This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
File: 529w4WvXl_FHD9HglUZu2f_XC94.mft (raw, json)
Hash identifier: kYqZI8ryWVul9vJI5EjosHORCgHHj3cIRDd/vDug5jM=
Subject key identifier: E3:EA:25:07:A4:99:24:0C:2B:A1:85:64:24:7E:60:EE:34:34:2C:86
Authority key identifier: E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE
Certificate issuer: /CN=A914B6D8/serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
Manifest number: 0D
Signing time: Tue 02 Dec 2025 17:47:46 +0000
Manifest this update: Tue 02 Dec 2025 17:47:46 +0000
Manifest next update: Tue 09 Dec 2025 17:47:46 +0000
Files and hashes: 1: 529w4WvXl_FHD9HglUZu2f_XC94.crl (hash: r45uZ03xqYMtWX+mbyKgYxHs/c3PGdA9Yxbw8TNUdFA=)
2: 551B0760BEBD11F0AD50D23AC4F9AE02.roa (hash: k/Bj5MFr5woGzZDRB9XxOYqM9e19oHws7ME7lRNdfok=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl
rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 17:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B6D8, serialNumber=E76F70E16BD797F1470FD1E095466ED9FFD70BDE
Validity
Not Before: Dec 2 17:47:46 2025 GMT
Not After : Dec 9 17:47:46 2025 GMT
Subject: CN=692f2642-a9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:1c:96:9c:67:3e:20:f8:3d:f2:19:fb:33:
e5:67:ad:e0:b3:0f:6d:8b:e7:55:29:5c:ff:b1:07:
bc:c7:2e:b2:3e:a1:bd:dd:a4:a8:1f:cc:8a:92:6b:
c5:73:2a:0b:f1:15:8b:b2:7e:78:f4:44:69:9e:ea:
56:d2:11:8a:37:15:ee:27:c8:38:b7:a5:1d:8e:6b:
a5:6c:65:db:14:32:b5:51:51:9c:61:dd:f0:9a:d9:
8f:eb:22:e2:8e:af:ac:bd:12:3e:7f:6e:99:97:02:
91:fe:36:b4:7a:1b:84:26:8c:9c:40:66:34:06:6f:
f5:48:f3:f5:f5:aa:5e:50:93:7a:0a:7b:cd:d5:7a:
67:cf:99:45:48:a9:d5:57:d6:37:f7:d2:e1:72:78:
41:32:aa:5b:eb:0d:26:df:82:75:07:a0:44:61:06:
45:0b:56:5d:df:d6:8e:c9:ee:1c:5e:a4:ba:69:42:
fd:34:42:53:47:03:21:86:cc:19:bd:be:86:ef:80:
12:88:63:c5:44:5f:40:eb:04:10:6d:15:aa:43:fc:
9f:49:9d:40:5a:4a:86:b4:8e:66:5c:85:a1:61:94:
d3:38:7d:f2:b9:a7:ef:cf:7d:ad:ad:3f:30:ce:77:
be:8e:e0:7e:e7:d3:3c:d1:36:ee:f7:f0:09:ef:51:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EA:25:07:A4:99:24:0C:2B:A1:85:64:24:7E:60:EE:34:34:2C:86
X509v3 Authority Key Identifier:
keyid:E7:6F:70:E1:6B:D7:97:F1:47:0F:D1:E0:95:46:6E:D9:FF:D7:0B:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/529w4WvXl_FHD9HglUZu2f_XC94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B6D8/56948B32BEBA11F096A62784C4F9AE02/529w4WvXl_FHD9HglUZu2f_XC94.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:76:44:75:de:aa:4d:37:aa:1c:c1:16:f0:59:95:42:b2:48:
94:19:02:06:b5:c4:ef:d1:74:c8:64:ab:95:d6:e8:d7:9a:57:
95:4b:8a:42:85:c7:3e:f6:96:09:6d:73:98:32:18:7a:ab:1f:
41:f1:d8:aa:a5:9a:5f:25:e2:3b:b0:42:22:93:12:be:bb:5a:
86:06:95:ef:3d:ad:f7:d8:40:26:50:45:ad:a8:ce:dc:2a:ec:
0d:85:b9:60:0a:d9:f5:9b:1d:ee:58:37:a8:4a:cf:d5:b6:4b:
f4:8d:08:79:5a:33:90:85:72:e6:8a:c0:50:d2:29:6f:68:54:
10:26:fb:68:55:35:30:20:6d:57:43:f0:05:d1:0e:b1:dc:b2:
7f:49:93:22:14:ce:c2:8d:23:b0:f0:91:34:83:82:93:23:ac:
bf:5a:e0:b9:47:45:fa:4e:a0:e4:b2:d5:ab:b1:e4:33:3e:49:
f8:c8:81:13:09:02:ea:65:a8:8b:5c:fb:76:c9:fc:b7:e9:97:
04:9b:6c:b4:fa:42:2a:a2:03:ad:0c:b3:f9:ee:4e:a5:d7:95:
9b:6d:de:a3:67:80:60:86:bf:20:d4:87:d8:eb:ac:dc:1c:1e:
f4:c8:ab:90:9d:a7:31:9f:b1:c5:78:3a:d9:44:fa:22:c7:28:
9e:0c:91:3b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QjZEODExMC8GA1UEBRMoRTc2RjcwRTE2QkQ3OTdGMTQ3MEZEMUUwOTU0NjZFRDlG
RkQ3MEJERTAeFw0yNTEyMDIxNzQ3NDZaFw0yNTEyMDkxNzQ3NDZaMBgxFjAUBgNV
BAMTDTY5MmYyNjQyLWE5YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDL8hyWnGc+IPg98hn7M+VnreCzD22L51UpXP+xB7zHLrI+ob3dpKgfzIqSa8Vz
KgvxFYuyfnj0RGme6lbSEYo3Fe4nyDi3pR2Oa6VsZdsUMrVRUZxh3fCa2Y/rIuKO
r6y9Ej5/bpmXApH+NrR6G4QmjJxAZjQGb/VI8/X1ql5Qk3oKe83VemfPmUVIqdVX
1jf30uFyeEEyqlvrDSbfgnUHoERhBkULVl3f1o7J7hxepLppQv00QlNHAyGGzBm9
vobvgBKIY8VEX0DrBBBtFapD/J9JnUBaSoa0jmZchaFhlNM4ffK5p+/Pfa2tPzDO
d76O4H7n0zzRNu738AnvUcjVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4+olB6SZ
JAwroYVkJH5g7jQ0LIYwHwYDVR0jBBgwFoAU529w4WvXl/FHD9HglUZu2f/XC94w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNkQ4LzU2OTQ4QjMyQkVC
QTExRjA5NkE2Mjc4NEM0RjlBRTAyLzUyOXc0V3ZYbF9GSEQ5SGdsVVp1MmZfWEM5
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNTI5dzRXdlhsX0ZIRDlIZ2xVWnUyZl9YQzk0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC
NkQ4LzU2OTQ4QjMyQkVCQTExRjA5NkE2Mjc4NEM0RjlBRTAyLzUyOXc0V3ZYbF9G
SEQ5SGdsVVp1MmZfWEM5NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJF2RHXeqk03qhzBFvBZlUKySJQZAga1xO/RdMhkq5XW6NeaV5VLikKF
xz72lgltc5gyGHqrH0Hx2Kqlml8l4juwQiKTEr67WoYGle89rffYQCZQRa2oztwq
7A2FuWAK2fWbHe5YN6hKz9W2S/SNCHlaM5CFcuaKwFDSKW9oVBAm+2hVNTAgbVdD
8AXRDrHcsn9JkyIUzsKNI7DwkTSDgpMjrL9a4LlHRfpOoOSy1aux5DM+SfjIgRMJ
AuplqItc+3bJ/LfplwSbbLT6QiqiA60Ms/nuTqXXlZtt3qNngGCGvyDUh9jrrNwc
HvTIq5CdpzGfscV4OtlE+iLHKJ4MkTs=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:00:07 2025 by rpki-client