This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier: Ue21x9v8in0KwCB0gGimA+A7QmBF6qiUY/E7DbABvKo=
Subject key identifier: 52:5E:1A:90:25:E9:A1:A1:41:A5:56:1A:EB:72:2D:AE:C0:55:5F:7A
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial: 081D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number: 0811
Signing time: Sat 06 Dec 2025 20:01:40 +0000
Manifest this update: Sat 06 Dec 2025 20:01:39 +0000
Manifest next update: Sat 13 Dec 2025 20:01:39 +0000
Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: XDLz2SvQoORbGJCTHtlOBL9pk2cvYCo/9ecjBNGcDkk=)
2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: gc5rodY7fMSUXMwplo20/FwcMcQwtcPfnanjg3iRFls=)
3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2077 (0x81d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Validity
Not Before: Dec 6 20:01:39 2025 GMT
Not After : Dec 13 20:01:39 2025 GMT
Subject: CN=69348ba4-ca83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:db:d8:a8:82:9c:fa:e6:43:48:79:79:46:c1:
25:19:80:d0:5b:80:ce:cd:e6:81:4b:ab:8b:7e:14:
29:4f:4d:66:a5:fd:26:f2:4f:c8:02:05:91:4d:6e:
ad:0f:bf:94:67:39:27:1c:39:b5:04:e9:9c:10:2e:
e7:2c:11:fd:64:9a:2f:66:50:43:67:ef:7f:6f:45:
0d:d2:b3:fb:0c:4d:61:d8:9f:ac:90:1e:0a:3a:f3:
ca:6b:a4:d7:0a:92:45:f9:61:7e:61:0d:62:7c:2c:
83:fc:28:61:94:fa:cb:aa:4a:2f:e5:32:6d:73:ef:
d3:84:31:af:0a:ce:1e:3d:85:fe:f6:33:d6:01:7b:
3b:2c:40:0d:6b:0c:34:b0:a1:6e:96:d7:47:2d:60:
e8:4f:9b:95:50:fc:2c:90:d2:53:89:fe:af:e5:0d:
31:63:a7:03:1b:67:84:fa:81:a8:6d:d5:eb:4d:b4:
91:bb:9e:ed:09:58:96:6f:7b:82:c8:d9:0e:a5:4c:
ce:cb:26:98:f2:24:98:03:5a:77:96:cf:55:b7:e8:
03:7d:e4:96:7c:24:1f:b8:0d:23:85:f0:48:bf:b1:
41:05:70:43:16:9a:fd:fd:ed:02:a3:72:88:12:45:
c1:c7:fd:03:58:56:40:9f:39:42:3e:01:ee:cd:66:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5E:1A:90:25:E9:A1:A1:41:A5:56:1A:EB:72:2D:AE:C0:55:5F:7A
X509v3 Authority Key Identifier:
keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:80:c9:b0:d0:5d:63:59:94:82:e0:b4:08:eb:22:33:c4:f6:
35:1b:75:24:f2:f1:db:d7:19:c9:8d:f3:32:8f:ae:4d:c4:67:
46:4c:bd:30:ff:d4:71:f6:f8:37:65:85:63:67:72:83:34:cd:
b0:5d:e3:e4:3c:a4:77:f1:db:23:95:11:a2:56:1b:d2:cd:95:
49:26:a9:dc:7e:4a:14:b5:28:dd:23:e5:6f:3c:b1:89:a4:86:
2c:c0:2b:8f:d1:23:67:33:5b:81:dc:78:71:a8:69:f6:b4:5e:
af:30:03:4b:df:81:cf:6c:03:bf:30:85:e0:af:a2:d1:e9:fc:
5c:75:c4:55:d9:7f:e9:b9:10:48:06:c3:2b:ab:f6:9b:1c:d8:
57:f2:51:d0:f0:ed:b9:b9:34:ba:2e:c0:83:e2:6a:cd:e8:5b:
f6:12:08:47:e0:23:c0:0e:3f:f3:eb:05:86:57:20:b5:d5:4a:
75:25:2a:38:af:ff:0a:5b:e7:be:d2:f7:5f:8f:92:ea:63:21:
51:e1:4f:12:1f:5b:ad:95:7a:a8:b2:69:cd:a7:4c:5f:bc:7e:
32:ec:8f:47:ea:92:b0:0b:25:bc:c4:76:3d:cd:1e:ba:20:82:
8c:5b:34:3b:b8:3f:5d:4b:6f:56:42:12:b7:b0:fd:09:0f:aa:
39:25:70:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG
MUIzOUJGRDgwHhcNMjUxMjA2MjAwMTM5WhcNMjUxMjEzMjAwMTM5WjAYMRYwFAYD
VQQDEw02OTM0OGJhNC1jYTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4dvYqIKc+uZDSHl5RsElGYDQW4DOzeaBS6uLfhQpT01mpf0m8k/IAgWRTW6t
D7+UZzknHDm1BOmcEC7nLBH9ZJovZlBDZ+9/b0UN0rP7DE1h2J+skB4KOvPKa6TX
CpJF+WF+YQ1ifCyD/ChhlPrLqkov5TJtc+/ThDGvCs4ePYX+9jPWAXs7LEANaww0
sKFultdHLWDoT5uVUPwskNJTif6v5Q0xY6cDG2eE+oGobdXrTbSRu57tCViWb3uC
yNkOpUzOyyaY8iSYA1p3ls9Vt+gDfeSWfCQfuA0jhfBIv7FBBXBDFpr9/e0Co3KI
EkXBx/0DWFZAnzlCPgHuzWYBBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJeGpAl
6aGhQaVWGutyLa7AVV96MB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF
QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu
SGxVaFZYdXdPZ0R4czV2OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCAgMmw0F1jWZSC4LQI6yIzxPY1G3Uk8vHb1xnJjfMyj65NxGdGTL0w
/9Rx9vg3ZYVjZ3KDNM2wXePkPKR38dsjlRGiVhvSzZVJJqncfkoUtSjdI+VvPLGJ
pIYswCuP0SNnM1uB3HhxqGn2tF6vMANL34HPbAO/MIXgr6LR6fxcdcRV2X/puRBI
BsMrq/abHNhX8lHQ8O25uTS6LsCD4mrN6Fv2EghH4CPADj/z6wWGVyC11Up1JSo4
r/8KW+e+0vdfj5LqYyFR4U8SH1utlXqosmnNp0xfvH4y7I9H6pKwCyW8xHY9zR66
IIKMWzQ7uD9dS29WQhK3sP0JD6o5JXAZ
-----END CERTIFICATE-----
Generated at Sun Dec 7 15:30:23 2025 by rpki-client