This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
File: n0OyarpyjoL2JjN_omUh-Oafu8s.mft (raw, json)
Hash identifier: VnRIfo4dA6PrUWj7CvAQpuyLOKZxx3VpR6crOkqpF0k=
Subject key identifier: 21:60:3C:C0:7D:A8:FE:28:37:2C:3E:BF:CB:F5:FA:7F:2B:CC:9C:B7
Authority key identifier: 9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB
Certificate issuer: /CN=A917EB41/serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
Certificate serial: 02D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
Manifest number: 02CE
Signing time: Tue 23 Dec 2025 00:24:47 +0000
Manifest this update: Tue 23 Dec 2025 00:24:47 +0000
Manifest next update: Tue 30 Dec 2025 00:24:47 +0000
Files and hashes: 1: n0OyarpyjoL2JjN_omUh-Oafu8s.crl (hash: FfmM8Fz/5pqDYGFEoQ7CA0VhS+k8A0+CM/+GfvoWE68=)
2: 22D1D50A58BC11ED96790F65C4F9AE02.roa (hash: 2pEt0xXsYxk6tYBoEReVG3YbGtxVL1xpYQ5ON1fpVho=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl
rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729 (0x2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EB41, serialNumber=9F43B26ABA728E82F626337FA26521F8E69FBBCB
Validity
Not Before: Dec 23 00:24:47 2025 GMT
Not After : Dec 30 00:24:47 2025 GMT
Subject: CN=6949e14f-e1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:0e:d0:d5:dd:09:bc:ac:cb:a0:6f:5c:cd:
e6:cc:e0:c4:c7:90:8f:4b:98:45:de:ac:bf:cd:7a:
ce:ab:f4:46:fe:d0:0f:23:c7:56:35:0d:b2:87:07:
e3:95:05:fb:47:26:09:06:ea:ff:01:1d:d9:0f:4a:
98:4c:20:e2:d6:fe:89:f2:df:37:51:db:9a:c8:ed:
fa:79:21:26:ff:0d:27:b7:70:64:ed:8a:95:25:ac:
3a:5a:b4:0d:99:11:fa:ea:75:3b:6d:b8:9e:c4:8f:
d2:0a:e5:ea:e7:c4:5c:75:22:8a:8f:7d:74:2c:94:
e3:bd:39:f2:54:ca:63:3d:54:1d:9f:3f:5b:55:c8:
23:13:58:79:9d:e5:c5:20:c0:58:75:8e:46:84:30:
36:79:21:13:ae:e5:b3:ed:8c:ad:58:30:2a:3b:4c:
0e:4a:b7:08:68:ca:ab:d5:92:94:eb:71:21:72:41:
60:ca:4e:25:db:aa:d2:d1:43:a2:86:7f:51:59:d3:
b3:22:86:93:91:ae:b7:dd:d2:3e:bf:bc:f7:a4:2d:
41:ed:6c:93:69:72:8d:a0:41:67:19:42:b4:63:b3:
11:5c:d3:f7:75:5b:00:6c:31:4d:d3:f5:7e:88:53:
05:4f:4f:f3:63:9e:84:46:a5:7c:81:c7:8b:05:93:
76:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:60:3C:C0:7D:A8:FE:28:37:2C:3E:BF:CB:F5:FA:7F:2B:CC:9C:B7
X509v3 Authority Key Identifier:
keyid:9F:43:B2:6A:BA:72:8E:82:F6:26:33:7F:A2:65:21:F8:E6:9F:BB:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n0OyarpyjoL2JjN_omUh-Oafu8s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EB41/18D7955617BE11ED8B325938C4F9AE02/n0OyarpyjoL2JjN_omUh-Oafu8s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:0f:87:25:85:de:4c:ca:c8:f1:3f:d2:06:73:b1:f9:52:f4:
6a:21:03:97:8f:7f:94:fd:01:c0:94:77:06:e0:bc:5e:f3:f1:
0c:3d:65:17:9f:5c:52:7e:10:8e:03:ac:b4:b3:fc:c8:34:9d:
3d:2d:23:c9:98:03:05:35:d7:cf:f4:b4:38:f9:9f:3f:67:cf:
c2:38:ba:02:3e:4c:7a:b7:69:29:66:02:30:7c:44:64:f0:6b:
fa:44:a8:39:95:95:2a:03:3e:74:c3:a8:ab:ba:4d:f2:c1:a3:
f2:65:3e:cf:22:a0:36:b4:82:79:e5:74:66:7a:6f:0a:05:80:
f9:f9:a2:e7:b3:59:f8:a2:65:54:54:27:b5:27:84:50:de:d6:
a6:e1:c0:a5:11:0a:04:d7:f2:3d:88:6f:1a:cc:1b:90:40:6b:
5b:75:cb:5f:cf:bb:55:82:58:d5:a2:a6:b3:28:9e:9c:10:5a:
38:92:1e:ce:40:c0:1b:08:53:0c:c1:aa:14:b7:57:90:df:43:
4e:8d:bc:7a:40:dc:4f:81:10:45:1f:87:c4:cd:df:d5:50:f7:
a7:f4:3a:3a:59:97:f5:fa:81:36:a6:ca:b3:22:3d:d7:59:3b:
f8:bd:d3:bf:95:5e:9a:e9:0e:65:f1:30:3d:2e:e2:c5:48:cf:
f6:37:24:8e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VCNDExMTAvBgNVBAUTKDlGNDNCMjZBQkE3MjhFODJGNjI2MzM3RkEyNjUyMUY4
RTY5RkJCQ0IwHhcNMjUxMjIzMDAyNDQ3WhcNMjUxMjMwMDAyNDQ3WjAYMRYwFAYD
VQQDDA02OTQ5ZTE0Zi1lMWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr90O0NXdCbysy6BvXM3mzODEx5CPS5hF3qy/zXrOq/RG/tAPI8dWNQ2yhwfj
lQX7RyYJBur/AR3ZD0qYTCDi1v6J8t83UduayO36eSEm/w0nt3Bk7YqVJaw6WrQN
mRH66nU7bbiexI/SCuXq58RcdSKKj310LJTjvTnyVMpjPVQdnz9bVcgjE1h5neXF
IMBYdY5GhDA2eSETruWz7YytWDAqO0wOSrcIaMqr1ZKU63EhckFgyk4l26rS0UOi
hn9RWdOzIoaTka633dI+v7z3pC1B7WyTaXKNoEFnGUK0Y7MRXNP3dVsAbDFN0/V+
iFMFT0/zY56ERqV8gceLBZN2wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFgPMB9
qP4oNyw+v8v1+n8rzJy3MB8GA1UdIwQYMBaAFJ9Dsmq6co6C9iYzf6JlIfjmn7vL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUI0MS8xOEQ3OTU1NjE3
QkUxMUVEOEIzMjU5MzhDNEY5QUUwMi9uME95YXJweWpvTDJKak5fb21VaC1PYWZ1
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL24wT3lhcnB5am9MMkpqTl9vbVVoLU9hZnU4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUI0MS8xOEQ3OTU1NjE3QkUxMUVEOEIzMjU5MzhDNEY5QUUwMi9uME95YXJweWpv
TDJKak5fb21VaC1PYWZ1OHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABD4clhd5MysjxP9IGc7H5UvRqIQOXj3+U/QHAlHcG4Lxe8/EMPWUX
n1xSfhCOA6y0s/zINJ09LSPJmAMFNdfP9LQ4+Z8/Z8/COLoCPkx6t2kpZgIwfERk
8Gv6RKg5lZUqAz50w6iruk3ywaPyZT7PIqA2tIJ55XRmem8KBYD5+aLns1n4omVU
VCe1J4RQ3tam4cClEQoE1/I9iG8azBuQQGtbdctfz7tVgljVoqazKJ6cEFo4kh7O
QMAbCFMMwaoUt1eQ30NOjbx6QNxPgRBFH4fEzd/VUPen9Do6WZf1+oE2psqzIj3X
WTv4vdO/lV6a6Q5l8TA9LuLFSM/2NySO
-----END CERTIFICATE-----
Generated at Tue Dec 23 13:08:26 2025 by rpki-client