This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
File: iA5rTc1s7FPI0D10DIjpdzsEexk.mft (raw, json)
Hash identifier: iAo53yzTbbcdjsjDHqFf1kpTz8JPdvix1J4ghoSRtPE=
Subject key identifier: 2A:41:ED:53:55:E7:9E:81:A0:18:96:7D:70:4A:A4:A0:93:22:04:E5
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Certificate issuer: /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial: 16D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
Manifest number: 16C0
Signing time: Sat 06 Dec 2025 16:15:34 +0000
Manifest this update: Sat 06 Dec 2025 16:15:33 +0000
Manifest next update: Sat 13 Dec 2025 16:15:33 +0000
Files and hashes: 1: iA5rTc1s7FPI0D10DIjpdzsEexk.crl (hash: LOBuyx3OtkN7h/kIwAPbzuZD/KeR1OVwjLVxQ2ol6hM=)
2: E1ADA4BC062B11F08449516EC4F9AE02.roa (hash: gYVrbtrIqWm9akFMSRfLyBApZQdsKZ/TGrfXdq2YQZg=)
3: E259315C57CA11EA8D931284C4F9AE02.roa (hash: Oe0ZhNHc+oTi0v0pEyomCNHZHmLGtOgid/cHD2LWfB4=)
4: 7D2EA194B20711EA8B74F445C4F9AE02.roa (hash: iK4wxE4X5dwuMQMPvFE//EwoDLAL1trl9tc0x5zzbqc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5847 (0x16d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Validity
Not Before: Dec 6 16:15:33 2025 GMT
Not After : Dec 13 16:15:33 2025 GMT
Subject: CN=693456a5-c2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:45:6c:88:11:29:70:ed:7a:a0:3f:b9:db:
80:04:c1:a1:ee:d9:3d:47:3a:24:75:11:21:f5:48:
a5:1e:b5:1b:b9:d2:0a:71:fc:56:70:8d:0c:fe:01:
05:2e:aa:08:44:49:5b:5d:77:14:14:39:32:fc:7d:
54:79:b6:ae:96:17:7a:ed:99:f1:60:e6:52:50:29:
61:c8:3b:98:59:b7:22:68:ab:2c:0c:1d:95:57:76:
5d:15:9f:0d:94:08:66:4d:cf:e1:08:af:ed:4b:ea:
4c:38:3f:74:e7:06:53:07:ca:10:a6:df:34:e4:61:
9a:f2:ec:a3:4e:55:74:cd:1b:e1:60:28:31:2c:60:
6d:38:3b:eb:a2:61:7e:23:e8:8a:dd:e4:1d:41:71:
a0:64:a1:aa:59:7f:30:11:19:0b:d0:bf:0e:fe:e5:
c6:51:2c:a0:88:96:d6:41:f2:20:ce:4b:61:3b:b9:
0f:c8:5c:29:80:d7:fc:f5:9e:a1:7f:6d:b0:11:bf:
5d:13:d5:e9:b3:95:df:cb:1d:b4:21:b6:e8:6e:4e:
df:59:32:c1:3d:5f:10:d1:36:7e:f6:0d:6d:a0:b3:
1a:0d:a5:17:d5:f1:c3:9d:48:19:02:b0:d8:5f:ac:
05:8e:f7:74:3d:c7:43:e1:2a:00:7c:9c:57:22:ef:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:41:ED:53:55:E7:9E:81:A0:18:96:7D:70:4A:A4:A0:93:22:04:E5
X509v3 Authority Key Identifier:
keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:46:3e:2a:69:7e:dc:bb:ab:13:0b:e3:be:1d:8f:ea:c1:dc:
00:8c:3c:29:f5:48:a8:33:73:05:ff:b1:53:9c:95:ec:e2:50:
c0:6f:68:ce:43:51:c7:ed:8b:10:ba:a4:16:69:17:48:2a:59:
e1:bb:b5:88:10:c7:a2:06:68:86:f9:73:73:5e:77:07:d4:9d:
13:d7:0e:12:aa:39:b5:ae:ce:2f:f2:17:57:b0:1f:7a:da:ef:
53:68:2f:f5:4c:d3:fa:a3:cd:66:9b:5b:ae:23:47:9a:40:77:
be:2e:a1:00:c5:e5:3a:bd:fa:b3:b8:32:9d:c8:c0:5a:52:2f:
f3:df:43:c2:61:99:3a:9a:2b:8b:47:5d:a1:89:89:24:ec:b5:
e5:76:23:dd:47:d3:ef:5e:84:51:a8:2e:e4:f3:c2:eb:8a:5f:
72:ba:b9:04:7b:66:14:2a:65:ed:af:81:9d:58:66:fa:ce:71:
9a:95:c3:b2:81:3a:85:0b:c8:39:26:d5:b7:33:a7:44:b1:70:
d1:86:59:a0:56:13:b1:fc:2f:a5:77:de:19:38:40:61:25:2b:
17:f5:ed:e4:f3:1e:c2:fc:86:bd:35:8b:e7:09:c2:a2:4e:23:
62:8b:58:b6:02:60:f4:c9:9f:76:26:1c:83:2c:7a:20:4a:08:
6f:e0:9c:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc0NjUxMTAvBgNVBAUTKDg4MEU2QjREQ0Q2Q0VDNTNDOEQwM0Q3NDBDODhFOTc3
M0IwNDdCMTkwHhcNMjUxMjA2MTYxNTMzWhcNMjUxMjEzMTYxNTMzWjAYMRYwFAYD
VQQDEw02OTM0NTZhNS1jMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzEdFbIgRKXDteqA/uduABMGh7tk9RzokdREh9UilHrUbudIKcfxWcI0M/gEF
LqoIRElbXXcUFDky/H1Uebaulhd67ZnxYOZSUClhyDuYWbciaKssDB2VV3ZdFZ8N
lAhmTc/hCK/tS+pMOD905wZTB8oQpt805GGa8uyjTlV0zRvhYCgxLGBtODvromF+
I+iK3eQdQXGgZKGqWX8wERkL0L8O/uXGUSygiJbWQfIgzkthO7kPyFwpgNf89Z6h
f22wEb9dE9Xps5Xfyx20Ibbobk7fWTLBPV8Q0TZ+9g1toLMaDaUX1fHDnUgZArDY
X6wFjvd0PcdD4SoAfJxXIu9X1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpB7VNV
556BoBiWfXBKpKCTIgTlMB8GA1UdIwQYMBaAFIgOa03NbOxTyNA9dAyI6Xc7BHsZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQ2NS9CMUFGQjZGQTBB
NTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdGUEkwRDEwRElqcGR6c0Vl
eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lBNXJUYzFzN0ZQSTBEMTBESWpwZHpzRWV4ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzQ2NS9CMUFGQjZGQTBBNTMxMUU4QUM3QkVFMkVDNEY5QUUwMi9pQTVyVGMxczdG
UEkwRDEwRElqcGR6c0VleGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgRj4qaX7cu6sTC+O+HY/qwdwAjDwp9UioM3MF/7FTnJXs4lDAb2jO
Q1HH7YsQuqQWaRdIKlnhu7WIEMeiBmiG+XNzXncH1J0T1w4Sqjm1rs4v8hdXsB96
2u9TaC/1TNP6o81mm1uuI0eaQHe+LqEAxeU6vfqzuDKdyMBaUi/z30PCYZk6miuL
R12hiYkk7LXldiPdR9PvXoRRqC7k88Lril9yurkEe2YUKmXtr4GdWGb6znGalcOy
gTqFC8g5JtW3M6dEsXDRhlmgVhOx/C+ld94ZOEBhJSsX9e3k8x7C/Ia9NYvnCcKi
TiNii1i2AmD0yZ92JhyDLHogSghv4Jz8
-----END CERTIFICATE-----
Generated at Mon Dec 8 06:11:01 2025 by rpki-client