This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft
File: cPp5EccBLljvn7BaVaTOb7Bgm88.mft (raw, json)
Hash identifier: qWC/DyUySyZLFdnThHRYeU/xKLOaCPi1V02uW3hLgrY=
Subject key identifier: 46:FB:0A:50:FD:3E:22:FF:FE:28:5E:AD:1B:1E:9A:7C:40:8C:E2:BC
Authority key identifier: 70:FA:79:11:C7:01:2E:58:EF:9F:B0:5A:55:A4:CE:6F:B0:60:9B:CF
Certificate issuer: /CN=A9119465/serialNumber=70FA7911C7012E58EF9FB05A55A4CE6FB0609BCF
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft
Manifest number: 0110
Signing time: Tue 23 Dec 2025 03:57:14 +0000
Manifest this update: Tue 23 Dec 2025 03:57:14 +0000
Manifest next update: Tue 30 Dec 2025 03:57:14 +0000
Files and hashes: 1: cPp5EccBLljvn7BaVaTOb7Bgm88.crl (hash: xqiq8WOectCiCjVuMbuAH66RUHClTrWa9Rz2r9JyhEI=)
2: F0C7266245D811EF9D851624C4F9AE02.roa (hash: SZIMeYcJUuIC8rNtcwaM/lfCvbj4vLmNtyjgG3i25mE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.crl
rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119465, serialNumber=70FA7911C7012E58EF9FB05A55A4CE6FB0609BCF
Validity
Not Before: Dec 23 03:57:14 2025 GMT
Not After : Dec 30 03:57:14 2025 GMT
Subject: CN=694a131a-3b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ca:66:b3:72:5a:d2:64:de:a7:5c:13:65:31:
8b:83:11:03:7e:bf:24:ba:41:7b:35:bc:ef:25:65:
59:4e:7f:e5:bd:1d:11:01:b4:ee:99:6b:1c:8c:3a:
17:2b:b8:c5:32:98:a8:2a:a1:e2:fa:c7:54:6f:47:
11:4d:76:4c:4b:35:90:34:3e:c0:9f:42:8f:17:bf:
47:c8:5a:4d:b0:fa:8c:ec:7d:39:bf:f8:7b:ae:f6:
53:e4:fc:22:5f:66:c9:02:48:cf:6c:2d:25:83:d5:
b0:1c:d0:eb:e9:40:10:8c:42:11:28:85:4c:6a:bf:
2a:4b:53:c2:7d:17:c8:5a:5b:62:a3:98:f1:d2:25:
3b:b3:03:73:5b:36:fa:fd:39:ed:4c:a0:da:54:d4:
e0:30:8a:93:a3:14:ba:21:2b:65:d3:2f:aa:6b:a1:
2a:f1:d8:ad:45:82:6e:b0:34:6a:9c:9e:87:a0:70:
4d:b2:c9:5e:8b:bb:7f:88:11:91:9e:52:69:54:21:
54:e2:21:df:a6:c6:3b:1d:fb:39:af:91:f0:fa:77:
bc:ac:72:15:d9:45:be:29:eb:4b:29:e9:5f:32:9f:
ba:90:82:c7:4e:e3:b1:70:0c:e0:a1:3e:6a:c9:5a:
8b:b1:a8:74:6b:3c:77:7e:4a:e7:24:b4:fd:28:a3:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:0A:50:FD:3E:22:FF:FE:28:5E:AD:1B:1E:9A:7C:40:8C:E2:BC
X509v3 Authority Key Identifier:
keyid:70:FA:79:11:C7:01:2E:58:EF:9F:B0:5A:55:A4:CE:6F:B0:60:9B:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0c:1e:c0:32:bf:a5:de:85:55:bd:d1:25:1b:2d:4e:3b:c4:
67:4b:60:e7:79:a4:03:1a:d2:78:67:e7:d1:70:d6:f0:66:18:
93:e7:11:77:d8:83:31:31:02:2e:96:dd:a4:d7:8b:e7:93:77:
bc:00:9a:31:ec:1a:15:52:26:db:69:b2:c5:dc:b0:bb:8c:e1:
cf:30:e9:5c:cc:63:19:fe:27:41:bc:75:a2:c2:cd:cb:d1:ee:
ac:cb:2e:5a:86:62:87:98:75:9c:be:c0:bc:a8:59:e8:35:af:
55:01:8b:8b:0e:99:fa:77:29:ec:55:d1:90:fd:94:95:31:ad:
ae:fa:d6:f3:ba:14:3b:62:4f:91:19:f0:3f:1a:3a:bd:9a:b4:
65:21:55:ce:70:98:cf:f8:70:78:47:a1:70:e7:dc:9a:d5:84:
2f:70:66:eb:c2:63:4a:9d:1f:5c:3f:19:3c:06:60:4a:ad:ce:
0b:86:9e:ff:58:32:04:42:cd:af:c8:6f:43:1f:b3:a0:07:64:
d3:eb:96:1f:67:33:90:a3:a0:7d:07:b4:f6:57:03:cc:0c:ab:
7b:3a:4a:16:d7:e5:ac:61:0e:75:b5:d2:92:d5:d8:05:7b:4c:
37:e5:79:ad:7d:06:83:d9:e3:69:f2:c3:00:d1:77:37:f7:24:
fa:d9:63:28
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk0NjUxMTAvBgNVBAUTKDcwRkE3OTExQzcwMTJFNThFRjlGQjA1QTU1QTRDRTZG
QjA2MDlCQ0YwHhcNMjUxMjIzMDM1NzE0WhcNMjUxMjMwMDM1NzE0WjAYMRYwFAYD
VQQDDA02OTRhMTMxYS0zYjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3cpms3Ja0mTep1wTZTGLgxEDfr8kukF7NbzvJWVZTn/lvR0RAbTumWscjDoX
K7jFMpioKqHi+sdUb0cRTXZMSzWQND7An0KPF79HyFpNsPqM7H05v/h7rvZT5Pwi
X2bJAkjPbC0lg9WwHNDr6UAQjEIRKIVMar8qS1PCfRfIWltio5jx0iU7swNzWzb6
/TntTKDaVNTgMIqToxS6IStl0y+qa6Eq8ditRYJusDRqnJ6HoHBNsslei7t/iBGR
nlJpVCFU4iHfpsY7Hfs5r5Hw+ne8rHIV2UW+KetLKelfMp+6kILHTuOxcAzgoT5q
yVqLsah0azx3fkrnJLT9KKPm4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb7ClD9
PiL//iherRsemnxAjOK8MB8GA1UdIwQYMBaAFHD6eRHHAS5Y75+wWlWkzm+wYJvP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ2NS9EQzM2OEFDMjQ1
MkQxMUVGQURFRDYzNENDNEY5QUUwMi9jUHA1RWNjQkxsanZuN0JhVmFUT2I3Qmdt
ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NQcDVFY2NCTGxqdm43QmFWYVRPYjdCZ204OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTQ2NS9EQzM2OEFDMjQ1MkQxMUVGQURFRDYzNENDNEY5QUUwMi9jUHA1RWNjQkxs
anZuN0JhVmFUT2I3QmdtODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbDB7AMr+l3oVVvdElGy1OO8RnS2DneaQDGtJ4Z+fRcNbwZhiT5xF3
2IMxMQIult2k14vnk3e8AJox7BoVUibbabLF3LC7jOHPMOlczGMZ/idBvHWiws3L
0e6syy5ahmKHmHWcvsC8qFnoNa9VAYuLDpn6dynsVdGQ/ZSVMa2u+tbzuhQ7Yk+R
GfA/Gjq9mrRlIVXOcJjP+HB4R6Fw59ya1YQvcGbrwmNKnR9cPxk8BmBKrc4Lhp7/
WDIEQs2vyG9DH7OgB2TT65YfZzOQo6B9B7T2VwPMDKt7OkoW1+WsYQ51tdKS1dgF
e0w35XmtfQaD2eNp8sMA0Xc39yT62WMo
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:34:58 2025 by rpki-client