This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
File: fcUQye6vE3-r4XHlViRtskYeJxU.mft (raw, json)
Hash identifier: M46c9hHBTkyQBv42+7rVay07v5SdwTi8Jk7VKJ7JHD0=
Subject key identifier: 59:34:C0:2E:27:C3:E9:91:79:A1:F3:DC:A9:1F:49:6B:16:ED:47:D9
Authority key identifier: 7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15
Certificate issuer: /CN=A91645D3/serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715
Certificate serial: 07F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
Manifest number: 07F2
Signing time: Mon 08 Dec 2025 20:07:54 +0000
Manifest this update: Mon 08 Dec 2025 20:07:54 +0000
Manifest next update: Mon 15 Dec 2025 20:07:54 +0000
Files and hashes: 1: fcUQye6vE3-r4XHlViRtskYeJxU.crl (hash: e1igqKI74PPZwEj58tdn5ctiOMN2vof7LbEtAzDlaDA=)
2: 58DAB5900FF311EBB0C3265EC4F9AE02.roa (hash: /rykGvLbUlrN0XXQSSOg6Z/Y2O6GIy4F1RxGecU5aLc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl
rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Dec 2025 20:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041 (0x7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91645D3, serialNumber=7DC510C9EEAF137FABE171E556246DB2461E2715
Validity
Not Before: Dec 8 20:07:54 2025 GMT
Not After : Dec 15 20:07:54 2025 GMT
Subject: CN=6937301a-ceb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:ea:25:e8:e6:3b:98:77:fb:42:18:8a:ac:
7c:6f:5f:e2:f0:bb:d8:a1:12:f7:06:6b:fd:7d:4f:
8e:26:e3:94:a4:dc:59:48:e9:a3:34:c3:10:b1:d2:
44:a1:f8:3e:e0:f6:bd:fc:cd:2c:2b:ff:e7:7c:44:
9a:20:c1:ab:0f:6b:bb:f8:e8:7e:b3:b6:21:ed:c8:
67:74:77:c0:29:58:42:77:34:db:19:64:99:c3:89:
7e:4f:80:17:d8:bf:3e:64:b0:d4:29:d6:20:ae:33:
c2:fa:c6:8d:df:76:c4:33:1d:e7:ed:6d:9e:e4:86:
cb:bc:a4:e1:5e:5c:57:75:1e:84:a5:cf:c9:c3:17:
7b:32:b9:cd:8c:64:48:64:54:4f:e4:21:7e:e9:01:
da:88:d0:1b:10:cc:4c:a2:8d:46:59:20:4f:9e:77:
f4:cf:60:9b:2c:08:aa:e7:c3:c2:9a:ef:da:2e:32:
01:30:d3:a0:75:45:9f:e0:f4:f7:fa:25:70:dd:17:
1f:ad:cb:97:6c:83:54:e2:8b:6c:ef:f2:21:95:29:
55:b3:4f:25:03:4a:85:aa:3a:05:a9:26:4b:69:2c:
83:82:b5:ef:59:83:5e:df:7a:78:91:27:f4:b0:8c:
c2:4b:d0:4a:95:be:51:7f:ef:c6:55:26:b9:49:7c:
c6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:34:C0:2E:27:C3:E9:91:79:A1:F3:DC:A9:1F:49:6B:16:ED:47:D9
X509v3 Authority Key Identifier:
keyid:7D:C5:10:C9:EE:AF:13:7F:AB:E1:71:E5:56:24:6D:B2:46:1E:27:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcUQye6vE3-r4XHlViRtskYeJxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91645D3/7620BC0C0C2011EB8AE6394DC4F9AE02/fcUQye6vE3-r4XHlViRtskYeJxU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f8:93:6e:b0:a9:1a:44:bf:99:2e:e1:29:be:8e:02:2a:53:
42:a5:26:c7:53:8e:9b:de:fb:3a:07:9d:a4:84:93:6d:21:10:
c8:ab:18:0f:a4:eb:11:ba:d0:db:18:89:6a:df:a8:c9:d6:90:
49:13:71:76:78:bb:be:07:d1:41:71:82:0f:7e:e4:80:8f:ab:
e9:24:bc:dc:c9:11:04:59:df:ce:ae:84:82:6b:aa:11:62:08:
fb:c4:04:54:c2:35:26:79:59:d4:6f:94:20:11:a6:ab:a4:f4:
89:61:af:b0:fc:e3:1b:c9:97:ed:e4:ef:14:4c:4a:60:b4:aa:
a4:a5:7c:88:d9:fa:2a:d4:c9:f5:b6:11:46:c5:c5:1e:3a:13:
7a:4c:7e:5e:29:d1:7f:fa:82:96:b9:ff:1f:92:4e:92:f1:ce:
fa:3f:c2:12:11:f6:80:6b:e3:c8:82:c3:1f:fd:c6:30:d7:f9:
9e:77:91:2b:84:60:6b:9a:93:19:74:b8:41:8c:ee:4d:d3:c0:
a5:0d:03:02:88:8e:38:85:f7:24:6e:86:27:3e:6e:6a:16:55:
af:ae:45:8b:57:42:4c:07:21:fc:65:72:c1:7b:b3:0c:2d:41:
f5:0b:3c:b3:f7:e7:0a:e4:33:a6:b2:15:11:aa:bd:f0:d5:60:
e1:f7:3d:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjQ1RDMxMTAvBgNVBAUTKDdEQzUxMEM5RUVBRjEzN0ZBQkUxNzFFNTU2MjQ2REIy
NDYxRTI3MTUwHhcNMjUxMjA4MjAwNzU0WhcNMjUxMjE1MjAwNzU0WjAYMRYwFAYD
VQQDEw02OTM3MzAxYS1jZWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApu/qJejmO5h3+0IYiqx8b1/i8LvYoRL3Bmv9fU+OJuOUpNxZSOmjNMMQsdJE
ofg+4Pa9/M0sK//nfESaIMGrD2u7+Oh+s7Yh7chndHfAKVhCdzTbGWSZw4l+T4AX
2L8+ZLDUKdYgrjPC+saN33bEMx3n7W2e5IbLvKThXlxXdR6Epc/Jwxd7MrnNjGRI
ZFRP5CF+6QHaiNAbEMxMoo1GWSBPnnf0z2CbLAiq58PCmu/aLjIBMNOgdUWf4PT3
+iVw3RcfrcuXbINU4ots7/IhlSlVs08lA0qFqjoFqSZLaSyDgrXvWYNe33p4kSf0
sIzCS9BKlb5Rf+/GVSa5SXzGxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFk0wC4n
w+mReaHz3KkfSWsW7UfZMB8GA1UdIwQYMBaAFH3FEMnurxN/q+Fx5VYkbbJGHicV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDVEMy83NjIwQkMwQzBD
MjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUzLXI0WEhsVmlSdHNrWWVK
eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZjVVF5ZTZ2RTMtcjRYSGxWaVJ0c2tZZUp4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NDVEMy83NjIwQkMwQzBDMjAxMUVCOEFFNjM5NERDNEY5QUUwMi9mY1VReWU2dkUz
LXI0WEhsVmlSdHNrWWVKeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDG+JNusKkaRL+ZLuEpvo4CKlNCpSbHU46b3vs6B52khJNtIRDIqxgP
pOsRutDbGIlq36jJ1pBJE3F2eLu+B9FBcYIPfuSAj6vpJLzcyREEWd/OroSCa6oR
Ygj7xARUwjUmeVnUb5QgEaarpPSJYa+w/OMbyZft5O8UTEpgtKqkpXyI2foq1Mn1
thFGxcUeOhN6TH5eKdF/+oKWuf8fkk6S8c76P8ISEfaAa+PIgsMf/cYw1/med5Er
hGBrmpMZdLhBjO5N08ClDQMCiI44hfckboYnPm5qFlWvrkWLV0JMByH8ZXLBe7MM
LUH1Czyz9+cK5DOmshURqr3w1WDh9z1m
-----END CERTIFICATE-----
Generated at Wed Dec 10 05:30:19 2025 by rpki-client