This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
File: d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft (raw, json)
Hash identifier: P17m5dalyrsBiA35Zh67HcVENsKHvLNJI+0imgOphAI=
Subject key identifier: DE:F8:E4:D3:97:84:29:D4:7F:B6:04:2C:17:5C:68:B6:AE:1E:C1:79
Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46
Certificate issuer: /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
Certificate serial: 0BFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
Manifest number: 0BF0
Signing time: Mon 22 Dec 2025 18:24:17 +0000
Manifest this update: Mon 22 Dec 2025 18:24:16 +0000
Manifest next update: Mon 29 Dec 2025 18:24:16 +0000
Files and hashes: 1: d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl (hash: R6ZfeOlIpDz+yXkBFcC9CFCGSTdXUbOLbd40Xfo+L2k=)
2: AB60C088B6E111EDB3BAC26CC4F9AE02.roa (hash: wE6z56gItRRwWH8NQGesjQ0xX5sSLBqbBFe4JVJ50FU=)
3: 951CA536C1B511EF87BCEA11C4F9AE02.roa (hash: GqSqhnn63EZ4p4JuVF5u2QSaZSQqUmP27m/tmKbsSUg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl
rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3067 (0xbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A69E, serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
Validity
Not Before: Dec 22 18:24:16 2025 GMT
Not After : Dec 29 18:24:16 2025 GMT
Subject: CN=69498cd1-3a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:75:ce:c8:11:5c:ba:ca:33:a3:f9:a5:7f:
1a:6d:7c:7e:d5:c5:02:b5:c3:84:37:96:82:6b:7b:
25:01:7c:5d:57:89:cc:d1:d0:62:c3:97:9f:a9:8a:
7f:26:17:b2:9b:0c:94:3f:44:45:ed:cc:1b:d3:85:
1f:c3:56:11:f2:04:54:b6:b2:27:ed:54:52:c0:a8:
ab:02:d9:c1:6c:0d:d3:95:d2:e9:b0:07:39:50:11:
64:ef:50:da:9c:57:55:ef:4f:af:0a:be:1c:cd:36:
cb:ea:fe:7f:0a:15:27:ec:e4:a5:eb:22:79:52:9f:
f2:9a:ca:70:a1:68:40:4f:3b:b4:e7:13:e8:26:a1:
52:50:52:54:ef:ee:e6:45:a6:fe:92:ef:11:58:9d:
78:ea:ed:03:44:02:67:56:a6:d9:dc:cc:76:3e:8e:
75:14:16:96:c6:9c:16:c6:9d:82:cb:57:59:2c:5c:
36:04:66:35:62:06:48:56:1d:10:47:fa:cf:7e:69:
7a:7e:1b:74:f0:16:e1:47:14:5a:19:2c:29:11:86:
eb:99:24:f1:9d:b5:fc:11:2c:ad:d1:bc:52:16:8f:
ef:7d:5e:29:93:22:f4:f6:17:e3:b7:76:a2:04:76:
14:16:ca:4c:dd:21:33:f9:5c:4d:e3:83:1d:2f:73:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F8:E4:D3:97:84:29:D4:7F:B6:04:2C:17:5C:68:B6:AE:1E:C1:79
X509v3 Authority Key Identifier:
keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9e:1c:80:05:eb:d7:97:e4:eb:0c:83:b1:61:53:1c:d8:e2:
72:a0:b5:c2:c5:77:4e:25:89:b8:1f:81:45:5a:ae:fb:ec:09:
36:07:9c:73:7f:6b:2d:38:13:b6:8a:20:80:be:e8:c4:51:1e:
de:fc:eb:03:e7:81:54:99:c4:bc:f4:aa:a8:21:67:58:7b:2e:
76:f8:57:6d:3f:15:32:c8:81:fa:79:74:4a:2c:a4:e2:8f:be:
56:04:8c:65:d7:ce:6f:b1:ba:cb:d6:86:82:5c:b0:de:6b:1a:
e8:2f:53:28:55:21:d7:34:b7:3f:72:52:89:b5:26:a0:c9:3f:
a1:d5:67:0b:a1:7f:13:05:a7:cc:0c:ae:c7:8a:bb:7a:e8:db:
6e:31:fe:60:e3:28:d7:f4:4a:66:e4:ba:cb:ca:e7:bb:e7:07:
02:74:57:62:41:47:57:cf:bd:ee:28:dd:ae:ed:d5:4a:60:4b:
07:b2:ad:92:fc:63:e2:f1:32:d2:88:6d:aa:7f:fc:9e:17:9f:
55:60:2c:1f:c5:68:29:33:ac:a5:ec:0f:55:fe:dc:57:74:40:
6f:1f:63:5f:83:32:0f:87:ac:49:fa:8e:ad:fd:6d:1e:79:50:
89:38:4b:f4:b3:a3:84:56:e4:fa:5e:8a:20:6c:a2:b0:d9:6d:
5c:7c:d0:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E2OUUxMTAvBgNVBAUTKDc3RUE2RkUwMTY2NTFDRkIxNjkzNDE2NzQ1RTlBNUJF
QTQ3NDUzNDYwHhcNMjUxMjIyMTgyNDE2WhcNMjUxMjI5MTgyNDE2WjAYMRYwFAYD
VQQDDA02OTQ5OGNkMS0zYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupp1zsgRXLrKM6P5pX8abXx+1cUCtcOEN5aCa3slAXxdV4nM0dBiw5efqYp/
JheymwyUP0RF7cwb04Ufw1YR8gRUtrIn7VRSwKirAtnBbA3TldLpsAc5UBFk71Da
nFdV70+vCr4czTbL6v5/ChUn7OSl6yJ5Up/ymspwoWhATzu05xPoJqFSUFJU7+7m
Rab+ku8RWJ146u0DRAJnVqbZ3Mx2Po51FBaWxpwWxp2Cy1dZLFw2BGY1YgZIVh0Q
R/rPfml6fht08BbhRxRaGSwpEYbrmSTxnbX8ESyt0bxSFo/vfV4pkyL09hfjt3ai
BHYUFspM3SEz+VxN44MdL3NbBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN745NOX
hCnUf7YELBdcaLauHsF5MB8GA1UdIwQYMBaAFHfqb+AWZRz7FpNBZ0Xppb6kdFNG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTY5RS9GQjlGQjkzQTJB
RTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQc1drMEZuUmVtbHZxUjBV
MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QtcHY0QlpsSFBzV2swRm5SZW1sdnFSMFUwWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTY5RS9GQjlGQjkzQTJBRTYxMUVBQUJENTZCMTRDNEY5QUUwMi9kLXB2NEJabEhQ
c1drMEZuUmVtbHZxUjBVMFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCynhyABevXl+TrDIOxYVMc2OJyoLXCxXdOJYm4H4FFWq777Ak2B5xz
f2stOBO2iiCAvujEUR7e/OsD54FUmcS89KqoIWdYey52+FdtPxUyyIH6eXRKLKTi
j75WBIxl185vsbrL1oaCXLDeaxroL1MoVSHXNLc/clKJtSagyT+h1WcLoX8TBafM
DK7Hirt66NtuMf5g4yjX9Epm5LrLyue75wcCdFdiQUdXz73uKN2u7dVKYEsHsq2S
/GPi8TLSiG2qf/yeF59VYCwfxWgpM6yl7A9V/txXdEBvH2NfgzIPh6xJ+o6t/W0e
eVCJOEv0s6OEVuT6XoogbKKw2W1cfNDQ
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:34 2025 by rpki-client