This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json)
Hash identifier: xGcP6F8dOgLPsx+vWEmcAEuy+pWkmagqQ9wbaEkrvzw=
Subject key identifier: 8D:FA:15:E4:6E:A0:E0:44:E5:CB:BD:7B:E2:E4:5A:D7:54:60:2C:E4
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial: 0323
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
Manifest number: 030B
Signing time: Fri 19 Dec 2025 00:26:40 +0000
Manifest this update: Fri 19 Dec 2025 00:26:40 +0000
Manifest next update: Fri 26 Dec 2025 00:26:40 +0000
Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: Hav1McsND4Zj46IfGVuupgYzk51meq84sXUDW0jZLaQ=)
2: B62E536CD26411F0A0C1426DC4F9AE02.roa (hash: ji/L3w+tmrsGfycplhfdZAlMZY7tEBd1wHCdpW53sHM=)
3: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: NDIUMNLgNwlA3XdorfdGi7go+NI9mRVzxQ8Xlow0T8g=)
4: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: 7v3zrNq+442jAdZuC2gsCpXpLV0fHPfa8xoCxBp0rBk=)
5: 9770D05EBC4211F0B94CE580C4F9AE02.roa (hash: 6d1MeFDErLTksuqngoB0AUwhaZYy9q2yMdoCFh9lWOQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803 (0x323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Validity
Not Before: Dec 19 00:26:40 2025 GMT
Not After : Dec 26 00:26:40 2025 GMT
Subject: CN=69449bc0-5d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:e5:c7:b1:21:50:3d:59:26:6c:84:21:23:
fe:58:f2:cb:dd:3f:b3:c2:ae:c6:a1:d7:c8:3a:50:
47:3c:bf:2f:de:c9:96:74:ad:2d:d7:54:cd:d6:7f:
a0:5b:a0:12:1f:a1:c2:d1:0e:c3:38:6e:eb:f9:c8:
3c:24:5b:aa:0e:b2:bb:8d:1d:c9:91:82:2d:1d:cc:
29:54:5e:17:8e:aa:31:ac:47:64:65:33:52:03:56:
b4:f2:eb:cf:73:94:46:2f:c9:b8:27:23:1b:5c:e6:
ac:bc:df:ac:a3:cf:bb:b0:c4:1b:a6:77:0a:40:d6:
13:4f:50:4a:8f:7a:0c:86:46:1e:37:de:68:b0:c8:
d9:de:f1:74:b3:c5:f1:d6:bb:e3:d4:3c:c4:b9:df:
75:68:d5:47:b7:27:2c:6f:4d:25:a9:3b:43:1a:6b:
61:59:eb:cd:eb:cd:f5:c2:b4:02:a1:03:89:a8:f6:
4b:0b:88:19:c1:57:de:eb:6d:e7:14:70:91:32:93:
ea:f0:cc:fe:bc:86:88:2f:31:71:ec:cc:58:0d:82:
b6:50:fa:e9:bf:a0:f9:b1:46:18:9f:33:65:2d:fd:
84:bd:ef:8f:89:bf:8e:78:7e:cc:92:38:06:17:52:
5d:16:46:30:99:8d:97:2d:cd:56:44:6e:38:75:18:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FA:15:E4:6E:A0:E0:44:E5:CB:BD:7B:E2:E4:5A:D7:54:60:2C:E4
X509v3 Authority Key Identifier:
keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:15:5d:77:10:92:5e:99:12:c5:65:f9:1f:ae:d4:88:d9:ff:
bc:a5:67:f4:84:05:76:d5:47:5c:9b:1f:fd:a5:0d:b6:08:d9:
a8:51:3f:04:5e:d3:81:2a:b1:29:d7:ab:e7:f7:57:d7:af:05:
a5:8a:58:ee:f4:97:9c:e7:ca:1c:d5:70:79:3c:85:59:ee:da:
cc:1b:59:58:bd:ce:70:90:ce:42:78:65:61:fa:be:45:ff:bc:
99:4a:b4:63:ef:b1:ef:2b:6f:5b:00:23:b4:0c:22:9b:e8:c5:
38:df:f6:16:02:c7:61:d5:d9:a7:ec:f6:f5:b0:2f:f1:ee:ef:
1f:ac:f0:a7:be:89:3d:e3:a3:8b:10:93:c2:b6:67:7b:e6:5e:
5f:f3:63:a9:37:e6:b4:20:d3:fd:1f:35:ad:81:14:7c:06:4e:
76:6c:52:c0:e1:a4:3b:6a:b2:e3:ad:96:f5:0d:ef:53:ce:3c:
96:35:27:0f:b3:1a:40:a3:e1:4f:08:c9:cd:dc:33:65:ac:f3:
7c:64:b8:0b:0e:a8:cf:d0:83:4d:b4:79:f9:cc:2f:b7:06:ee:
70:ea:23:18:3c:e1:22:5f:41:ea:3d:7c:d1:9c:0e:24:30:58:
1b:43:f3:4d:f1:09:71:1d:02:d5:50:63:43:73:a8:2a:98:70:
2a:de:6c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 03:48:42 2025 by rpki-client