This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
File: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json)
Hash identifier: xFl01TLmorH9F6fe2TB6C5ccC3ByJpmKoQLZSEsOTyI=
Subject key identifier: 93:65:CA:F4:6A:68:48:DA:F1:70:01:2E:66:FD:44:BA:14:3C:A4:30
Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB
Certificate issuer: /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
Certificate serial: 0BBB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
Manifest number: 0BB1
Signing time: Thu 18 Dec 2025 18:38:09 +0000
Manifest this update: Thu 18 Dec 2025 18:38:09 +0000
Manifest next update: Thu 25 Dec 2025 18:38:09 +0000
Files and hashes: 1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: wL5uNqdK4Z9kZCmHbGKzZhGgzIdNveQHLzhAz8VrHlM=)
2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: sug/yLBQ+OjqkHil53A1fXubXeb6H+1TbTT+YvNP/YQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl
rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3003 (0xbbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB
Validity
Not Before: Dec 18 18:38:09 2025 GMT
Not After : Dec 25 18:38:09 2025 GMT
Subject: CN=69444a11-e483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:f8:9e:78:98:b2:09:8b:f4:b4:a5:de:8f:
6c:66:1f:29:14:22:01:45:29:31:c8:ed:76:65:d6:
e0:aa:d1:1d:12:61:35:d5:33:50:c0:85:bd:0c:a8:
ef:58:da:96:70:32:cf:27:49:59:31:3b:19:1e:57:
d7:12:f6:1a:ef:98:4c:5e:e4:c7:c0:07:f7:67:27:
d9:d0:87:4b:83:80:74:49:14:7b:ff:68:1c:db:45:
fb:ff:98:33:5e:ba:2c:8e:ed:40:d2:74:2e:db:52:
32:05:25:df:c7:f6:aa:04:58:7a:e6:cb:2b:9e:8c:
36:f9:31:2e:a6:34:7b:9e:3d:09:df:19:24:7b:80:
8e:20:62:9d:87:89:42:7a:96:9f:cf:cb:e7:38:cb:
88:89:09:01:35:f4:ad:8c:ee:cd:a6:a3:52:a0:00:
4f:0e:36:86:03:c5:ac:45:e5:93:d9:1d:79:4e:6b:
1f:80:f8:1e:8e:de:cc:ae:b9:1b:11:c6:b8:64:7e:
74:22:c4:0d:93:94:59:3f:22:a7:65:b0:0d:93:3f:
c9:3b:89:c1:1c:e2:63:1f:b0:63:4b:b3:9a:44:9a:
f1:53:4c:18:13:cf:d3:bf:d8:94:a4:70:84:d9:a7:
45:1e:e6:60:53:19:88:4a:39:a6:7e:1b:a9:2d:53:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:65:CA:F4:6A:68:48:DA:F1:70:01:2E:66:FD:44:BA:14:3C:A4:30
X509v3 Authority Key Identifier:
keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:15:83:5d:f6:99:fc:6a:5e:f1:43:65:1c:99:83:27:0b:f0:
5e:65:1f:16:85:26:2e:8a:50:dd:80:90:5c:80:92:e2:e4:41:
4c:4b:e8:51:98:20:cb:4f:58:97:d3:b3:99:2c:9a:73:c8:92:
bd:98:05:93:55:9d:91:33:41:e5:46:e1:c6:c9:fb:3d:23:0d:
7b:11:60:cd:2c:28:c0:db:2b:91:9b:b5:c4:dd:0c:91:62:c3:
57:1c:5c:9e:2a:9b:d9:bc:75:46:33:ee:15:13:3c:6a:fc:6a:
b9:9c:d0:5c:47:ac:ab:a8:e2:36:5e:a7:10:f9:88:41:ed:22:
5b:2c:8f:07:82:89:e9:55:0e:47:ab:34:27:7a:fd:41:ae:76:
e9:fe:ea:c1:40:61:f2:d8:b3:c4:55:07:3b:fe:7d:64:1a:53:
92:66:ab:bf:69:3e:f1:f8:db:dc:b6:43:74:87:db:66:fe:77:
9e:8c:10:f7:ee:8c:0c:5c:d0:ce:37:3a:3b:0f:bf:f0:69:78:
b2:b2:79:68:e7:33:ca:bd:79:06:8d:46:cd:53:26:5e:d9:fa:
9f:8e:8a:66:51:71:04:77:c1:66:4c:bb:d4:11:4d:e9:4d:e8:
45:5a:18:84:19:1f:01:40:06:b7:30:aa:1c:3f:36:b3:7a:d5:
56:c0:32:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzM1QzkxMTAvBgNVBAUTKDAwNjMyM0E4REQwMURFQTk1QkQxQUU0NEM5RkZDNDUz
NDA0NDI1Q0IwHhcNMjUxMjE4MTgzODA5WhcNMjUxMjI1MTgzODA5WjAYMRYwFAYD
VQQDDA02OTQ0NGExMS1lNDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyev4nniYsgmL9LSl3o9sZh8pFCIBRSkxyO12ZdbgqtEdEmE11TNQwIW9DKjv
WNqWcDLPJ0lZMTsZHlfXEvYa75hMXuTHwAf3ZyfZ0IdLg4B0SRR7/2gc20X7/5gz
Xrosju1A0nQu21IyBSXfx/aqBFh65ssrnow2+TEupjR7nj0J3xkke4COIGKdh4lC
epafz8vnOMuIiQkBNfStjO7NpqNSoABPDjaGA8WsReWT2R15TmsfgPgejt7Mrrkb
Eca4ZH50IsQNk5RZPyKnZbANkz/JO4nBHOJjH7BjS7OaRJrxU0wYE8/Tv9iUpHCE
2adFHuZgUxmISjmmfhupLVNXwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNlyvRq
aEja8XABLmb9RLoUPKQwMB8GA1UdIwQYMBaAFABjI6jdAd6pW9GuRMn/xFNARCXL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzVDOS9FQTk2RTZENDM1
QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNxbGIwYTVFeWZfRVUwQkVK
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FHTWpxTjBCM3FsYjBhNUV5Zl9FVTBCRUpjcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MzVDOS9FQTk2RTZENDM1QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNx
bGIwYTVFeWZfRVUwQkVKY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTFYNd9pn8al7xQ2UcmYMnC/BeZR8WhSYuilDdgJBcgJLi5EFMS+hR
mCDLT1iX07OZLJpzyJK9mAWTVZ2RM0HlRuHGyfs9Iw17EWDNLCjA2yuRm7XE3QyR
YsNXHFyeKpvZvHVGM+4VEzxq/Gq5nNBcR6yrqOI2XqcQ+YhB7SJbLI8HgonpVQ5H
qzQnev1Brnbp/urBQGHy2LPEVQc7/n1kGlOSZqu/aT7x+NvctkN0h9tm/neejBD3
7owMXNDONzo7D7/waXiysnlo5zPKvXkGjUbNUyZe2fqfjopmUXEEd8FmTLvUEU3p
TehFWhiEGR8BQAa3MKocPzazetVWwDLK
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:53:33 2025 by rpki-client