This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
File: It6TcViumN6iIR-bvJp10O0NRDY.mft (raw, json)
Hash identifier: cMaZJIaNq9xL7hwjWBZ6Fp8MzChLEr4uXXoq6nzyqVQ=
Subject key identifier: E7:91:93:E3:91:3F:AB:3B:F7:36:44:56:07:E5:5A:9F:F6:31:54:A5
Authority key identifier: 22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
Certificate issuer: /CN=A9189B41/serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Certificate serial: FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
Manifest number: FA
Signing time: Tue 23 Dec 2025 04:10:49 +0000
Manifest this update: Tue 23 Dec 2025 04:10:48 +0000
Manifest next update: Tue 30 Dec 2025 04:10:48 +0000
Files and hashes: 1: It6TcViumN6iIR-bvJp10O0NRDY.crl (hash: +iue0qHx3F0f4FKLVyyFbQLD9FUtNsZsh/KlvopMkqU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250 (0xfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189B41, serialNumber=22DE937158AE98DEA2211F9BBC9A75D0ED0D4436
Validity
Not Before: Dec 23 04:10:48 2025 GMT
Not After : Dec 30 04:10:48 2025 GMT
Subject: CN=694a1648-e995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:7e:68:58:e8:60:a6:26:66:4d:49:12:0c:
b9:37:08:b1:cd:55:7a:89:29:89:49:c8:52:a6:ca:
d5:b4:2e:ea:24:ac:fa:06:40:6f:3e:1b:2e:4d:e3:
b2:35:53:f4:70:3a:cc:a6:0e:6e:0f:f9:f0:61:71:
b1:c6:e5:81:6a:e0:0c:bf:20:6a:2d:68:ee:7a:73:
43:bb:bd:fb:d2:ff:77:38:d5:8f:4c:72:28:96:ee:
bc:ad:d8:b7:92:b7:e3:93:41:fc:fc:dc:0e:4a:eb:
d5:a3:83:e4:81:5a:48:3b:db:30:79:f4:cc:33:b2:
c2:e8:4e:10:e6:ec:5b:24:e5:ec:62:7c:c2:87:b1:
85:bc:d6:3f:e7:ca:6c:c3:85:b5:cc:22:17:2a:81:
7d:b7:e6:b3:0f:c7:18:e8:d0:2f:cc:e4:a9:35:c6:
31:92:bd:4d:45:2b:a3:47:2d:71:7e:e8:63:94:64:
88:ee:e9:c9:80:79:9f:a2:b9:68:da:a6:6e:16:63:
90:ae:40:c8:cd:1d:ec:62:5e:df:f3:06:65:fb:c1:
ff:04:7e:d5:14:8e:53:f7:27:d5:1e:31:52:66:9f:
c0:90:f1:98:f6:6c:2a:7c:f4:81:42:dc:c8:d4:b1:
1c:34:53:cf:d0:c8:6f:30:07:7b:42:6a:76:88:21:
cb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:91:93:E3:91:3F:AB:3B:F7:36:44:56:07:E5:5A:9F:F6:31:54:A5
X509v3 Authority Key Identifier:
keyid:22:DE:93:71:58:AE:98:DE:A2:21:1F:9B:BC:9A:75:D0:ED:0D:44:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/It6TcViumN6iIR-bvJp10O0NRDY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189B41/726E3AD0605911EF9C223760C4F9AE02/It6TcViumN6iIR-bvJp10O0NRDY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:51:29:73:6a:8d:94:2e:e2:da:b1:77:34:d0:9d:23:e9:fa:
54:04:be:93:3a:fe:6f:d0:3b:f9:56:65:bf:5a:94:ee:8f:75:
e2:fa:f0:6c:19:5d:2b:60:9c:f5:8c:2c:2e:76:e7:f1:fd:89:
80:d9:b1:5a:43:94:fb:00:ab:af:52:7e:a8:40:23:ca:2e:f2:
b1:ac:18:b8:84:c0:99:d6:e9:e9:0c:f7:17:3f:44:81:54:bd:
73:b9:d8:50:7a:c1:81:20:05:11:00:5c:83:01:d5:c8:ee:ed:
81:a9:4f:38:c4:00:c1:9c:b1:bf:72:d3:ff:cc:65:c2:e3:af:
9c:5a:d2:3e:ec:66:9b:8a:f9:d0:07:44:93:cb:25:ef:83:46:
f1:4c:d0:09:94:0a:63:2b:38:87:71:74:a3:40:ef:a3:e0:8d:
1c:27:a1:bc:a7:d1:db:6e:96:59:72:42:0f:d8:eb:f4:e0:17:
74:cb:b8:d7:7c:e8:3c:01:ba:d8:a1:64:2c:22:8c:61:93:b1:
fb:3f:59:a6:f6:ca:53:89:58:de:61:d4:20:f2:d8:48:4a:61:
0c:13:39:2e:2d:bd:25:bb:1f:9e:36:be:99:dc:ab:67:6d:10:
c7:b5:8b:2c:5f:4b:70:27:4e:55:d1:7d:5d:4c:4b:3d:5f:7c:
77:4c:60:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODlCNDExMTAvBgNVBAUTKDIyREU5MzcxNThBRTk4REVBMjIxMUY5QkJDOUE3NUQw
RUQwRDQ0MzYwHhcNMjUxMjIzMDQxMDQ4WhcNMjUxMjMwMDQxMDQ4WjAYMRYwFAYD
VQQDDA02OTRhMTY0OC1lOTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2et+aFjoYKYmZk1JEgy5NwixzVV6iSmJSchSpsrVtC7qJKz6BkBvPhsuTeOy
NVP0cDrMpg5uD/nwYXGxxuWBauAMvyBqLWjuenNDu7370v93ONWPTHIolu68rdi3
krfjk0H8/NwOSuvVo4PkgVpIO9swefTMM7LC6E4Q5uxbJOXsYnzCh7GFvNY/58ps
w4W1zCIXKoF9t+azD8cY6NAvzOSpNcYxkr1NRSujRy1xfuhjlGSI7unJgHmforlo
2qZuFmOQrkDIzR3sYl7f8wZl+8H/BH7VFI5T9yfVHjFSZp/AkPGY9mwqfPSBQtzI
1LEcNFPP0MhvMAd7Qmp2iCHL5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeRk+OR
P6s79zZEVgflWp/2MVSlMB8GA1UdIwQYMBaAFCLek3FYrpjeoiEfm7yaddDtDUQ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUI0MS83MjZFM0FEMDYw
NTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1ONmlJUi1idkpwMTBPME5S
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0l0NlRjVml1bU42aUlSLWJ2SnAxME8wTlJEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OUI0MS83MjZFM0FEMDYwNTkxMUVGOUMyMjM3NjBDNEY5QUUwMi9JdDZUY1ZpdW1O
NmlJUi1idkpwMTBPME5SRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtUSlzao2ULuLasXc00J0j6fpUBL6TOv5v0Dv5VmW/WpTuj3Xi+vBs
GV0rYJz1jCwudufx/YmA2bFaQ5T7AKuvUn6oQCPKLvKxrBi4hMCZ1unpDPcXP0SB
VL1zudhQesGBIAURAFyDAdXI7u2BqU84xADBnLG/ctP/zGXC46+cWtI+7GabivnQ
B0STyyXvg0bxTNAJlApjKziHcXSjQO+j4I0cJ6G8p9HbbpZZckIP2Ov04Bd0y7jX
fOg8AbrYoWQsIoxhk7H7P1mm9spTiVjeYdQg8thISmEMEzkuLb0lux+eNr6Z3Ktn
bRDHtYssX0twJ05V0X1dTEs9X3x3TGBr
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:38 2025 by rpki-client