This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
File: I9INognIlcMA7mtlm2sYKZJfvU8.mft (raw, json)
Hash identifier: BWmiAccuvjAIAP1kXQ02XHq/I/pxeN040nC+mi3jdIg=
Subject key identifier: 18:EE:A1:78:16:E0:7F:10:EB:08:97:A2:82:C7:9A:71:A4:60:FF:B6
Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Certificate serial: 0C8B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
Manifest number: 0C74
Signing time: Sat 20 Dec 2025 18:12:41 +0000
Manifest this update: Sat 20 Dec 2025 18:12:41 +0000
Manifest next update: Sat 27 Dec 2025 18:12:41 +0000
Files and hashes: 1: I9INognIlcMA7mtlm2sYKZJfvU8.crl (hash: Ihhmv3a/qE7zX3TFxasXnoDoQvpXbOuei9v5F8dsK4Q=)
2: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (hash: 71wtlkFspbYtUock+BFXzeZYBB331wF/cr+DbtyBMzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 18:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3211 (0xc8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F
Validity
Not Before: Dec 20 18:12:41 2025 GMT
Not After : Dec 27 18:12:41 2025 GMT
Subject: CN=6946e719-f4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b4:16:ee:03:85:16:ec:70:f1:5f:34:bc:84:
a2:41:ce:3e:68:17:94:1e:d1:8b:72:99:38:95:e8:
01:de:dc:95:d5:18:f5:65:7f:85:07:72:f0:cc:84:
9c:c9:75:80:88:fc:8b:f3:da:5a:69:a7:e9:9c:6d:
81:ea:15:e2:f5:41:f5:a8:ab:07:ab:89:13:f8:65:
c1:ea:1b:c7:7b:fb:fb:3f:de:0a:f8:18:9c:91:0d:
93:02:7d:00:5c:bc:8b:d0:a8:ab:6c:40:16:cc:59:
77:be:2b:77:f4:4b:96:b4:27:a9:13:3a:a3:c6:1a:
fc:a9:fd:52:fe:82:9c:aa:2d:ee:41:bc:81:15:a2:
b4:8e:ee:e0:bb:cc:3c:dd:3a:f8:c3:54:66:5e:4c:
ba:94:b3:fc:a2:85:97:2b:e1:fe:06:67:d5:80:ca:
d0:c2:3a:f8:61:7b:f3:e0:2a:72:cf:55:3b:6f:96:
d6:a6:8f:60:06:99:6f:6f:8f:67:7f:a9:36:6e:a1:
1f:c6:1f:35:14:a9:13:d4:f5:bd:6e:74:91:97:87:
71:76:01:c9:53:86:40:5e:bf:b7:f6:5b:45:3a:7a:
e3:a0:01:be:fb:1a:93:fe:4d:16:9e:27:c6:37:ad:
62:b7:71:52:d7:bc:b0:0a:44:24:97:4d:54:af:1a:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:EE:A1:78:16:E0:7F:10:EB:08:97:A2:82:C7:9A:71:A4:60:FF:B6
X509v3 Authority Key Identifier:
keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:93:91:0d:39:bf:72:c4:c0:a9:80:dd:85:76:c0:01:16:e2:
97:59:e2:fe:21:99:d3:9a:d6:1b:bc:aa:6b:9a:fc:3a:88:72:
b1:9b:76:40:15:2c:ea:a1:07:d6:84:89:66:4c:65:af:cd:e3:
37:18:13:f6:13:ed:9a:1e:19:93:87:ee:a5:7a:ee:5f:ef:f0:
d8:f5:24:f7:0e:57:07:82:d4:3d:1d:0c:f8:30:b3:d3:9e:47:
f6:00:06:22:14:7b:26:a0:92:30:88:df:ea:b7:04:83:fe:1c:
93:eb:98:f5:88:03:c8:b3:2b:d3:2b:5a:50:50:2c:43:b7:a9:
25:b0:03:72:d0:b2:a2:70:69:fe:ad:df:4d:76:ea:49:3c:77:
f6:7d:0d:d6:07:a7:11:05:f7:77:00:27:30:cf:31:d6:ea:d0:
31:06:50:ee:e9:ab:94:be:9f:00:b9:b6:80:4c:34:0c:73:36:
29:83:be:3b:cb:a9:46:da:61:6b:4b:65:d1:cb:04:b7:ac:37:
f7:57:1e:d9:09:2b:6c:b7:2f:9e:d4:3d:15:a5:62:8a:c0:38:
f8:e3:26:ac:54:2f:49:6d:ff:72:ee:65:5a:d7:02:fa:44:a2:
ed:c6:ca:4f:eb:4c:4d:d3:5f:51:47:59:eb:84:83:82:29:5e:
66:63:3d:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5
OTI1RkJENEYwHhcNMjUxMjIwMTgxMjQxWhcNMjUxMjI3MTgxMjQxWjAYMRYwFAYD
VQQDDA02OTQ2ZTcxOS1mNGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7LQW7gOFFuxw8V80vISiQc4+aBeUHtGLcpk4legB3tyV1Rj1ZX+FB3LwzISc
yXWAiPyL89paaafpnG2B6hXi9UH1qKsHq4kT+GXB6hvHe/v7P94K+BickQ2TAn0A
XLyL0KirbEAWzFl3vit39EuWtCepEzqjxhr8qf1S/oKcqi3uQbyBFaK0ju7gu8w8
3Tr4w1RmXky6lLP8ooWXK+H+BmfVgMrQwjr4YXvz4Cpyz1U7b5bWpo9gBplvb49n
f6k2bqEfxh81FKkT1PW9bnSRl4dxdgHJU4ZAXr+39ltFOnrjoAG++xqT/k0WnifG
N61it3FS17ywCkQkl01UrxqagwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjuoXgW
4H8Q6wiXooLHmnGkYP+2MB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0
MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2
VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjlFMy9DNDVGNjBEQTE0MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxj
TUE3bXRsbTJzWUtaSmZ2VTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCak5ENOb9yxMCpgN2FdsABFuKXWeL+IZnTmtYbvKprmvw6iHKxm3ZA
FSzqoQfWhIlmTGWvzeM3GBP2E+2aHhmTh+6leu5f7/DY9ST3DlcHgtQ9HQz4MLPT
nkf2AAYiFHsmoJIwiN/qtwSD/hyT65j1iAPIsyvTK1pQUCxDt6klsANy0LKicGn+
rd9NdupJPHf2fQ3WB6cRBfd3ACcwzzHW6tAxBlDu6auUvp8AubaATDQMczYpg747
y6lG2mFrS2XRywS3rDf3Vx7ZCStsty+e1D0VpWKKwDj44yasVC9Jbf9y7mVa1wL6
RKLtxspP60xN019RR1nrhIOCKV5mYz0l
-----END CERTIFICATE-----
Generated at Sun Dec 21 21:29:04 2025 by rpki-client