This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
File: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft (raw, json)
Hash identifier: I9dvCO2S1tPfu//5NiN+gNPr7I0lxKFriK8JIWByo/s=
Subject key identifier: 08:51:32:AF:39:52:92:03:13:96:D0:09:57:DE:B2:1D:63:1F:D8:F0
Authority key identifier: 3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
Certificate issuer: /CN=A917AB94/serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Certificate serial: 0319
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
Manifest number: 0313
Signing time: Tue 23 Dec 2025 00:08:35 +0000
Manifest this update: Tue 23 Dec 2025 00:08:35 +0000
Manifest next update: Tue 30 Dec 2025 00:08:35 +0000
Files and hashes: 1: PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl (hash: pIu1EHxNyDQJWyz0sKqjpxzz9sy3ORTrQbEiy8VfQag=)
2: 865AA3E400FC11EDAA69A61DC4F9AE02.roa (hash: lRZm7R1XzhUUnYkMhnYwCmY95i90cE75koEdjvOdBVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 793 (0x319)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AB94, serialNumber=3D3EE4E055C4E0F1FD5B17BCDF05D9F852CF05BC
Validity
Not Before: Dec 23 00:08:35 2025 GMT
Not After : Dec 30 00:08:35 2025 GMT
Subject: CN=6949dd83-a5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:d8:6c:02:54:75:0a:05:6c:03:e8:9e:b7:
ac:ae:27:d6:5c:c4:c6:e2:f2:ad:85:e7:26:d7:b1:
08:be:43:12:04:f3:5d:e2:d9:12:9c:64:15:3d:62:
8e:ba:ad:f4:09:e5:18:de:78:5c:f3:a9:50:bd:77:
e6:2b:6d:0e:4c:76:94:c5:65:54:bc:6b:44:27:76:
af:6a:18:fa:bd:56:c5:fc:87:e8:7b:df:17:28:83:
41:af:f6:12:28:e7:c2:ae:e9:51:b2:c7:42:53:3a:
f1:d0:be:b5:fa:bb:cf:26:85:32:fa:09:90:ee:67:
7f:ba:6b:45:92:da:d2:d4:15:25:71:aa:7a:03:2a:
1e:4f:a1:b5:ca:59:51:f0:75:dc:44:7c:ee:6f:6d:
2d:6c:90:b7:22:f9:cd:c5:61:5e:cd:12:6e:e2:4a:
e3:81:ea:2b:f7:cd:61:75:ad:13:d1:6d:de:8e:06:
80:11:b9:76:d2:81:f5:1a:90:60:c2:32:42:f2:a0:
31:98:2b:88:b6:e6:32:21:25:c5:45:cf:6c:7e:f6:
57:6f:05:59:37:c0:88:3c:19:c3:19:f6:63:28:ef:
9e:ec:13:d6:c6:7a:8d:65:2a:44:4d:89:9c:4d:50:
9b:a4:e9:de:21:7c:75:7e:82:5c:70:7f:80:41:b3:
6d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:51:32:AF:39:52:92:03:13:96:D0:09:57:DE:B2:1D:63:1F:D8:F0
X509v3 Authority Key Identifier:
keyid:3D:3E:E4:E0:55:C4:E0:F1:FD:5B:17:BC:DF:05:D9:F8:52:CF:05:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB94/D2BF6B72FB8711EC972BCE13C4F9AE02/PT7k4FXE4PH9Wxe83wXZ-FLPBbw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:51:c8:b6:c6:59:27:5e:c0:d5:75:a1:47:59:d8:a5:ca:56:
b1:e0:93:dc:32:23:ac:2a:21:9f:14:15:7b:32:cd:be:5f:09:
06:61:fb:5a:4f:b7:32:dc:89:f2:32:e9:a3:57:cc:f2:4a:db:
9e:d1:85:2f:4c:14:5a:51:48:2e:e9:68:bd:6b:95:36:3a:4f:
3f:2b:f7:24:33:11:bd:81:45:7c:e4:e1:cb:a4:4b:f3:43:c3:
a0:20:7d:6a:59:d5:f1:1a:d1:b2:bf:0c:53:99:ca:d6:2b:91:
02:1f:76:2b:1b:a9:5f:38:25:ba:2e:f7:fc:7c:20:5e:41:68:
c7:00:ab:c9:c5:82:b0:c1:f4:91:14:29:2e:3e:27:be:ee:7c:
d7:3d:01:16:3a:0f:f5:b9:4b:56:d0:66:a9:17:52:ff:53:47:
ec:16:10:52:05:07:87:9e:68:38:e5:e6:1d:f3:a4:53:65:03:
42:3b:65:e7:a2:b0:3f:37:14:eb:b5:63:34:05:7a:c6:35:a1:
fd:cf:0c:eb:ef:65:91:1a:d4:41:a2:30:02:45:18:23:0c:4b:
57:0e:f8:6e:27:4b:d9:7f:43:e1:5a:43:ba:8f:a3:d7:69:72:
40:ab:8a:ac:f2:e1:97:81:ea:37:6f:8f:47:f3:6f:79:2d:b8:
83:2c:d3:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FCOTQxMTAvBgNVBAUTKDNEM0VFNEUwNTVDNEUwRjFGRDVCMTdCQ0RGMDVEOUY4
NTJDRjA1QkMwHhcNMjUxMjIzMDAwODM1WhcNMjUxMjMwMDAwODM1WjAYMRYwFAYD
VQQDDA02OTQ5ZGQ4My1hNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAofPYbAJUdQoFbAPonresrifWXMTG4vKthecm17EIvkMSBPNd4tkSnGQVPWKO
uq30CeUY3nhc86lQvXfmK20OTHaUxWVUvGtEJ3avahj6vVbF/Ifoe98XKINBr/YS
KOfCrulRssdCUzrx0L61+rvPJoUy+gmQ7md/umtFktrS1BUlcap6AyoeT6G1yllR
8HXcRHzub20tbJC3IvnNxWFezRJu4krjgeor981hda0T0W3ejgaAEbl20oH1GpBg
wjJC8qAxmCuItuYyISXFRc9sfvZXbwVZN8CIPBnDGfZjKO+e7BPWxnqNZSpETYmc
TVCbpOneIXx1foJccH+AQbNtfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhRMq85
UpIDE5bQCVfesh1jH9jwMB8GA1UdIwQYMBaAFD0+5OBVxODx/VsXvN8F2fhSzwW8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUI5NC9EMkJGNkI3MkZC
ODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQSDlXeGU4M3dYWi1GTFBC
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BUN2s0RlhFNFBIOVd4ZTgzd1haLUZMUEJidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QUI5NC9EMkJGNkI3MkZCODcxMUVDOTcyQkNFMTNDNEY5QUUwMi9QVDdrNEZYRTRQ
SDlXeGU4M3dYWi1GTFBCYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMUci2xlknXsDVdaFHWdilylax4JPcMiOsKiGfFBV7Ms2+XwkGYfta
T7cy3InyMumjV8zyStue0YUvTBRaUUgu6Wi9a5U2Ok8/K/ckMxG9gUV85OHLpEvz
Q8OgIH1qWdXxGtGyvwxTmcrWK5ECH3YrG6lfOCW6Lvf8fCBeQWjHAKvJxYKwwfSR
FCkuPie+7nzXPQEWOg/1uUtW0GapF1L/U0fsFhBSBQeHnmg45eYd86RTZQNCO2Xn
orA/NxTrtWM0BXrGNaH9zwzr72WRGtRBojACRRgjDEtXDvhuJ0vZf0PhWkO6j6PX
aXJAq4qs8uGXgeo3b49H8295LbiDLNNc
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:15 2025 by rpki-client