This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
File: cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json)
Hash identifier: BVNclyTCJLVouB0WLLoWgr2+dTGchzCQou3lOLwmvJw=
Subject key identifier: C5:4F:8E:B8:E3:50:99:B0:D6:01:96:F7:24:F6:23:52:62:65:2C:62
Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A
Certificate issuer: /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
Manifest number: 017E
Signing time: Tue 23 Dec 2025 02:53:05 +0000
Manifest this update: Tue 23 Dec 2025 02:53:05 +0000
Manifest next update: Tue 30 Dec 2025 02:53:05 +0000
Files and hashes: 1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: K0g7BxDhlrpPCkPLW/UVDryu6w4KPzeLGYW3c2e+WF0=)
2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: /r8zkPpv2X5SfBxbvGoAdJxHIR9dMbvXa2kBS0bQC9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl
rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91805CE, serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A
Validity
Not Before: Dec 23 02:53:05 2025 GMT
Not After : Dec 30 02:53:05 2025 GMT
Subject: CN=694a0411-16f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:ee:7b:87:cb:d3:c1:ec:e2:31:86:49:e2:
48:b7:eb:b9:b5:34:9c:93:60:89:1b:d8:e7:43:71:
24:b6:72:29:1b:81:95:f3:71:06:53:eb:b8:06:09:
3d:db:2d:2f:09:ce:67:a7:0d:df:91:67:af:52:e8:
d5:54:fa:52:2b:64:53:64:d3:84:65:3f:7e:3e:8f:
39:c8:65:a5:14:b1:4a:3a:19:ca:5a:e9:fe:c2:3a:
78:85:9d:6a:f0:32:57:de:f1:16:1b:82:4c:3d:31:
d3:aa:2f:41:76:02:4b:bc:99:fe:6b:26:a8:30:39:
13:12:56:9d:28:ea:44:3a:01:45:50:61:8b:26:ed:
8a:ab:d1:d1:61:86:90:cd:23:e7:90:29:e4:7f:8c:
3f:be:a6:d9:2a:6f:1d:16:c1:4a:bd:e7:ca:b1:45:
27:cf:09:43:af:d5:1f:4b:24:95:8c:9d:6e:54:05:
ca:4a:2f:0c:8f:44:ef:d7:96:4f:0b:87:48:96:ea:
fc:de:90:9c:17:04:e3:3e:00:74:77:fe:f4:32:91:
08:7d:d8:6c:79:57:e6:f3:30:06:5b:e9:87:87:3a:
41:bf:ff:a6:d9:9a:69:7e:bf:ba:c0:b0:39:b8:c3:
66:04:74:c0:54:62:2e:15:3b:d0:57:71:6d:c2:c5:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4F:8E:B8:E3:50:99:B0:D6:01:96:F7:24:F6:23:52:62:65:2C:62
X509v3 Authority Key Identifier:
keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:14:44:a3:fb:f0:d7:68:24:d0:15:b6:18:06:4e:60:64:70:
6d:8f:a5:3a:81:3b:86:e3:14:4c:40:dd:01:c2:28:1a:87:4b:
d9:ec:20:b7:c1:26:2c:4d:33:f8:ae:eb:1a:80:bd:b6:55:0c:
7a:d5:89:22:63:a1:9e:7c:b4:bd:3d:b8:49:6c:7f:44:4c:d6:
d0:70:f0:6a:73:e0:30:c3:61:d2:fe:e7:80:2c:aa:fd:bd:92:
3d:b3:91:a4:ef:5d:46:f1:c4:fd:c1:c4:b2:ad:48:38:d1:7e:
48:9b:ed:09:ac:80:2c:b5:4c:54:fa:86:c1:46:5c:2d:43:bf:
c9:0b:50:9c:83:a0:ca:0f:21:47:30:ef:6f:a0:8b:50:a4:94:
f5:31:30:9d:58:95:a3:a9:03:40:75:11:ea:46:68:ab:0c:82:
da:a6:55:27:74:04:77:db:e9:40:6f:3a:12:d7:5f:9f:84:34:
0c:c4:b3:d2:2b:f3:b8:8b:60:a0:36:6a:50:77:b9:c6:b9:b1:
c3:cf:0f:2a:cb:4b:6e:04:7c:53:3b:a4:71:52:53:1f:4c:61:
96:92:0d:02:25:50:62:62:ad:95:30:9a:a6:a0:1c:8e:45:41:
b0:d6:92:22:95:f0:61:de:c6:f2:e2:31:a8:e8:b4:35:fa:4e:
f8:11:e1:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1Q0UxMTAvBgNVBAUTKDcyOTI2RkM2MEY3QzE4NEE2MUQ3M0JEMDk0QUE2QTM4
NkI2MzAwMkEwHhcNMjUxMjIzMDI1MzA1WhcNMjUxMjMwMDI1MzA1WjAYMRYwFAYD
VQQDDA02OTRhMDQxMS0xNmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy3bue4fL08Hs4jGGSeJIt+u5tTSck2CJG9jnQ3EktnIpG4GV83EGU+u4Bgk9
2y0vCc5npw3fkWevUujVVPpSK2RTZNOEZT9+Po85yGWlFLFKOhnKWun+wjp4hZ1q
8DJX3vEWG4JMPTHTqi9BdgJLvJn+ayaoMDkTEladKOpEOgFFUGGLJu2Kq9HRYYaQ
zSPnkCnkf4w/vqbZKm8dFsFKvefKsUUnzwlDr9UfSySVjJ1uVAXKSi8Mj0Tv15ZP
C4dIlur83pCcFwTjPgB0d/70MpEIfdhseVfm8zAGW+mHhzpBv/+m2Zppfr+6wLA5
uMNmBHTAVGIuFTvQV3FtwsXLiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVPjrjj
UJmw1gGW9yT2I1JiZSxiMB8GA1UdIwQYMBaAFHKSb8YPfBhKYdc70JSqajhrYwAq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVDRS8wRUIwOUQzNkFF
NzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdFcGgxenZRbEtwcU9HdGpB
Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NwSnZ4Zzk4R0VwaDF6dlFsS3BxT0d0akFDby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDVDRS8wRUIwOUQzNkFFNzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdF
cGgxenZRbEtwcU9HdGpBQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUFESj+/DXaCTQFbYYBk5gZHBtj6U6gTuG4xRMQN0Bwigah0vZ7CC3
wSYsTTP4rusagL22VQx61YkiY6GefLS9PbhJbH9ETNbQcPBqc+Aww2HS/ueALKr9
vZI9s5Gk711G8cT9wcSyrUg40X5Im+0JrIAstUxU+obBRlwtQ7/JC1Ccg6DKDyFH
MO9voItQpJT1MTCdWJWjqQNAdRHqRmirDILaplUndAR32+lAbzoS11+fhDQMxLPS
K/O4i2CgNmpQd7nGubHDzw8qy0tuBHxTO6RxUlMfTGGWkg0CJVBiYq2VMJqmoByO
RUGw1pIilfBh3sby4jGo6LQ1+k74EeFf
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:28 2025 by rpki-client