This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft
File: 0fxphnCiQetFTVXFZ6paY1rwoGM.mft (raw, json)
Hash identifier: qZALkVI9sJ2cUxFwbRc95siAZ+JmO3AQ/tCeC/Dgl1s=
Subject key identifier: 9A:BF:FB:12:80:20:C3:2B:47:41:D7:63:AC:08:8A:B0:EF:BC:DA:3F
Authority key identifier: D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63
Certificate issuer: /CN=A918681B/serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063
Certificate serial: 056A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft
Manifest number: 055D
Signing time: Mon 22 Dec 2025 22:32:49 +0000
Manifest this update: Mon 22 Dec 2025 22:32:48 +0000
Manifest next update: Mon 29 Dec 2025 22:32:48 +0000
Files and hashes: 1: 0fxphnCiQetFTVXFZ6paY1rwoGM.crl (hash: MOmF3I1qOs/5MPd2EbItOa/JkVyMunoc70B3LlKoT90=)
2: 5D4D3E261A3E11ECB42D0B80C4F9AE02.roa (hash: /ErlcaIeUeraTW92XMOocWdAb5We3LEJm4Lzr5jKvJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl
rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1386 (0x56a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918681B, serialNumber=D1FC698670A241EB454D55C567AA5A635AF0A063
Validity
Not Before: Dec 22 22:32:48 2025 GMT
Not After : Dec 29 22:32:48 2025 GMT
Subject: CN=6949c710-e348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:9d:b9:45:f7:c9:a7:b5:66:68:a3:08:f8:
08:e6:d7:14:62:16:f4:f2:e1:21:63:da:64:aa:eb:
e3:fa:15:7c:1c:22:77:60:cb:bc:48:e8:d6:b6:60:
24:c5:fe:ec:a6:a7:ea:03:19:d2:ec:cb:77:3d:7d:
97:2f:65:95:79:69:11:f8:6c:9a:a7:5c:b5:80:8c:
ca:e5:c2:66:ca:bb:f8:de:9d:d9:04:07:5e:1e:ea:
d2:9d:08:f5:5d:37:62:9f:12:ea:4e:d6:95:12:a6:
75:ad:cd:f6:13:02:c4:e6:d0:5e:fe:fd:9b:93:d1:
fd:0b:d1:7c:e2:23:68:ad:dd:a0:f7:45:ae:df:3c:
a8:ff:81:95:74:d7:56:93:77:13:e6:b4:4b:9f:25:
e8:72:37:9a:d4:16:c8:0c:1f:67:2d:21:f7:9c:a6:
00:ec:c2:67:f9:73:05:3b:c1:46:4d:82:04:71:46:
d2:58:23:2d:a1:2e:8f:19:96:62:7d:bc:d3:ab:95:
03:71:e9:52:fd:34:f3:4a:9b:57:65:1c:03:9d:69:
35:aa:54:68:fa:14:fd:85:32:3c:b0:0e:f0:95:04:
4e:d9:b7:9d:1e:bd:c9:7a:a0:44:18:98:6e:a6:c7:
7a:78:f3:5a:7a:c2:cc:fb:73:ef:de:f3:81:c8:62:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BF:FB:12:80:20:C3:2B:47:41:D7:63:AC:08:8A:B0:EF:BC:DA:3F
X509v3 Authority Key Identifier:
keyid:D1:FC:69:86:70:A2:41:EB:45:4D:55:C5:67:AA:5A:63:5A:F0:A0:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fxphnCiQetFTVXFZ6paY1rwoGM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918681B/C43FBD061A3A11EC8FBF417BC4F9AE02/0fxphnCiQetFTVXFZ6paY1rwoGM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:dc:70:da:34:6b:2f:0d:c3:88:20:45:6e:90:e0:22:52:ae:
dd:71:4f:33:05:3c:b9:66:96:19:52:69:b4:c2:c1:31:80:e3:
f7:cd:9c:b9:37:b3:f7:ab:57:11:fa:73:08:82:c2:b1:e5:93:
ac:09:7e:f8:cb:51:74:65:65:7f:34:df:49:2b:19:f7:f2:65:
86:dd:42:0b:23:24:c7:6d:6d:35:ec:9f:39:87:96:1f:13:bb:
ef:c3:05:9c:19:1c:de:92:44:c3:45:e6:ab:5b:80:64:66:2b:
9d:c4:64:82:92:1b:1e:a3:db:a5:ad:8a:df:5b:4d:9c:99:23:
13:ac:8b:53:2d:eb:ac:1a:d7:9f:84:c4:4a:a6:69:73:83:bd:
e4:95:2f:41:aa:85:6d:23:e4:4e:91:a3:a7:51:5c:dd:6d:f6:
1c:10:9a:7b:28:39:89:ac:a3:5e:33:4f:af:d1:50:a7:ed:b2:
ff:d6:43:93:8a:46:57:c6:a1:49:96:9d:9e:db:8e:89:b6:bd:
37:e0:bc:06:3a:32:69:15:e6:72:8e:f2:e7:33:16:73:34:d9:
6f:54:01:f7:a8:ba:3b:c6:83:65:66:f8:ad:10:0d:ec:1c:a1:
de:70:e3:f4:df:8b:18:b3:ce:fe:25:12:86:d5:77:81:96:2c:
10:24:fa:84
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY4MUIxMTAvBgNVBAUTKEQxRkM2OTg2NzBBMjQxRUI0NTRENTVDNTY3QUE1QTYz
NUFGMEEwNjMwHhcNMjUxMjIyMjIzMjQ4WhcNMjUxMjI5MjIzMjQ4WjAYMRYwFAYD
VQQDDA02OTQ5YzcxMC1lMzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs02duUX3yae1ZmijCPgI5tcUYhb08uEhY9pkquvj+hV8HCJ3YMu8SOjWtmAk
xf7spqfqAxnS7Mt3PX2XL2WVeWkR+Gyap1y1gIzK5cJmyrv43p3ZBAdeHurSnQj1
XTdinxLqTtaVEqZ1rc32EwLE5tBe/v2bk9H9C9F84iNord2g90Wu3zyo/4GVdNdW
k3cT5rRLnyXocjea1BbIDB9nLSH3nKYA7MJn+XMFO8FGTYIEcUbSWCMtoS6PGZZi
fbzTq5UDcelS/TTzSptXZRwDnWk1qlRo+hT9hTI8sA7wlQRO2bedHr3JeqBEGJhu
psd6ePNaesLM+3Pv3vOByGLOLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJq/+xKA
IMMrR0HXY6wIirDvvNo/MB8GA1UdIwQYMBaAFNH8aYZwokHrRU1VxWeqWmNa8KBj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjgxQi9DNDNGQkQwNjFB
M0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFldEZUVlhGWjZwYVkxcndv
R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBmeHBobkNpUWV0RlRWWEZaNnBhWTFyd29HTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjgxQi9DNDNGQkQwNjFBM0ExMUVDOEZCRjQxN0JDNEY5QUUwMi8wZnhwaG5DaVFl
dEZUVlhGWjZwYVkxcndvR00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCY3HDaNGsvDcOIIEVukOAiUq7dcU8zBTy5ZpYZUmm0wsExgOP3zZy5
N7P3q1cR+nMIgsKx5ZOsCX74y1F0ZWV/NN9JKxn38mWG3UILIyTHbW017J85h5Yf
E7vvwwWcGRzekkTDRearW4BkZiudxGSCkhseo9ulrYrfW02cmSMTrItTLeusGtef
hMRKpmlzg73klS9BqoVtI+ROkaOnUVzdbfYcEJp7KDmJrKNeM0+v0VCn7bL/1kOT
ikZXxqFJlp2e246Jtr034LwGOjJpFeZyjvLnMxZzNNlvVAH3qLo7xoNlZvitEA3s
HKHecOP034sYs87+JRKG1XeBliwQJPqE
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:21 2025 by rpki-client