This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
File: racwBjpGGMJtFVQ1gZU7AYX9nIU.mft (raw, json)
Hash identifier: QmyRkCAqIGEeB5W5CnyQOH0CVj4LT429TTdoYAdjHfc=
Subject key identifier: 16:95:11:34:61:69:01:F9:AA:24:A0:70:D1:11:55:29:95:38:5F:C0
Authority key identifier: AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85
Certificate issuer: /CN=A9199231/serialNumber=ADA730063A4618C26D15543581953B0185FD9C85
Certificate serial: 07A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
Manifest number: 1329
Signing time: Mon 22 Dec 2025 18:32:13 +0000
Manifest this update: Mon 22 Dec 2025 18:32:12 +0000
Manifest next update: Mon 29 Dec 2025 18:32:12 +0000
Files and hashes: 1: racwBjpGGMJtFVQ1gZU7AYX9nIU.crl (hash: R/wa3iUH4MalE6m0HgWO1xwbov1CB+zUnhDBs/Gn51w=)
2: 84DF7DDE361211EBACEF8647C4F9AE02.roa (hash: 3j6fcjarkwTsrFF+jI5l1fkUVOMv+A+fXywGLnEk9ME=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl
rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:32:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1959 (0x7a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199231, serialNumber=ADA730063A4618C26D15543581953B0185FD9C85
Validity
Not Before: Dec 22 18:32:12 2025 GMT
Not After : Dec 29 18:32:12 2025 GMT
Subject: CN=69498eac-4422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:c5:c7:49:c9:8c:4e:79:88:3a:5d:07:ef:
c5:75:a2:13:6e:53:b4:c5:04:ba:fb:6f:07:dd:20:
5b:82:6b:53:cf:96:97:6d:97:b4:f4:e9:f0:25:76:
c0:d4:bb:d4:cd:06:ad:76:ea:d1:1d:5c:d7:6c:08:
2e:05:55:26:ce:f5:24:a3:0d:cc:78:29:fd:91:37:
3b:c8:7f:88:aa:01:18:cc:9c:65:b8:1b:58:85:e7:
d0:30:2f:d6:26:c3:31:7a:c9:b4:44:76:8e:c9:f5:
6d:c4:71:51:df:d6:3c:2b:45:1b:fc:f6:f9:82:c2:
3e:04:c4:39:45:f6:6c:e4:91:40:f1:cf:a6:36:ca:
74:12:90:1b:7c:06:7d:0f:49:76:3c:c7:56:c4:c6:
c8:f0:3e:78:18:db:d5:c1:9b:02:95:22:48:98:e6:
24:e8:a4:d9:da:47:24:e2:ca:cc:7e:9c:13:9a:f5:
ee:e7:90:2d:d0:f9:69:d7:e3:fb:8e:69:46:b4:1d:
b5:23:bc:06:db:d3:2f:1c:bc:77:41:d0:66:9f:b9:
66:18:86:50:53:58:c8:7a:b4:ea:f4:51:90:14:d7:
f6:39:1c:d9:81:fe:aa:7f:bc:f2:3d:31:eb:70:b3:
96:2c:72:d2:40:a4:79:85:db:4a:f1:9c:cd:0f:2a:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:95:11:34:61:69:01:F9:AA:24:A0:70:D1:11:55:29:95:38:5F:C0
X509v3 Authority Key Identifier:
keyid:AD:A7:30:06:3A:46:18:C2:6D:15:54:35:81:95:3B:01:85:FD:9C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/racwBjpGGMJtFVQ1gZU7AYX9nIU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/racwBjpGGMJtFVQ1gZU7AYX9nIU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0a:c9:15:de:45:48:8c:d6:5c:53:f7:4f:5c:16:ad:f2:71:
64:ef:5e:5c:b1:03:46:bb:09:c6:9f:60:c5:62:eb:9f:30:6c:
f9:e3:2c:a0:e5:10:04:9e:af:67:a0:7f:99:ca:5a:e3:3b:be:
08:f7:c6:a8:0c:d4:2c:c3:2d:fb:be:97:ab:fe:98:27:ca:76:
24:4c:2c:d9:2d:d9:a3:2d:7a:2e:23:74:80:11:54:60:f0:f3:
5b:13:2c:25:af:fb:c5:3b:e4:0a:bc:1c:ad:bb:27:29:ab:15:
69:cd:9d:61:11:80:54:9c:b1:89:c9:5f:82:ce:19:82:14:14:
90:ed:67:5e:66:12:64:75:d8:be:76:d3:f3:04:66:ca:69:37:
68:28:a5:b9:ab:a5:64:e6:cb:61:44:a7:c2:38:c9:19:3d:39:
36:72:72:50:31:09:ff:e1:65:a5:db:a2:6f:ee:18:5f:bd:f8:
08:8f:e5:c6:04:71:bc:4f:a5:85:45:d6:10:87:7d:1a:c5:f2:
8b:9e:43:b3:d6:86:8c:bd:6b:b2:9d:dc:b3:c2:de:fd:f1:c2:
57:a8:4d:d2:15:c6:c9:ce:6c:3b:67:9f:51:25:ef:34:3f:79:
5c:09:2d:40:94:d6:66:ab:c9:f0:73:de:4a:18:2e:ab:73:d9:
24:5d:68:69
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkyMzExMTAvBgNVBAUTKEFEQTczMDA2M0E0NjE4QzI2RDE1NTQzNTgxOTUzQjAx
ODVGRDlDODUwHhcNMjUxMjIyMTgzMjEyWhcNMjUxMjI5MTgzMjEyWjAYMRYwFAYD
VQQDDA02OTQ5OGVhYy00NDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtr3Fx0nJjE55iDpdB+/FdaITblO0xQS6+28H3SBbgmtTz5aXbZe09OnwJXbA
1LvUzQatdurRHVzXbAguBVUmzvUkow3MeCn9kTc7yH+IqgEYzJxluBtYhefQMC/W
JsMxesm0RHaOyfVtxHFR39Y8K0Ub/Pb5gsI+BMQ5RfZs5JFA8c+mNsp0EpAbfAZ9
D0l2PMdWxMbI8D54GNvVwZsClSJImOYk6KTZ2kck4srMfpwTmvXu55At0Plp1+P7
jmlGtB21I7wG29MvHLx3QdBmn7lmGIZQU1jIerTq9FGQFNf2ORzZgf6qf7zyPTHr
cLOWLHLSQKR5hdtK8ZzNDyooCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBaVETRh
aQH5qiSgcNERVSmVOF/AMB8GA1UdIwQYMBaAFK2nMAY6RhjCbRVUNYGVOwGF/ZyF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND
ODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dNSnRGVlExZ1pVN0FZWDlu
SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JhY3dCanBHR01KdEZWUTFnWlU3QVlYOW5JVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9yYWN3QmpwR0dN
SnRGVlExZ1pVN0FZWDluSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChCskV3kVIjNZcU/dPXBat8nFk715csQNGuwnGn2DFYuufMGz54yyg
5RAEnq9noH+ZylrjO74I98aoDNQswy37vper/pgnynYkTCzZLdmjLXouI3SAEVRg
8PNbEywlr/vFO+QKvBytuycpqxVpzZ1hEYBUnLGJyV+CzhmCFBSQ7WdeZhJkddi+
dtPzBGbKaTdoKKW5q6Vk5sthRKfCOMkZPTk2cnJQMQn/4WWl26Jv7hhfvfgIj+XG
BHG8T6WFRdYQh30axfKLnkOz1oaMvWuyndyzwt798cJXqE3SFcbJzmw7Z59RJe80
P3lcCS1AlNZmq8nwc95KGC6rc9kkXWhp
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:42:11 2025 by rpki-client