This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
File: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft (raw, json)
Hash identifier: FnSEV8WjRv4MQ330GFqFnnWZFZiAWEpOdHmwB/ywAqg=
Subject key identifier: 01:8C:EE:04:5A:F7:82:BC:C8:CB:3F:53:86:6F:95:D4:68:FB:56:2F
Authority key identifier: A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
Certificate issuer: /CN=A91F81AD/serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Certificate serial: 0290
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
Manifest number: 0288
Signing time: Thu 04 Dec 2025 23:55:06 +0000
Manifest this update: Thu 04 Dec 2025 23:55:06 +0000
Manifest next update: Thu 11 Dec 2025 23:55:06 +0000
Files and hashes: 1: pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl (hash: u5hlwo1Be3v7f67m6wx9GM1Ffbks2PZFkmD3nYm/qTo=)
2: FA957D0A80FA11ED9B35954DC4F9AE02.roa (hash: L4odGfnpE1M8mP9qfK5ZT0cdoELj5+fPbxZ/a/GNs1U=)
3: F9F81E3480FA11ED9B35954DC4F9AE02.roa (hash: ZALG6qqy4VUNzS8JmJufwht3vQHiEFKz2LACrRimhuM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F81AD, serialNumber=A4CD3E67D1B224F325047E9F5E484ACDC4F663EC
Validity
Not Before: Dec 4 23:55:06 2025 GMT
Not After : Dec 11 23:55:06 2025 GMT
Subject: CN=69321f5a-4da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:78:48:06:56:af:5d:65:ab:c2:21:2d:78:
7b:78:a1:70:05:e0:c9:db:36:eb:4e:e4:a4:7b:79:
f5:30:5d:d5:b6:c8:d5:0b:de:d3:bc:d5:d1:34:90:
c8:f8:00:1f:83:f0:c4:b7:66:f5:cf:4a:08:fa:9d:
48:96:26:a9:50:f5:b7:86:8c:da:44:fd:3f:fd:43:
d6:04:cc:7f:59:3b:2d:22:8d:f4:f5:ad:72:d9:6c:
3a:9f:b9:27:07:ae:ee:e5:b8:7d:20:9f:6a:33:3f:
cc:54:f3:b9:26:c9:8d:cc:ea:25:33:55:32:30:e9:
a5:39:77:27:da:76:ce:fc:27:88:c6:2d:d8:e5:22:
76:d8:2d:1e:28:0b:28:0f:17:b4:3c:c2:22:cc:2d:
53:4f:87:02:c3:33:3f:f0:0f:11:47:e9:a7:a1:b5:
cd:87:88:47:e8:a0:46:6e:da:6a:4f:7f:ba:30:f4:
74:55:37:3d:19:0b:73:06:2b:8f:3a:5e:36:d2:b3:
81:d0:0a:e3:c6:70:8a:92:fb:9d:6b:6e:d1:05:2e:
3b:3d:f3:d7:c1:96:e0:75:e1:26:75:ed:79:f0:46:
6b:8c:8a:c0:71:b7:49:7e:ac:7f:62:b1:89:aa:03:
48:5d:11:95:89:24:0c:6b:fe:7b:a9:fa:49:14:d4:
76:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8C:EE:04:5A:F7:82:BC:C8:CB:3F:53:86:6F:95:D4:68:FB:56:2F
X509v3 Authority Key Identifier:
keyid:A4:CD:3E:67:D1:B2:24:F3:25:04:7E:9F:5E:48:4A:CD:C4:F6:63:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81AD/4CCB00902CBE11ED99824B4CC4F9AE02/pM0-Z9GyJPMlBH6fXkhKzcT2Y-w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:d0:fc:88:04:ca:c2:79:8b:fc:95:25:b6:15:d6:e6:cf:9e:
78:38:e0:4a:ea:36:93:6b:49:d4:87:8f:d3:50:aa:44:01:30:
f6:57:17:cd:cb:91:1a:d9:b1:4d:49:be:e9:d3:9a:1b:90:b5:
e7:a1:b9:9a:e9:78:0a:28:7f:ea:e4:09:49:8c:d4:fc:45:36:
0d:a5:bf:9b:72:ac:02:ad:e6:e4:74:32:ff:0b:b4:33:a2:e4:
39:78:34:82:06:63:8c:8f:fb:6b:b8:df:5a:e6:fa:4f:cc:83:
1a:e6:67:7e:c3:4e:f3:25:e9:b4:c8:c4:82:78:4a:3b:8d:38:
d4:b7:a7:06:d2:9a:6c:22:d0:2f:5a:65:d8:f9:4e:d5:b6:27:
85:89:59:d0:06:77:e2:c5:ed:3d:fa:4d:af:2c:96:38:87:53:
f2:d0:a4:9b:51:ac:ff:a7:51:51:bb:29:4b:a5:ac:98:45:94:
61:ad:b9:4c:8c:eb:45:34:2d:a8:66:cf:2e:ea:2d:1b:9f:5e:
c5:78:3b:98:e1:af:93:10:00:62:c0:ff:c5:07:8a:bd:aa:f5:
98:38:80:0a:fa:2a:35:5b:a4:e1:69:32:e2:24:6c:62:15:3c:
b7:6c:bc:74:9e:f7:72:79:42:83:42:2d:75:68:57:54:85:0c:
db:f9:7b:a5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICApAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgxQUQxMTAvBgNVBAUTKEE0Q0QzRTY3RDFCMjI0RjMyNTA0N0U5RjVFNDg0QUNE
QzRGNjYzRUMwHhcNMjUxMjA0MjM1NTA2WhcNMjUxMjExMjM1NTA2WjAYMRYwFAYD
VQQDEw02OTMyMWY1YS00ZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz1Z4SAZWr11lq8IhLXh7eKFwBeDJ2zbrTuSke3n1MF3VtsjVC97TvNXRNJDI
+AAfg/DEt2b1z0oI+p1IliapUPW3hozaRP0//UPWBMx/WTstIo309a1y2Ww6n7kn
B67u5bh9IJ9qMz/MVPO5JsmNzOolM1UyMOmlOXcn2nbO/CeIxi3Y5SJ22C0eKAso
Dxe0PMIizC1TT4cCwzM/8A8RR+mnobXNh4hH6KBGbtpqT3+6MPR0VTc9GQtzBiuP
Ol420rOB0ArjxnCKkvuda27RBS47PfPXwZbgdeEmde158EZrjIrAcbdJfqx/YrGJ
qgNIXRGViSQMa/57qfpJFNR2bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGM7gRa
94K8yMs/U4ZvldRo+1YvMB8GA1UdIwQYMBaAFKTNPmfRsiTzJQR+n15ISs3E9mPs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODFBRC80Q0NCMDA5MDJD
QkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQTWxCSDZmWGtoS3pjVDJZ
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BNMC1aOUd5SlBNbEJINmZYa2hLemNUMlktdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODFBRC80Q0NCMDA5MDJDQkUxMUVEOTk4MjRCNENDNEY5QUUwMi9wTTAtWjlHeUpQ
TWxCSDZmWGtoS3pjVDJZLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBS0PyIBMrCeYv8lSW2Fdbmz554OOBK6jaTa0nUh4/TUKpEATD2VxfN
y5Ea2bFNSb7p05obkLXnobma6XgKKH/q5AlJjNT8RTYNpb+bcqwCrebkdDL/C7Qz
ouQ5eDSCBmOMj/truN9a5vpPzIMa5md+w07zJem0yMSCeEo7jTjUt6cG0ppsItAv
WmXY+U7VtieFiVnQBnfixe09+k2vLJY4h1Py0KSbUaz/p1FRuylLpayYRZRhrblM
jOtFNC2oZs8u6i0bn17FeDuY4a+TEABiwP/FB4q9qvWYOIAK+io1W6ThaTLiJGxi
FTy3bLx0nvdyeUKDQi11aFdUhQzb+Xul
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:29:09 2025 by rpki-client