:4e:0c:1a:82:81:fb:5c:92:
e3:16:ce:c3:a2:83:33:a6:74:65:47:68:a8:9e:bc:08:3a:48:
08:3d:2c:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQwNzMxMTAvBgNVBAUTKDA4QUVEM0UxRENCNkVENzc0MjMwM0NFRkY0N0RFMDJE
OTJCM0VERTUwHhcNMjUxMjA3MDAyMjM5WhcNMjUxMjE0MDAyMjM5WjAYMRYwFAYD
VQQDEw02OTM0YzhjZi1iNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6VhoQvvCI3u5719T9TxSltYwfIArg1zxgjK2JVlngpUbeRv0WbEWL4nd1+WV
cEaG++JFrfmQjGcQWjAz+a5PYf13sIIUvcI2qwtfZ7/Y1OrAFv2BrGb5J+7R6HFV
P5DiaX1UZniITyGK1pPESSITzQtxLM0DkHaMbMRaWn/vZ6cRO+wYV8TEd/QY56mW
iuTRfvdzKg7FQSLQDz4ZscxvRLya6l50z+2IqDkrAYlXJ3v4gAomVV0Kx8LN/Fxb
jKll4C18DGWhQjUA8BnIq3zuuo5IpsHtzMQzhFU/oy177iQEJw/quhpwcORZskBb
ki0V3WUrrZ9W8jhgfWtQzzDv8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeK5HcW
69waQ/q2ojOvGI6H6ZtSMB8GA1UdIwQYMBaAFAiu0+Hctu13QjA87/R94C2Ss+3l
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDA3My9GNEI0Q0E1MjY0
QTQxMUVEQTA4NzZCMTZDNEY5QUUwMi9DSzdUNGR5MjdYZENNRHp2OUgzZ0xaS3o3
ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NLN1Q0ZHkyN1hkQ01EenY5SDNnTFpLejdlVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDA3My9GNEI0Q0E1MjY0QTQxMUVEQTA4NzZCMTZDNEY5QUUwMi9DSzdUNGR5MjdY
ZENNRHp2OUgzZ0xaS3o3ZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCiVnpH4OvITDR4CL80t1PNsy4ePih32SPtWOURYEaCg1hqfD/ZlR0e
B06BsVZ9clb8CB4r3bVsELJQGCOVpcAXQDc8GVCQUNpdm0+26S3gT2XGeaOPy0ky
JO/6t0HtdnjpZkb6y4nhBhD6cl99J81bYJHeUwv1pArA/Gsnf9SZMqOymJzpmwNe
u7UPvc5k86fVkMB7NrF+WY7jxwAqhXabTmk+T44gRLBMkfawC8COl4ooUWe73NDR
phgATNLlq/U5PkU327IB3TzHDKF0zeFuhPyNPk/fsjGo3L4sf0uWZ8TeTgwagoH7
XJLjFs7DooMzpnRlR2ionrwIOkgIPSyR
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:08:14 2025 by rpki-client