This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
File: poz6MR67HxAyDqIHdTAw5_Oij3I.mft (raw, json)
Hash identifier: Naul9DHUX2E9zLnhtJ+8gGndxmJXgkfADOItUDfjCPE=
Subject key identifier: D8:D3:4C:7E:4F:DE:EB:52:73:D3:85:93:30:13:97:7C:47:AE:19:30
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Certificate issuer: /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial: 0B2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
Manifest number: 0B15
Signing time: Wed 10 Dec 2025 18:29:40 +0000
Manifest this update: Wed 10 Dec 2025 18:29:39 +0000
Manifest next update: Wed 17 Dec 2025 18:29:39 +0000
Files and hashes: 1: poz6MR67HxAyDqIHdTAw5_Oij3I.crl (hash: wxQhO4Vt6aprEmgBHgD+NSvN8z/e2Bl42Qetcv1Asy4=)
2: E3D288CA6BC311EDB9791958C4F9AE02.roa (hash: xfCVW/hkWWtb6veFD5avvPcY4Mz5aIouTpiWuzaIDT0=)
3: F4E06C32804911EDABB05C09C4F9AE02.roa (hash: ESJChcbSeTzsfPRjHjsX6geMHbvNO7hjmHXws1871ls=)
4: D353090841F711ECB1465157C4F9AE02.roa (hash: hyTgYf3yNb3P1osKlb2mkzCC43nsvagjPiYm8g/bHPk=)
5: 110731BE329D11EFB45DDA57C4F9AE02.roa (hash: wHUnMKyUsP+z0ZGxOO5ssZzuISHdGqM1+8ZYBh44vj4=)
6: 1E95063A21E611EEB4824339C4F9AE02.roa (hash: zTEEFeYyenG7e2iJRNTQNMi/VEI/2vKOaAjTvCstuBc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 18:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2863 (0xb2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913258C, serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Validity
Not Before: Dec 10 18:29:39 2025 GMT
Not After : Dec 17 18:29:39 2025 GMT
Subject: CN=6939bc13-bf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:08:9e:d1:9f:e6:07:2c:b1:09:cb:b6:43:11:
47:10:ed:04:5f:dd:e8:bf:25:32:95:89:21:b0:31:
2a:5e:22:54:e3:96:ec:22:ef:7c:b2:05:36:fa:19:
6f:25:2d:29:48:c9:a2:8c:7c:47:ad:7b:b4:8e:22:
36:e3:43:0f:bb:02:b4:18:e4:9f:a3:9b:1f:65:22:
d7:87:0c:89:3f:c5:ba:1c:d4:8c:71:b5:fd:70:c0:
dd:64:7e:f7:4f:fe:fe:fa:71:74:08:90:d4:59:f4:
7c:78:27:4e:df:6d:b8:ea:a1:27:52:f1:04:2b:c8:
25:f0:34:20:22:ea:da:1d:6a:1c:b2:f9:04:cd:db:
36:34:3c:4e:84:68:61:68:8f:b0:ec:56:92:4c:99:
be:9d:0d:35:51:d0:05:1c:86:ce:d7:cf:16:6e:8e:
be:6c:41:33:1a:c5:c8:26:9b:65:10:6c:5a:1c:0a:
16:33:05:65:72:56:f1:14:32:d0:b9:ef:6e:6d:5d:
b5:cb:99:ca:7e:5b:83:00:38:da:9c:43:36:7a:59:
b7:2a:f3:9d:ef:d9:ef:ac:27:f9:58:50:95:6e:f4:
6f:7f:37:cc:03:87:56:14:db:3d:37:32:5f:44:a5:
06:e0:0b:b7:6b:bf:a7:dc:06:62:0d:33:c2:89:d9:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D3:4C:7E:4F:DE:EB:52:73:D3:85:93:30:13:97:7C:47:AE:19:30
X509v3 Authority Key Identifier:
keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0e:12:5d:ca:cd:0d:d1:c1:f7:9b:ff:9a:36:b4:fe:9c:71:
df:06:3b:f7:d8:cc:89:7f:20:1b:b6:ac:53:8d:1b:c4:01:63:
dc:2b:28:89:7f:d8:7d:2e:7c:02:7d:9e:a8:c0:e8:1c:a2:d8:
83:4a:1d:5d:7a:68:2c:1e:c0:e3:64:d6:e7:56:d6:85:a9:71:
7a:04:19:45:3b:7e:ed:5f:ba:23:d1:8f:f1:69:40:b8:17:87:
a8:4a:70:dc:d7:52:d2:22:cc:f2:af:1e:94:ce:53:18:77:73:
60:28:71:17:a2:4e:98:44:ac:38:87:29:07:c4:cd:28:8b:d3:
46:05:d5:95:88:eb:34:0f:f9:1b:f8:16:96:f9:ff:e9:b7:28:
9d:13:ed:90:fd:cf:a9:49:6c:aa:2a:46:71:85:53:75:ca:bd:
30:86:45:b1:0c:d0:db:22:01:ec:fb:bc:a8:e6:e6:e7:fe:7c:
e5:2f:2d:76:13:06:c5:78:12:09:05:cc:d8:c9:68:a3:4e:8a:
c3:e7:29:fe:ff:a1:36:1c:8a:1e:63:84:96:a4:7c:73:ae:b0:
ec:ce:36:99:ba:96:58:72:4f:fc:83:c4:d8:fb:11:50:af:b9:
27:b7:ec:fc:26:e1:fb:b4:2c:c7:f0:2b:e2:9e:cb:bd:26:9e:
c3:82:bb:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI1OEMxMTAvBgNVBAUTKEE2OENGQTMxMUVCQjFGMTAzMjBFQTIwNzc1MzAzMEU3
RjNBMjhGNzIwHhcNMjUxMjEwMTgyOTM5WhcNMjUxMjE3MTgyOTM5WjAYMRYwFAYD
VQQDEw02OTM5YmMxMy1iZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8Aie0Z/mByyxCcu2QxFHEO0EX93ovyUylYkhsDEqXiJU45bsIu98sgU2+hlv
JS0pSMmijHxHrXu0jiI240MPuwK0GOSfo5sfZSLXhwyJP8W6HNSMcbX9cMDdZH73
T/7++nF0CJDUWfR8eCdO32246qEnUvEEK8gl8DQgIuraHWocsvkEzds2NDxOhGhh
aI+w7FaSTJm+nQ01UdAFHIbO188Wbo6+bEEzGsXIJptlEGxaHAoWMwVlclbxFDLQ
ue9ubV21y5nKfluDADjanEM2elm3KvOd79nvrCf5WFCVbvRvfzfMA4dWFNs9NzJf
RKUG4Au3a7+n3AZiDTPCidnlHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjTTH5P
3utSc9OFkzATl3xHrhkwMB8GA1UdIwQYMBaAFKaM+jEeux8QMg6iB3UwMOfzoo9y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjU4Qy9CNEM0NUZFMDU0
OEQxMUVBODZDOUREN0VDNEY5QUUwMi9wb3o2TVI2N0h4QXlEcUlIZFRBdzVfT2lq
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BvejZNUjY3SHhBeURxSUhkVEF3NV9PaWozSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjU4Qy9CNEM0NUZFMDU0OEQxMUVBODZDOUREN0VDNEY5QUUwMi9wb3o2TVI2N0h4
QXlEcUlIZFRBdzVfT2lqM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBaDhJdys0N0cH3m/+aNrT+nHHfBjv32MyJfyAbtqxTjRvEAWPcKyiJ
f9h9LnwCfZ6owOgcotiDSh1demgsHsDjZNbnVtaFqXF6BBlFO37tX7oj0Y/xaUC4
F4eoSnDc11LSIszyrx6UzlMYd3NgKHEXok6YRKw4hykHxM0oi9NGBdWViOs0D/kb
+BaW+f/ptyidE+2Q/c+pSWyqKkZxhVN1yr0whkWxDNDbIgHs+7yo5ubn/nzlLy12
EwbFeBIJBczYyWijTorD5yn+/6E2HIoeY4SWpHxzrrDszjaZupZYck/8g8TY+xFQ
r7knt+z8JuH7tCzH8Cvinsu9Jp7DgrtN
-----END CERTIFICATE-----
Generated at Fri Dec 12 19:08:20 2025 by rpki-client