This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
File: sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft (raw, json)
Hash identifier: MyfBSt7gYzf3Rtukg2YaeblLVzPWEoxOx99lY3fCrOw=
Subject key identifier: F7:3B:ED:4A:CF:6E:DB:19:9D:AC:F7:AF:DC:5E:17:D5:13:BC:A3:26
Authority key identifier: B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE
Certificate issuer: /CN=A9176E5A/serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE
Certificate serial: 40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
Manifest number: 3E
Signing time: Tue 23 Dec 2025 06:18:20 +0000
Manifest this update: Tue 23 Dec 2025 06:18:20 +0000
Manifest next update: Tue 30 Dec 2025 06:18:20 +0000
Files and hashes: 1: sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl (hash: AYKzjldl1VsGFUBFRhPu2n2Om9VBlThP3gms44+XIcA=)
2: D9624ED082FD11F088ACD36DC4F9AE02.roa (hash: NrJHBRqQxYOPdzAqys1Jg3BONQuPBEcjFnMs2wyt5rM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl
rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64 (0x40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176E5A, serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE
Validity
Not Before: Dec 23 06:18:20 2025 GMT
Not After : Dec 30 06:18:20 2025 GMT
Subject: CN=694a342c-5d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:90:93:a6:7d:3e:69:b4:eb:e8:e2:45:54:
43:52:1e:47:e3:50:2a:bc:e4:b4:48:30:33:08:a5:
bc:e7:88:11:6f:28:8e:a3:fc:99:7a:59:b0:69:e7:
85:e6:cc:18:49:6f:e7:00:79:db:61:c7:fd:b1:28:
14:2b:4e:f8:90:a4:dc:c2:80:ae:0b:57:fd:5e:d8:
3e:f8:3a:e4:53:8f:51:c1:b2:11:9a:42:38:f3:01:
bb:ac:f4:af:24:8e:04:45:45:cb:27:7f:54:ef:ae:
7b:1c:c3:38:d1:0b:83:66:c2:1b:15:3f:34:f7:22:
33:a3:17:eb:14:5b:7b:b9:0a:3b:cf:92:be:e2:03:
e8:10:8e:03:cf:4c:e1:f2:cb:1b:6a:a7:60:25:aa:
7f:2f:66:57:6d:98:19:34:09:11:11:7a:db:e5:d2:
44:c8:c8:21:99:08:da:1e:9c:d4:dc:3a:26:da:0d:
3f:b9:4c:a4:de:90:41:cf:20:b3:52:76:a6:c8:bf:
6a:c4:69:3c:f7:1b:18:54:d9:5e:ff:71:f4:12:aa:
60:d7:ed:09:ea:1b:a9:1f:5e:06:31:24:29:69:4a:
a1:33:67:82:0d:b6:b0:00:1b:76:a5:2f:aa:e0:72:
3a:96:dd:78:86:61:a1:7c:a1:8a:2a:34:13:cc:10:
4d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3B:ED:4A:CF:6E:DB:19:9D:AC:F7:AF:DC:5E:17:D5:13:BC:A3:26
X509v3 Authority Key Identifier:
keyid:B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d3:c0:49:b2:53:60:90:68:13:ab:c9:3d:7c:60:b8:87:ff:
c6:81:bc:c0:c4:a4:f8:c5:43:bd:e0:c5:32:f3:a5:8c:26:f0:
62:59:20:de:8e:ab:e6:27:46:32:81:e0:7e:da:21:3c:a8:a8:
ab:cc:46:3d:ad:f8:5c:2f:3a:cf:8d:b4:91:d3:4b:05:89:d2:
9b:64:43:49:a5:fc:33:59:fe:64:72:0f:73:2d:99:3d:8f:d4:
cb:22:4d:1a:43:eb:f4:76:55:da:e4:c3:04:e5:0c:50:1e:dd:
c4:fb:72:bf:7f:22:9d:93:59:37:55:6c:45:34:8e:8b:ea:7f:
d9:d0:c5:39:68:2b:48:27:ae:3b:c7:e3:09:03:da:be:84:1c:
5f:24:bb:fa:e3:79:0b:bd:c3:04:87:7a:6e:1d:51:19:d3:c3:
f1:17:b9:ea:1e:9d:3a:de:87:fb:80:7f:c5:30:38:5f:34:89:
b1:7c:9b:5f:14:a2:8e:71:84:2f:df:ca:78:08:dc:b0:57:8c:
1a:e1:54:f3:22:6c:f7:20:0a:79:0a:49:b0:8e:88:a7:eb:80:
0d:71:48:db:70:dc:5b:a2:0c:4b:f8:5d:91:52:ba:8c:b4:1c:
53:b2:8c:92:bf:8b:7b:9a:b8:6c:65:ad:ba:48:16:96:5b:f2:
5e:c7:89:a8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NkU1QTExMC8GA1UEBRMoQjE1MjRGQkU0NjVGRTRGQjk5RkU2MTFERkMwNDBGNTEw
QzExNjhGRTAeFw0yNTEyMjMwNjE4MjBaFw0yNTEyMzAwNjE4MjBaMBgxFjAUBgNV
BAMMDTY5NGEzNDJjLTVkMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVv5CTpn0+abTr6OJFVENSHkfjUCq85LRIMDMIpbzniBFvKI6j/Jl6WbBp54Xm
zBhJb+cAedthx/2xKBQrTviQpNzCgK4LV/1e2D74OuRTj1HBshGaQjjzAbus9K8k
jgRFRcsnf1TvrnscwzjRC4NmwhsVPzT3IjOjF+sUW3u5CjvPkr7iA+gQjgPPTOHy
yxtqp2Alqn8vZldtmBk0CRERetvl0kTIyCGZCNoenNTcOibaDT+5TKTekEHPILNS
dqbIv2rEaTz3GxhU2V7/cfQSqmDX7QnqG6kfXgYxJClpSqEzZ4INtrAAG3alL6rg
cjqW3XiGYaF8oYoqNBPMEE0XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9zvtSs9u
2xmdrPev3F4X1RO8oyYwHwYDVR0jBBgwFoAUsVJPvkZf5PuZ/mEd/AQPUQwRaP4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RTVBLzgwMzc5ODM4ODJG
RDExRjBBRTBGODc2QUM0RjlBRTAyL3NWSlB2a1pmNVB1Wl9tRWRfQVFQVVF3UmFQ
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvc1ZKUHZrWmY1UHVaX21FZF9BUVBVUXdSYVA0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2
RTVBLzgwMzc5ODM4ODJGRDExRjBBRTBGODc2QUM0RjlBRTAyL3NWSlB2a1pmNVB1
Wl9tRWRfQVFQVVF3UmFQNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKPTwEmyU2CQaBOryT18YLiH/8aBvMDEpPjFQ73gxTLzpYwm8GJZIN6O
q+YnRjKB4H7aITyoqKvMRj2t+FwvOs+NtJHTSwWJ0ptkQ0ml/DNZ/mRyD3MtmT2P
1MsiTRpD6/R2VdrkwwTlDFAe3cT7cr9/Ip2TWTdVbEU0jovqf9nQxTloK0gnrjvH
4wkD2r6EHF8ku/rjeQu9wwSHem4dURnTw/EXueoenTreh/uAf8UwOF80ibF8m18U
oo5xhC/fyngI3LBXjBrhVPMibPcgCnkKSbCOiKfrgA1xSNtw3FuiDEv4XZFSuoy0
HFOyjJK/i3uauGxlrbpIFpZb8l7Hiag=
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:40:31 2025 by rpki-client