This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
File: dx0jxd8ac3HdkvAhBv7lnFunwEE.mft (raw, json)
Hash identifier: JF2vFwkli0pIpBfmw/5rjQEQ69Tfy8AEwDkx48WjMV8=
Subject key identifier: A9:07:65:0C:05:52:5D:CF:AB:78:5D:8D:C6:60:40:4B:24:A4:95:EB
Authority key identifier: 77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
Certificate issuer: /CN=A911898E/serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Certificate serial: 01C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
Manifest number: 01BE
Signing time: Tue 23 Dec 2025 02:01:41 +0000
Manifest this update: Tue 23 Dec 2025 02:01:41 +0000
Manifest next update: Tue 30 Dec 2025 02:01:41 +0000
Files and hashes: 1: dx0jxd8ac3HdkvAhBv7lnFunwEE.crl (hash: tVg+k4zyEhYk5SFmbnyFt/9DYkAj1O9ts7mEAs8Ugwk=)
2: 671E96C631D811EE8F448240C4F9AE02.roa (hash: 6LgZz9VjDAr6MMe5pXsyjBo64OXT91fOAbUroJrtOs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449 (0x1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911898E, serialNumber=771D23C5DF1A7371DD92F02106FEE59C5BA7C041
Validity
Not Before: Dec 23 02:01:41 2025 GMT
Not After : Dec 30 02:01:41 2025 GMT
Subject: CN=6949f805-931a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:bc:53:15:5d:b3:b2:40:13:1e:c3:5e:a8:
15:f4:3e:49:12:cb:9a:5f:28:54:38:87:d7:58:c1:
58:ee:22:8f:c5:84:82:3f:e2:3a:2e:1d:c7:de:12:
34:3f:2c:4b:46:5c:18:99:44:ff:c0:82:ec:3f:3a:
d7:ff:d5:ae:46:f8:40:7b:f1:99:84:3f:93:52:b1:
a7:28:58:63:3f:6e:5f:06:21:be:a9:47:c1:84:aa:
fe:39:15:46:49:83:d9:45:bb:bc:fc:df:86:2a:6e:
39:0c:21:af:a9:e0:d9:70:73:59:89:b4:db:9f:a4:
84:df:c8:f4:4e:ee:cd:01:5d:c9:3e:c1:aa:11:9a:
f1:c6:11:cc:d9:ca:e3:aa:8d:09:29:4c:d9:e0:79:
67:b9:ba:d0:de:86:45:fb:88:58:23:7a:88:74:7a:
62:d5:e9:fa:4a:77:cb:2a:c6:df:32:31:19:90:c7:
de:f1:ca:7c:25:18:a0:a8:de:05:5d:85:2a:9d:0d:
5a:94:7b:de:01:c5:c5:f8:2f:e0:af:3e:e2:f4:2f:
e0:0a:ec:2b:1a:65:bd:50:b0:01:62:c1:c8:36:93:
f7:9e:e0:4a:15:57:24:ea:e3:91:a8:dc:28:c0:62:
36:42:62:70:bd:7d:c6:38:58:10:20:5f:b2:03:13:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:07:65:0C:05:52:5D:CF:AB:78:5D:8D:C6:60:40:4B:24:A4:95:EB
X509v3 Authority Key Identifier:
keyid:77:1D:23:C5:DF:1A:73:71:DD:92:F0:21:06:FE:E5:9C:5B:A7:C0:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dx0jxd8ac3HdkvAhBv7lnFunwEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911898E/10390FF831D811EEB9DE2237C4F9AE02/dx0jxd8ac3HdkvAhBv7lnFunwEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:b5:d3:49:f7:0f:52:26:1d:fa:3c:54:b6:9c:48:6b:a6:c7:
43:77:3a:ae:87:04:63:2d:a5:12:f9:04:b7:89:88:27:bb:d6:
5d:73:81:9f:ff:ea:bc:db:53:20:c2:3d:9c:20:b8:ab:0b:d5:
bf:5e:78:3c:c1:19:22:53:fb:e4:4d:3c:67:f7:c6:75:75:3a:
f7:00:01:d8:ca:47:1e:c7:70:3b:01:37:e7:aa:26:86:02:11:
2b:93:74:66:b4:f8:c1:42:36:d5:1b:5b:e0:0b:db:75:c7:d4:
92:0e:8c:c2:72:3a:b9:cb:26:cb:9e:f6:5f:21:b2:fb:3a:29:
5e:3d:c9:06:98:8d:95:c6:d8:53:2d:41:50:56:3c:61:ec:5c:
5b:7f:53:b0:38:38:e9:13:72:5c:ab:91:c2:e8:01:f1:02:d2:
11:04:94:ea:ea:61:25:ef:26:bf:1f:11:8a:ac:cb:23:96:b5:
7c:f8:b2:da:0f:90:9e:bb:5a:07:a7:60:9a:fd:53:6f:4d:36:
68:f5:f2:2f:e0:fb:95:9d:72:62:d8:bb:4c:f4:67:1c:54:54:
e1:33:f8:d2:76:46:fd:cd:3e:c6:97:72:32:57:58:70:1e:37:
37:12:07:b0:cc:03:4f:f4:d8:97:b4:ac:36:ee:5e:73:43:70:
99:08:a2:3c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg5OEUxMTAvBgNVBAUTKDc3MUQyM0M1REYxQTczNzFERDkyRjAyMTA2RkVFNTlD
NUJBN0MwNDEwHhcNMjUxMjIzMDIwMTQxWhcNMjUxMjMwMDIwMTQxWjAYMRYwFAYD
VQQDDA02OTQ5ZjgwNS05MzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJW8UxVds7JAEx7DXqgV9D5JEsuaXyhUOIfXWMFY7iKPxYSCP+I6Lh3H3hI0
PyxLRlwYmUT/wILsPzrX/9WuRvhAe/GZhD+TUrGnKFhjP25fBiG+qUfBhKr+ORVG
SYPZRbu8/N+GKm45DCGvqeDZcHNZibTbn6SE38j0Tu7NAV3JPsGqEZrxxhHM2crj
qo0JKUzZ4HlnubrQ3oZF+4hYI3qIdHpi1en6SnfLKsbfMjEZkMfe8cp8JRigqN4F
XYUqnQ1alHveAcXF+C/grz7i9C/gCuwrGmW9ULABYsHINpP3nuBKFVck6uORqNwo
wGI2QmJwvX3GOFgQIF+yAxNOQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkHZQwF
Ul3Pq3hdjcZgQEskpJXrMB8GA1UdIwQYMBaAFHcdI8XfGnNx3ZLwIQb+5Zxbp8BB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODk4RS8xMDM5MEZGODMx
RDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMzSGRrdkFoQnY3bG5GdW53
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R4MGp4ZDhhYzNIZGt2QWhCdjdsbkZ1bndFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODk4RS8xMDM5MEZGODMxRDgxMUVFQjlERTIyMzdDNEY5QUUwMi9keDBqeGQ4YWMz
SGRrdkFoQnY3bG5GdW53RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAktdNJ9w9SJh36PFS2nEhrpsdDdzquhwRjLaUS+QS3iYgnu9Zdc4Gf
/+q821Mgwj2cILirC9W/Xng8wRkiU/vkTTxn98Z1dTr3AAHYykcex3A7ATfnqiaG
AhErk3RmtPjBQjbVG1vgC9t1x9SSDozCcjq5yybLnvZfIbL7OilePckGmI2VxthT
LUFQVjxh7Fxbf1OwODjpE3Jcq5HC6AHxAtIRBJTq6mEl7ya/HxGKrMsjlrV8+LLa
D5Ceu1oHp2Ca/VNvTTZo9fIv4PuVnXJi2LtM9GccVFThM/jSdkb9zT7Gl3IyV1hw
Hjc3EgewzANP9NiXtKw27l5zQ3CZCKI8
-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:12 2025 by rpki-client