This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json)
Hash identifier: v7zRk1TdY3KD51dNQO0LZgXN0dHs47pEC3rz6kQVd84=
Subject key identifier: 24:50:22:A0:55:7A:6E:DD:4E:4D:5C:CF:78:97:95:5C:92:2F:7E:7F
Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Certificate serial: 080C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
Manifest number: 07E2
Signing time: Sat 06 Dec 2025 20:18:29 +0000
Manifest this update: Sat 06 Dec 2025 20:18:28 +0000
Manifest next update: Sat 13 Dec 2025 20:18:28 +0000
Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: jaTsnhPJSxYhF5snEsoFa0j8ZR8pM+1sXXOuZ43Nq8g=)
2: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: eRh3STMZAaCuqDqQZCMcnNT2rNeo5Bk/5FuTVp0jQRg=)
3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: 9AUbM37b5CiLCdaFctD08Xg1S7rAzz8NUfqZj75vIUI=)
4: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: Ath/WU2ZkFdzqQ3oivM8Zg8QBrfw7L/kuNwCwRxLfag=)
5: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: lqYCCMlU2p+r8Vr8oCvHriQYj28R9n24bUWS9AQiTY0=)
6: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: jMAptin7Nn/9ubjtB7+t/RBCpP9LLYksPnIclcQRTkk=)
7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Djj/jcA9qOYbqLWVcaOfucyuLejfqOjI1XLtoDbH2+E=)
8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: NCqMqwIpI4KCw7V6V+LHlzb+BzZa7gOeav4mNQAltOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2060 (0x80c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7
Validity
Not Before: Dec 6 20:18:28 2025 GMT
Not After : Dec 13 20:18:28 2025 GMT
Subject: CN=69348f95-edbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:32:ec:e3:dc:54:7c:a8:b8:e0:e4:87:c2:a5:
22:a9:da:fe:7d:6a:10:8e:78:9a:52:f6:dc:9b:4f:
ef:e8:44:59:79:89:bf:20:86:c7:8e:8d:88:93:a4:
e4:fe:12:21:49:7d:3e:66:d2:ba:b4:c5:13:d8:79:
cb:73:60:c9:7a:fe:47:58:db:84:59:72:f0:23:8f:
68:1f:7c:b5:45:47:b5:94:c1:47:2f:7f:05:f9:30:
5b:ed:71:f2:bb:17:fd:18:41:b8:38:4c:58:fc:6a:
81:76:20:b1:6c:4c:c6:3f:14:12:ed:c1:81:63:6f:
b4:37:57:fd:88:34:c8:fa:b5:ac:c0:70:9e:95:ed:
50:df:b2:65:31:cc:73:9c:df:61:f2:e9:69:5a:be:
8d:f2:47:72:27:f9:a8:53:5f:f1:96:01:50:67:7a:
0c:44:38:9b:06:8f:a7:1f:23:4f:f2:00:d2:85:b0:
8a:fe:1c:1e:47:2e:5f:5f:55:dc:a5:16:27:08:cc:
91:bb:2c:d0:85:2e:65:bd:b4:ac:e6:e6:2a:5a:55:
40:d7:dc:39:dc:51:68:61:86:05:cf:d0:e5:09:1f:
16:9a:75:32:52:15:f3:f5:40:7e:9c:f6:5e:3a:7a:
18:d6:34:c5:4d:2e:e6:1c:fe:00:e0:20:c7:02:c9:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:50:22:A0:55:7A:6E:DD:4E:4D:5C:CF:78:97:95:5C:92:2F:7E:7F
X509v3 Authority Key Identifier:
keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d8:8d:10:b2:f8:b6:8b:12:6c:f4:d6:a1:15:4e:9d:84:9b:
5b:bc:88:f0:d4:1f:a4:bb:ef:df:01:5c:6f:44:08:ef:a7:f0:
bc:ea:94:3c:b8:83:a0:2f:bd:f3:e0:75:98:4b:ed:b5:2c:aa:
18:39:d5:05:45:b5:dd:48:6d:91:ac:56:6c:71:08:e1:9d:dd:
cf:55:35:3a:36:9b:d8:a4:89:e1:26:15:3e:ba:52:d7:8d:8d:
c9:cd:ef:aa:f2:b4:f4:7b:55:d6:d3:de:94:98:ba:17:9c:db:
3a:c8:a7:c4:b7:45:e7:bd:e7:c9:bb:a1:cc:2e:c6:97:cb:58:
9f:ce:1f:bc:47:f7:90:b8:36:82:a2:9d:2b:d1:fa:37:01:93:
c4:a0:6a:d7:d0:1b:65:ec:ce:e0:6d:57:41:1a:3a:76:72:33:
5c:11:b7:cf:c8:f1:7d:80:ce:18:21:b9:e6:d4:cb:57:8d:5a:
b6:e1:17:db:88:91:c9:45:1e:bd:30:55:e5:51:dc:5f:84:52:
f5:c0:39:5e:fc:33:f5:89:4e:16:9d:56:ae:b2:a9:53:18:6a:
4b:de:92:8b:d0:f8:2c:78:7f:a1:03:05:2b:20:12:17:82:fd:
5d:83:58:17:0a:d5:f4:95:5c:a8:bf:07:c7:28:fd:04:76:a7:
df:5f:76:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1
RjlGNTFERjcwHhcNMjUxMjA2MjAxODI4WhcNMjUxMjEzMjAxODI4WjAYMRYwFAYD
VQQDEw02OTM0OGY5NS1lZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyzLs49xUfKi44OSHwqUiqdr+fWoQjniaUvbcm0/v6ERZeYm/IIbHjo2Ik6Tk
/hIhSX0+ZtK6tMUT2HnLc2DJev5HWNuEWXLwI49oH3y1RUe1lMFHL38F+TBb7XHy
uxf9GEG4OExY/GqBdiCxbEzGPxQS7cGBY2+0N1f9iDTI+rWswHCele1Q37JlMcxz
nN9h8ulpWr6N8kdyJ/moU1/xlgFQZ3oMRDibBo+nHyNP8gDShbCK/hweRy5fX1Xc
pRYnCMyRuyzQhS5lvbSs5uYqWlVA19w53FFoYYYFz9DlCR8WmnUyUhXz9UB+nPZe
OnoY1jTFTS7mHP4A4CDHAsnmkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRQIqBV
em7dTk1cz3iXlVySL35/MB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4
N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI
ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv
cFllcXpvejluYTVmbjFIZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAM2I0Qsvi2ixJs9NahFU6dhJtbvIjw1B+ku+/fAVxvRAjvp/C86pQ8
uIOgL73z4HWYS+21LKoYOdUFRbXdSG2RrFZscQjhnd3PVTU6NpvYpInhJhU+ulLX
jY3Jze+q8rT0e1XW096UmLoXnNs6yKfEt0XnvefJu6HMLsaXy1ifzh+8R/eQuDaC
op0r0fo3AZPEoGrX0Btl7M7gbVdBGjp2cjNcEbfPyPF9gM4YIbnm1MtXjVq24Rfb
iJHJRR69MFXlUdxfhFL1wDle/DP1iU4WnVausqlTGGpL3pKL0PgseH+hAwUrIBIX
gv1dg1gXCtX0lVyovwfHKP0EdqffX3Z5
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:22:42 2025 by rpki-client