This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft
File: RuPL70om399mDjVsdEBr4caZKlE.mft (raw, json)
Hash identifier: 4L4CEM/hJ12jwgs0qkDxeshW9UO6GED2T6jAoE4ZQ58=
Subject key identifier: 47:2E:A2:86:14:97:19:92:35:CF:B9:94:3D:CA:2F:28:40:C3:0D:C6
Authority key identifier: 46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51
Certificate issuer: /CN=A9113C02/serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51
Certificate serial: 1ACE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft
Manifest number: 2698
Signing time: Mon 22 Dec 2025 16:05:14 +0000
Manifest this update: Mon 22 Dec 2025 16:05:13 +0000
Manifest next update: Mon 29 Dec 2025 16:05:13 +0000
Files and hashes: 1: RuPL70om399mDjVsdEBr4caZKlE.crl (hash: 6ZVeNwdfurFvstImndbnOqXFiXvCFw7LNdq2Ji5yJ0Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl
rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6862 (0x1ace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02, serialNumber=46E3CBEF4A26DFDF660E356C74406BE1C6992A51
Validity
Not Before: Dec 22 16:05:13 2025 GMT
Not After : Dec 29 16:05:13 2025 GMT
Subject: CN=69496c3a-9c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:70:cb:c5:cb:0e:bf:b6:d6:1f:06:09:f7:
f2:de:80:bb:3e:29:57:67:49:c2:b1:0a:f0:07:f0:
55:a7:88:f3:85:37:ef:36:7f:7c:5b:53:6d:4d:02:
a6:4a:8e:ab:7b:39:48:56:f9:ef:87:74:e1:16:2f:
dc:1a:47:6d:07:d9:bf:84:13:1e:9a:9a:f7:65:ca:
42:47:31:f8:c8:2f:72:57:c4:93:8f:32:cc:78:1e:
39:06:39:b1:6b:18:e8:9f:c6:b9:3c:f4:39:f4:68:
03:ca:68:4e:da:09:90:55:90:aa:e4:0e:a4:15:cc:
d5:df:c0:7e:ec:41:2d:5f:14:bd:0f:48:37:d5:3c:
65:ee:d6:86:fc:f3:da:00:42:ba:7a:21:cb:c3:9c:
1b:65:20:e3:02:c4:a5:06:77:fa:0c:af:2e:a9:c0:
6e:d9:c8:ef:0d:8c:3c:d9:97:86:9b:05:a9:c9:ef:
65:87:62:38:f7:d7:44:54:4e:3e:02:a5:61:27:9c:
79:39:7a:68:ac:63:22:9f:28:86:3b:63:c1:88:fe:
1b:77:7b:93:6e:3a:ca:16:cb:32:59:4c:a2:68:b7:
5a:98:06:06:45:3a:90:0d:64:50:ff:f8:bd:68:62:
4e:ed:a3:5f:d0:b6:51:e7:bf:2a:a8:57:65:10:35:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:A2:86:14:97:19:92:35:CF:B9:94:3D:CA:2F:28:40:C3:0D:C6
X509v3 Authority Key Identifier:
keyid:46:E3:CB:EF:4A:26:DF:DF:66:0E:35:6C:74:40:6B:E1:C6:99:2A:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RuPL70om399mDjVsdEBr4caZKlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/RuPL70om399mDjVsdEBr4caZKlE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:1f:d3:39:80:3e:e3:44:b6:e5:90:59:10:eb:25:42:60:89:
7e:2a:8a:95:b9:92:3b:8b:5b:6a:cd:32:b3:84:4c:8d:f1:34:
c4:ae:71:59:c7:a7:2a:9d:d4:a2:d4:1f:a4:b3:46:8a:61:c4:
62:58:e3:e4:01:f6:73:7c:13:c6:e7:46:42:da:2c:81:f5:7c:
76:34:4d:a4:d5:62:46:9b:68:57:fb:61:84:b0:38:4c:45:1a:
67:08:4d:44:3c:4b:d8:44:a2:da:54:3b:38:54:01:5c:93:b5:
ed:8c:a8:f4:92:2e:17:93:51:5d:c8:ef:1c:36:c0:e9:47:ad:
ef:42:e9:e5:43:8f:f7:46:d7:a5:93:07:eb:45:a8:db:9e:6c:
3e:d8:75:b8:6d:90:d1:f0:c2:27:31:90:fe:79:6e:ab:8d:e4:
11:f8:74:ac:91:47:5f:5b:d8:97:10:26:5e:48:34:e1:5e:da:
a1:07:66:7d:54:d4:34:9c:4f:e9:5c:e3:9e:35:71:9f:44:ff:
9f:26:08:b8:7c:4f:d0:c7:d5:1f:85:ce:28:00:b7:e0:89:d8:
4e:f7:6c:89:9f:36:6c:47:f7:b8:06:f0:a9:83:b3:f9:df:8d:
6e:1c:64:83:32:a5:19:cf:f1:6a:13:c5:df:2c:8e:be:f1:18:
df:49:c0:e9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNDMDIxMTAvBgNVBAUTKDQ2RTNDQkVGNEEyNkRGREY2NjBFMzU2Qzc0NDA2QkUx
QzY5OTJBNTEwHhcNMjUxMjIyMTYwNTEzWhcNMjUxMjI5MTYwNTEzWjAYMRYwFAYD
VQQDDA02OTQ5NmMzYS05Yzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7hwy8XLDr+21h8GCffy3oC7PilXZ0nCsQrwB/BVp4jzhTfvNn98W1NtTQKm
So6rezlIVvnvh3ThFi/cGkdtB9m/hBMempr3ZcpCRzH4yC9yV8STjzLMeB45Bjmx
axjon8a5PPQ59GgDymhO2gmQVZCq5A6kFczV38B+7EEtXxS9D0g31Txl7taG/PPa
AEK6eiHLw5wbZSDjAsSlBnf6DK8uqcBu2cjvDYw82ZeGmwWpye9lh2I499dEVE4+
AqVhJ5x5OXporGMinyiGO2PBiP4bd3uTbjrKFssyWUyiaLdamAYGRTqQDWRQ//i9
aGJO7aNf0LZR578qqFdlEDW0AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcuooYU
lxmSNc+5lD3KLyhAww3GMB8GA1UdIwQYMBaAFEbjy+9KJt/fZg41bHRAa+HGmSpR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0MwMi80QzQwNkZCNjQw
NTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5OW1EalZzZEVCcjRjYVpL
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J1UEw3MG9tMzk5bURqVnNkRUJyNGNhWktsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0MwMi80QzQwNkZCNjQwNTYxMUU3QUYwNDFBMzVDNEY5QUUwMi9SdVBMNzBvbTM5
OW1EalZzZEVCcjRjYVpLbEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDDH9M5gD7jRLblkFkQ6yVCYIl+KoqVuZI7i1tqzTKzhEyN8TTErnFZ
x6cqndSi1B+ks0aKYcRiWOPkAfZzfBPG50ZC2iyB9Xx2NE2k1WJGm2hX+2GEsDhM
RRpnCE1EPEvYRKLaVDs4VAFck7XtjKj0ki4Xk1FdyO8cNsDpR63vQunlQ4/3Rtel
kwfrRajbnmw+2HW4bZDR8MInMZD+eW6rjeQR+HSskUdfW9iXECZeSDThXtqhB2Z9
VNQ0nE/pXOOeNXGfRP+fJgi4fE/Qx9Ufhc4oALfgidhO92yJnzZsR/e4BvCpg7P5
341uHGSDMqUZz/FqE8XfLI6+8RjfScDp
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:09:55 2025 by rpki-client