This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
File: -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json)
Hash identifier: yOy2o1vtqFvVRk4fTZnc5MkiiBdnxn1kzgRFV2Hh7Ho=
Subject key identifier: FA:CB:55:17:E2:27:6D:B0:EE:C9:E2:4C:8E:6D:B8:1A:C8:CC:2E:A1
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Certificate issuer: /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial: 0343
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
Manifest number: 033A
Signing time: Tue 23 Dec 2025 00:03:47 +0000
Manifest this update: Tue 23 Dec 2025 00:03:47 +0000
Manifest next update: Tue 30 Dec 2025 00:03:47 +0000
Files and hashes: 1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: Q9LbGZd2W42qGI57XeOU88U3aiidknFPLzdgOU52Vhg=)
2: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: UN/nfQHhGfzyZRq2W+uh9scaawp6d2w2Zs3dhUguHjk=)
3: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: FUZ5azqpAEZ0qmf1CYejZILVHYibj+rRrJRKN/AtVm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835 (0x343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Validity
Not Before: Dec 23 00:03:47 2025 GMT
Not After : Dec 30 00:03:47 2025 GMT
Subject: CN=6949dc63-c720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:4c:87:3e:c4:1d:25:9e:d2:f1:c7:24:d9:
3b:35:b4:6a:49:bb:33:1e:27:d0:32:7f:35:13:4e:
cc:e0:53:b7:5b:71:40:31:fb:9a:6f:7b:34:49:d3:
dd:17:8e:97:36:28:72:32:ef:e6:65:50:ba:d6:0c:
d8:a4:ea:36:86:38:2e:e8:72:9b:60:03:b4:11:fa:
58:f3:91:16:e6:3a:88:9f:70:f3:fc:ad:5f:32:2f:
71:3c:61:3b:66:c7:75:56:23:50:69:f6:89:b1:69:
a9:9b:fb:f6:63:61:0d:d8:b7:7e:08:e0:3a:c0:42:
1e:b1:22:a1:2c:00:d2:e0:a5:37:15:43:45:3a:4c:
a7:5a:00:d2:bc:ac:94:e9:46:1f:47:49:95:b3:c5:
f0:ee:8a:74:fc:e1:aa:04:9d:88:f3:2b:f7:8c:4d:
7c:06:f3:66:67:c0:e1:97:fc:e4:12:f7:bf:b7:9b:
5b:ca:ae:de:f3:5e:dd:68:9d:89:d6:42:43:b9:0f:
b0:86:20:48:84:7c:dd:14:1e:38:a4:19:fc:c3:9a:
b0:f2:6c:5f:37:e0:c1:c0:1e:a5:f6:03:5f:9a:fc:
d2:91:fc:e3:b9:8f:6d:f8:64:22:0f:68:75:6f:2f:
e2:0f:c4:31:d5:06:f5:b1:70:67:54:25:a8:b3:45:
e3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CB:55:17:E2:27:6D:B0:EE:C9:E2:4C:8E:6D:B8:1A:C8:CC:2E:A1
X509v3 Authority Key Identifier:
keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:70:ad:e1:a4:19:91:b8:74:18:de:d5:d8:d0:b0:4b:2a:be:
c6:1f:5a:3f:9f:91:28:db:ed:5e:b6:29:be:47:59:1e:df:b9:
ad:c2:30:91:97:73:1d:8f:ea:1d:97:8c:ea:d4:79:93:43:bc:
1e:34:d9:66:99:dd:78:55:46:e3:b4:79:50:12:17:97:01:08:
52:ed:9a:60:dc:85:d1:db:ef:f6:8c:98:1c:4b:cf:c0:a2:75:
a7:9a:91:e4:d5:e6:d2:74:35:f8:18:32:7f:2c:a4:ce:44:23:
10:96:5d:9c:40:68:24:db:e8:07:4d:7d:c4:ea:c8:03:eb:c0:
ba:02:b1:c9:f5:08:2c:62:84:9e:58:92:2b:e7:12:48:62:ff:
74:5b:3b:c7:ea:e2:9e:b4:51:c8:11:39:0b:d1:e2:24:85:87:
1d:57:29:50:63:97:22:d5:48:ae:d5:c6:62:84:dc:27:64:c5:
74:8f:0f:31:11:6f:48:fb:77:40:7e:71:19:b3:d6:ba:ae:b0:
be:03:61:4f:b4:f8:18:65:bc:10:ec:28:9c:f1:83:d3:94:3e:
40:a2:c1:10:fa:02:d9:d6:8a:e8:5b:99:ba:f4:99:b7:d4:60:
a9:55:ea:17:ad:97:4e:d2:b1:21:b1:18:09:3b:a5:31:a2:9b:
5e:12:d1:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx
QzgxMzJERjEwHhcNMjUxMjIzMDAwMzQ3WhcNMjUxMjMwMDAwMzQ3WjAYMRYwFAYD
VQQDDA02OTQ5ZGM2My1jNzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtgJMhz7EHSWe0vHHJNk7NbRqSbszHifQMn81E07M4FO3W3FAMfuab3s0SdPd
F46XNihyMu/mZVC61gzYpOo2hjgu6HKbYAO0EfpY85EW5jqIn3Dz/K1fMi9xPGE7
Zsd1ViNQafaJsWmpm/v2Y2EN2Ld+COA6wEIesSKhLADS4KU3FUNFOkynWgDSvKyU
6UYfR0mVs8Xw7op0/OGqBJ2I8yv3jE18BvNmZ8Dhl/zkEve/t5tbyq7e817daJ2J
1kJDuQ+whiBIhHzdFB44pBn8w5qw8mxfN+DBwB6l9gNfmvzSkfzjuY9t+GQiD2h1
by/iD8Qx1Qb1sXBnVCWos0XjSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrLVRfi
J22w7sniTI5tuBrIzC6hMB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw
NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU
dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKcK3hpBmRuHQY3tXY0LBLKr7GH1o/n5Eo2+1etim+R1ke37mtwjCR
l3Mdj+odl4zq1HmTQ7weNNlmmd14VUbjtHlQEheXAQhS7Zpg3IXR2+/2jJgcS8/A
onWnmpHk1ebSdDX4GDJ/LKTORCMQll2cQGgk2+gHTX3E6sgD68C6ArHJ9QgsYoSe
WJIr5xJIYv90WzvH6uKetFHIETkL0eIkhYcdVylQY5ci1Uiu1cZihNwnZMV0jw8x
EW9I+3dAfnEZs9a6rrC+A2FPtPgYZbwQ7Cic8YPTlD5AosEQ+gLZ1oroW5m69Jm3
1GCpVeoXrZdO0rEhsRgJO6UxopteEtGx
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:43 2025 by rpki-client