This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
File: rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft (raw, json)
Hash identifier: Jp+A+wP5ab7RrlGaW05WiiMQMzjfAs3iM1vmd62czzg=
Subject key identifier: 2B:DD:7B:D3:AF:5B:48:1E:4D:81:0A:74:0C:0D:BB:85:C8:46:B2:B7
Authority key identifier: AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
Certificate issuer: /CN=A917799C/serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Certificate serial: 52
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
Manifest number: 51
Signing time: Wed 03 Dec 2025 05:26:14 +0000
Manifest this update: Wed 03 Dec 2025 05:26:14 +0000
Manifest next update: Wed 10 Dec 2025 05:26:14 +0000
Files and hashes: 1: rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl (hash: ZdkaBuskNSnVr18icEViGbHLdWhKyjoa+eVT6MjivZI=)
2: 1A10CA38554511F0BE9D290EC4F9AE02.roa (hash: +cgq7m1m+3yCjZbwy4Qcjluah/ZFibIuVd5FM/B6ZOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 05:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82 (0x52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917799C, serialNumber=AD070240293ACDC524CA1336582D70C219FCC7E0
Validity
Not Before: Dec 3 05:26:14 2025 GMT
Not After : Dec 10 05:26:14 2025 GMT
Subject: CN=692fc9f6-dc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:96:2a:84:93:ee:4c:4a:5b:f4:b1:fb:cf:00:
c2:8c:7e:b0:67:63:46:e6:12:69:ed:27:73:10:a0:
f3:c5:71:1a:16:3b:14:69:4c:a9:bf:eb:a5:5b:11:
47:d5:6a:2f:df:6f:9f:68:68:56:b1:34:3f:e3:79:
87:96:ab:b6:7a:51:b8:5f:c1:3d:f3:d2:63:1e:6d:
2a:41:1d:4d:1d:d3:87:44:c7:d0:fc:67:c2:c7:33:
73:91:74:b9:5c:c5:17:0d:76:c3:90:79:b5:b9:8a:
7e:c9:84:d9:8c:36:75:69:86:b6:1e:3f:6e:b9:16:
23:98:87:98:9d:37:12:af:c8:00:bd:43:8b:3a:19:
1f:1d:d2:b9:24:92:b9:7d:b6:5e:6a:80:31:08:fe:
8c:b4:f8:b5:c8:b1:f2:58:e6:24:48:e5:75:a8:ad:
8d:3c:af:b5:e2:ca:71:5b:9a:58:91:6a:9b:0c:6e:
a4:f6:aa:15:bb:1c:9d:7e:b8:2e:c6:21:34:46:0c:
4d:cd:b3:0c:00:2f:f6:76:5c:9d:59:c5:a1:ef:f6:
ee:ab:ba:b4:f3:b3:69:71:c7:f4:ab:b0:52:9c:2b:
fa:6c:6a:76:db:39:a8:f6:82:b4:9c:73:be:9a:38:
16:a4:4a:70:ee:b7:f1:d3:b7:1c:ec:f2:b2:ac:4f:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:7B:D3:AF:5B:48:1E:4D:81:0A:74:0C:0D:BB:85:C8:46:B2:B7
X509v3 Authority Key Identifier:
keyid:AD:07:02:40:29:3A:CD:C5:24:CA:13:36:58:2D:70:C2:19:FC:C7:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQcCQCk6zcUkyhM2WC1wwhn8x-A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/2D335E6A554411F09342AC0CC4F9AE02/rQcCQCk6zcUkyhM2WC1wwhn8x-A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b9:e7:53:bb:a5:9f:73:cb:34:a7:a8:6d:73:28:e5:a9:6b:
1c:19:5b:af:87:d7:88:82:04:84:07:ab:19:a4:68:c9:20:a0:
65:26:c5:cd:53:07:53:d0:78:98:c7:51:d8:51:f8:94:b4:0f:
5b:1b:d1:38:23:0b:a4:41:91:c3:c8:12:62:b9:e8:a6:d5:96:
c9:b6:1c:23:2f:b0:37:10:ba:1a:5b:b8:05:f6:3b:95:16:3d:
31:3a:05:8a:67:48:d4:73:20:1b:2d:fe:4b:90:7f:85:06:e3:
4a:b2:24:ff:0a:20:fd:00:2e:37:d7:95:ad:14:81:62:9c:bc:
b6:ef:cf:0b:0b:53:24:10:83:f6:e7:6c:bb:11:75:c1:0b:02:
4b:e3:7b:3c:7e:d4:4b:9d:88:15:72:57:ac:08:14:65:c1:93:
3f:d4:3e:77:8d:66:30:dd:6f:fd:49:0c:ef:77:b3:cd:73:85:
f2:a8:f0:77:0f:cc:2d:a7:3b:00:ce:61:e3:e3:b0:fe:5a:24:
d9:8f:8b:c8:85:dd:5b:d6:33:f0:e9:93:5b:3b:89:4c:9d:81:
61:ce:91:7a:32:78:96:5e:d1:84:5c:5c:fc:7d:ca:aa:a2:df:
8b:b3:bd:16:ef:27:66:4a:f4:b0:24:36:e5:72:f3:b6:f4:b4:
84:55:40:62
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
Nzk5QzExMC8GA1UEBRMoQUQwNzAyNDAyOTNBQ0RDNTI0Q0ExMzM2NTgyRDcwQzIx
OUZDQzdFMDAeFw0yNTEyMDMwNTI2MTRaFw0yNTEyMTAwNTI2MTRaMBgxFjAUBgNV
BAMTDTY5MmZjOWY2LWRjODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUliqEk+5MSlv0sfvPAMKMfrBnY0bmEmntJ3MQoPPFcRoWOxRpTKm/66VbEUfV
ai/fb59oaFaxND/jeYeWq7Z6UbhfwT3z0mMebSpBHU0d04dEx9D8Z8LHM3ORdLlc
xRcNdsOQebW5in7JhNmMNnVphrYeP265FiOYh5idNxKvyAC9Q4s6GR8d0rkkkrl9
tl5qgDEI/oy0+LXIsfJY5iRI5XWorY08r7XiynFbmliRapsMbqT2qhW7HJ1+uC7G
ITRGDE3NswwAL/Z2XJ1ZxaHv9u6rurTzs2lxx/SrsFKcK/psanbbOaj2grScc76a
OBakSnDut/HTtxzs8rKsT+VFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK917069b
SB5NgQp0DA27hchGsrcwHwYDVR0jBBgwFoAUrQcCQCk6zcUkyhM2WC1wwhn8x+Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3OTlDLzJEMzM1RTZBNTU0
NDExRjA5MzQyQUMwQ0M0RjlBRTAyL3JRY0NRQ2s2emNVa3loTTJXQzF3d2huOHgt
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvclFjQ1FDazZ6Y1VreWhNMldDMXd3aG44eC1BLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3
OTlDLzJEMzM1RTZBNTU0NDExRjA5MzQyQUMwQ0M0RjlBRTAyL3JRY0NRQ2s2emNV
a3loTTJXQzF3d2huOHgtQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAG6551O7pZ9zyzSnqG1zKOWpaxwZW6+H14iCBIQHqxmkaMkgoGUmxc1T
B1PQeJjHUdhR+JS0D1sb0TgjC6RBkcPIEmK56KbVlsm2HCMvsDcQuhpbuAX2O5UW
PTE6BYpnSNRzIBst/kuQf4UG40qyJP8KIP0ALjfXla0UgWKcvLbvzwsLUyQQg/bn
bLsRdcELAkvjezx+1EudiBVyV6wIFGXBkz/UPneNZjDdb/1JDO93s81zhfKo8HcP
zC2nOwDOYePjsP5aJNmPi8iF3VvWM/Dpk1s7iUydgWHOkXoyeJZe0YRcXPx9yqqi
34uzvRbvJ2ZK9LAkNuVy87b0tIRVQGI=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:31 2025 by rpki-client