This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
File: 1pesTITI0RmFX1oM3aY13R44Xuc.mft (raw, json)
Hash identifier: 0k/5zZNCkXUCUExzssXxlTCDPHsh7ED03uptGIEfGF0=
Subject key identifier: DD:F6:72:E6:09:89:EA:99:81:A0:AE:A4:8E:40:15:B5:45:57:A2:A2
Authority key identifier: D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7
Certificate issuer: /CN=A918A9FC/serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
Certificate serial: 350A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
Manifest number: 34FD
Signing time: Mon 22 Dec 2025 14:55:17 +0000
Manifest this update: Mon 22 Dec 2025 14:55:17 +0000
Manifest next update: Mon 29 Dec 2025 14:55:17 +0000
Files and hashes: 1: 1pesTITI0RmFX1oM3aY13R44Xuc.crl (hash: QY6dGQVbQfp2dHLre2sKwr199VfOkWIUuYibRGeFaB8=)
2: EADCDA1C8D9611EEBE392A3CC4F9AE02.roa (hash: KB0yl0ZQRg2b/pl7UMxerf5AoFGQw8HVHTGUQ+jATl8=)
3: 7859AE6A0B5511EABCBC343DC4F9AE02.roa (hash: jWpGewbGAxCVZEy9uZnR7Tfw1mCynOwqfq2TLC2QUUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl
rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 14:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13578 (0x350a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A9FC, serialNumber=D697AC4C84C8D119855F5A0CDDA635DD1E385EE7
Validity
Not Before: Dec 22 14:55:17 2025 GMT
Not After : Dec 29 14:55:17 2025 GMT
Subject: CN=69495bd5-2b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:39:01:91:86:f5:62:5d:16:01:8c:c2:dc:
14:08:fd:d3:b3:7f:a6:8d:8d:e5:a7:be:1e:88:0a:
6a:91:cc:ef:8d:0f:02:67:3d:92:75:87:46:58:76:
a9:aa:78:8b:c9:1d:b3:ee:60:b8:a8:26:fc:f2:c9:
5e:bb:67:ab:ca:6b:17:56:9b:ac:aa:9b:ed:5c:86:
31:9d:3d:b1:fc:5b:7f:36:fa:6b:3a:3b:26:8e:07:
f8:4c:a4:73:87:ce:f8:ca:0a:13:57:b4:8c:04:7a:
54:b0:17:ac:98:a1:2b:44:e3:e7:a1:8a:a7:1e:c3:
44:39:97:f1:5e:6b:94:17:73:20:3e:46:be:e0:e1:
d8:bf:cb:28:94:4a:20:40:e6:9f:6b:e4:a0:a6:89:
b9:dd:63:64:42:97:c4:f4:aa:9a:34:0d:f9:73:4e:
59:9b:72:29:86:25:ea:35:1e:a5:9a:67:ec:20:8a:
63:ef:57:c4:fa:94:58:fb:7a:74:77:ac:cd:e0:09:
43:b5:22:34:f1:ed:3e:21:ad:35:72:9f:9e:1c:88:
94:f6:eb:5c:88:ff:b8:01:3f:cd:45:64:70:8c:7d:
f3:87:25:0d:ea:38:02:42:4d:98:56:f3:7f:83:8d:
a0:78:00:d7:e2:46:33:ae:82:05:42:6d:77:0e:dd:
62:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F6:72:E6:09:89:EA:99:81:A0:AE:A4:8E:40:15:B5:45:57:A2:A2
X509v3 Authority Key Identifier:
keyid:D6:97:AC:4C:84:C8:D1:19:85:5F:5A:0C:DD:A6:35:DD:1E:38:5E:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pesTITI0RmFX1oM3aY13R44Xuc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A9FC/319337AA1D9E11E286E9D18D08B02CD2/1pesTITI0RmFX1oM3aY13R44Xuc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4b:99:1b:21:08:60:a9:a3:d8:18:ae:60:15:ad:c6:48:47:
91:1f:e2:8a:a1:a0:d1:c4:95:20:19:ba:e1:10:09:81:cf:6d:
0f:ca:f1:9c:83:01:db:a4:13:31:5a:7f:88:0b:63:17:a0:64:
ca:ec:0c:78:7f:03:bd:46:a3:62:56:b1:75:39:61:5d:e8:8f:
11:8e:b9:ca:d3:55:ca:9f:9a:36:0d:4e:af:6d:1a:4d:a8:25:
a1:ab:51:a3:88:23:98:6e:e9:08:10:eb:97:52:59:4e:9f:d9:
0b:8c:93:2d:a1:81:8d:82:16:51:c8:c3:92:db:95:23:4a:f5:
e3:f6:56:99:65:54:d4:0c:06:c3:4d:14:83:a8:0d:1e:22:67:
3a:a3:b6:39:16:45:5c:d7:fe:99:28:4d:ec:dc:89:03:5b:d6:
ed:20:9d:28:99:ad:ac:1a:ba:8c:0e:cf:42:14:b1:a8:54:f7:
4d:33:94:3f:6d:45:75:65:3c:40:eb:45:15:69:21:4e:1b:5b:
4b:e5:85:b9:e6:08:47:22:bc:91:f7:d8:7c:20:03:df:b9:0e:
ae:ba:88:27:1e:d2:f0:a0:1b:8c:de:19:80:58:82:65:b5:8b:
63:96:34:56:cc:39:65:f8:9f:e1:a8:16:f7:26:10:0c:8c:60:
e3:9c:5d:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE5RkMxMTAvBgNVBAUTKEQ2OTdBQzRDODRDOEQxMTk4NTVGNUEwQ0REQTYzNURE
MUUzODVFRTcwHhcNMjUxMjIyMTQ1NTE3WhcNMjUxMjI5MTQ1NTE3WjAYMRYwFAYD
VQQDDA02OTQ5NWJkNS0yYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn2c5AZGG9WJdFgGMwtwUCP3Ts3+mjY3lp74eiApqkczvjQ8CZz2SdYdGWHap
qniLyR2z7mC4qCb88sleu2erymsXVpusqpvtXIYxnT2x/Ft/NvprOjsmjgf4TKRz
h874ygoTV7SMBHpUsBesmKErROPnoYqnHsNEOZfxXmuUF3MgPka+4OHYv8solEog
QOafa+Sgpom53WNkQpfE9KqaNA35c05Zm3IphiXqNR6lmmfsIIpj71fE+pRY+3p0
d6zN4AlDtSI08e0+Ia01cp+eHIiU9utciP+4AT/NRWRwjH3zhyUN6jgCQk2YVvN/
g42geADX4kYzroIFQm13Dt1iLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN32cuYJ
ieqZgaCupI5AFbVFV6KiMB8GA1UdIwQYMBaAFNaXrEyEyNEZhV9aDN2mNd0eOF7n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTlGQy8zMTkzMzdBQTFE
OUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBSbUZYMW9NM2FZMTNSNDRY
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFwZXNUSVRJMFJtRlgxb00zYVkxM1I0NFh1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTlGQy8zMTkzMzdBQTFEOUUxMUUyODZFOUQxOEQwOEIwMkNEMi8xcGVzVElUSTBS
bUZYMW9NM2FZMTNSNDRYdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuS5kbIQhgqaPYGK5gFa3GSEeRH+KKoaDRxJUgGbrhEAmBz20PyvGc
gwHbpBMxWn+IC2MXoGTK7Ax4fwO9RqNiVrF1OWFd6I8RjrnK01XKn5o2DU6vbRpN
qCWhq1GjiCOYbukIEOuXUllOn9kLjJMtoYGNghZRyMOS25UjSvXj9laZZVTUDAbD
TRSDqA0eImc6o7Y5FkVc1/6ZKE3s3IkDW9btIJ0oma2sGrqMDs9CFLGoVPdNM5Q/
bUV1ZTxA60UVaSFOG1tL5YW55ghHIryR99h8IAPfuQ6uuognHtLwoBuM3hmAWIJl
tYtjljRWzDll+J/hqBb3JhAMjGDjnF3X
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:55 2025 by rpki-client