This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
File: jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft (raw, json)
Hash identifier: QdPiUEozU7USFLfzeoREzDUpctukgEk4MKQz/xXaEp8=
Subject key identifier: B6:D5:F5:70:83:EB:6D:62:5C:A3:45:72:89:58:9F:F7:4C:5C:17:9E
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Certificate issuer: /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
Manifest number: 025D
Signing time: Sun 07 Dec 2025 00:12:14 +0000
Manifest this update: Sun 07 Dec 2025 00:12:13 +0000
Manifest next update: Sun 14 Dec 2025 00:12:13 +0000
Files and hashes: 1: jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl (hash: jXt77KeE12C1rSMzqsWHWbmtYNdy/WlhLqN6ZMkaTus=)
2: 9A859F8A480611EDBC63AD52C4F9AE02.roa (hash: WXoVKsbEpghMIIdNaEQbkL+bcA9WkVBDLvgK1gCCHVE=)
3: 001EB4A284C911EFA902172CC4F9AE02.roa (hash: CelPtehNETCHmDVj2SG2Ea8dFXqnAorjh7+Ir6OBG24=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:12:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B202, serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Validity
Not Before: Dec 7 00:12:13 2025 GMT
Not After : Dec 14 00:12:13 2025 GMT
Subject: CN=6934c65e-adf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:d5:c8:bb:b8:9c:1d:ad:49:03:33:95:4e:
fb:91:c2:72:fc:d8:f6:15:df:c5:99:86:d2:e1:64:
be:30:9b:59:7f:3c:0b:db:2c:05:af:b6:0f:a0:1f:
b2:a8:e6:6c:af:cb:3b:62:7a:6e:ab:f2:2d:e4:df:
55:9b:43:1e:3d:81:12:52:21:19:d6:88:92:58:38:
64:77:26:6d:07:3e:ce:67:0e:95:fe:b3:da:1e:a3:
7a:87:23:47:38:3d:6b:6d:a5:68:2a:29:63:32:f7:
13:65:71:19:be:43:1c:de:6d:b5:cc:4a:c1:1d:54:
f0:36:fa:62:3d:de:1e:54:0d:48:18:83:f7:aa:28:
61:dd:64:0d:f2:b8:5b:c9:48:98:ba:ce:60:50:bf:
d9:c9:96:ec:1a:1e:6a:25:dd:df:01:56:5f:91:24:
65:ec:db:67:84:92:24:e5:e6:3e:6d:ee:c9:63:4a:
84:0c:b0:f0:bf:37:c3:a3:af:bf:61:f8:7f:a5:20:
17:0b:9f:a1:3f:3e:fe:24:a7:ee:ec:68:99:68:36:
ce:4b:4c:b0:d3:c9:3a:25:07:3a:85:5c:ea:65:80:
3f:cb:2a:41:21:d8:cd:f7:69:50:e7:6a:15:d7:43:
84:2a:64:84:25:18:72:5b:65:15:f8:e8:81:16:f9:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D5:F5:70:83:EB:6D:62:5C:A3:45:72:89:58:9F:F7:4C:5C:17:9E
X509v3 Authority Key Identifier:
keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:32:e6:5d:dc:65:3d:b2:37:1e:ed:77:a5:a9:98:28:3c:2f:
de:f1:ab:9e:2f:1c:ab:35:e5:2e:f5:c7:f0:c1:c0:bd:2e:04:
3c:8a:f4:d5:67:fa:83:f1:1e:13:b6:87:79:68:9b:97:6d:f6:
00:9b:f7:75:99:1f:f0:01:70:0b:d6:27:e0:1d:9f:78:ab:a4:
44:e4:b7:15:0b:61:74:21:d8:91:f7:16:c9:7d:91:cc:78:bc:
a6:a4:61:73:ee:8c:14:8b:84:8e:fb:14:0f:52:6d:bb:be:c0:
ba:a6:e2:16:2b:ec:09:61:87:77:52:e3:c6:d4:0a:24:fc:d8:
98:d0:da:5d:25:34:c5:1e:0b:65:66:bb:4c:71:00:d7:3e:1c:
54:19:d4:ad:14:7d:dd:86:e1:36:11:db:32:c0:59:58:67:4f:
0b:d9:02:54:d0:78:c7:f2:cc:ad:d3:ed:b9:17:bd:d4:93:a5:
10:b8:86:a8:91:22:6d:1d:17:78:74:b1:1c:03:a9:f7:ca:cb:
a8:59:e3:98:c3:de:41:90:aa:68:dd:c2:aa:1d:3c:a3:bb:ff:
dc:93:33:db:27:84:13:82:e1:14:cd:d2:97:45:67:18:a8:76:
62:c9:cb:27:12:88:c4:74:bd:06:d1:29:02:b5:10:8e:ab:fb:
60:81:d2:dd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIyMDIxMTAvBgNVBAUTKDhDQkU5REQ1OTkzNEM5QUQyMDVGQ0U2QUY4RUY0REI4
MDFGMUQzRUIwHhcNMjUxMjA3MDAxMjEzWhcNMjUxMjE0MDAxMjEzWjAYMRYwFAYD
VQQDEw02OTM0YzY1ZS1hZGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzavVyLu4nB2tSQMzlU77kcJy/Nj2Fd/FmYbS4WS+MJtZfzwL2ywFr7YPoB+y
qOZsr8s7Ynpuq/It5N9Vm0MePYESUiEZ1oiSWDhkdyZtBz7OZw6V/rPaHqN6hyNH
OD1rbaVoKiljMvcTZXEZvkMc3m21zErBHVTwNvpiPd4eVA1IGIP3qihh3WQN8rhb
yUiYus5gUL/ZyZbsGh5qJd3fAVZfkSRl7NtnhJIk5eY+be7JY0qEDLDwvzfDo6+/
Yfh/pSAXC5+hPz7+JKfu7GiZaDbOS0yw08k6JQc6hVzqZYA/yypBIdjN92lQ52oV
10OEKmSEJRhyW2UV+OiBFvnFNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbV9XCD
621iXKNFcolYn/dMXBeeMB8GA1UdIwQYMBaAFIy+ndWZNMmtIF/OavjvTbgB8dPr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjIwMi80RDQxQ0Y5MjQw
OUUxMUVEQjM1MkVFNUVDNEY5QUUwMi9qTDZkMVprMHlhMGdYODVxLU85TnVBSHgw
LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pMNmQxWmsweWEwZ1g4NXEtTzlOdUFIeDAtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjIwMi80RDQxQ0Y5MjQwOUUxMUVEQjM1MkVFNUVDNEY5QUUwMi9qTDZkMVprMHlh
MGdYODVxLU85TnVBSHgwLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfMuZd3GU9sjce7XelqZgoPC/e8aueLxyrNeUu9cfwwcC9LgQ8ivTV
Z/qD8R4Ttod5aJuXbfYAm/d1mR/wAXAL1ifgHZ94q6RE5LcVC2F0IdiR9xbJfZHM
eLympGFz7owUi4SO+xQPUm27vsC6puIWK+wJYYd3UuPG1Aok/NiY0NpdJTTFHgtl
ZrtMcQDXPhxUGdStFH3dhuE2EdsywFlYZ08L2QJU0HjH8syt0+25F73Uk6UQuIao
kSJtHRd4dLEcA6n3ysuoWeOYw95BkKpo3cKqHTyju//ckzPbJ4QTguEUzdKXRWcY
qHZiycsnEojEdL0G0SkCtRCOq/tggdLd
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:01:43 2025 by rpki-client