This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
File: 19cjt6SfGf_8n8cw1A9pUEjMCZk.mft (raw, json)
Hash identifier: YzLB9WVUuUVPQrtBXsUvh7jIX16inFTULRWnM0OlxaA=
Subject key identifier: BC:AF:1A:9B:74:37:67:5A:74:C3:F7:A0:B0:53:52:D8:81:D2:AD:85
Authority key identifier: D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99
Certificate issuer: /CN=A919C068/serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
Manifest number: 30
Signing time: Fri 05 Dec 2025 05:27:29 +0000
Manifest this update: Fri 05 Dec 2025 05:27:28 +0000
Manifest next update: Fri 12 Dec 2025 05:27:28 +0000
Files and hashes: 1: 19cjt6SfGf_8n8cw1A9pUEjMCZk.crl (hash: VW75fBw6grTqR+pNtHcnMvbLQDMHvq5etmbCPwSRS4o=)
2: 751861108E2B11F0BFDA106EC4F9AE02.roa (hash: Pueo4Q2vOuMQZ4I9zO+98kEqu2uxXJRejgT+irrxbhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl
rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C068, serialNumber=D7D723B7A49F19FFFC9FC730D40F695048CC0999
Validity
Not Before: Dec 5 05:27:28 2025 GMT
Not After : Dec 12 05:27:28 2025 GMT
Subject: CN=69326d40-ae46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:20:5c:bc:0e:9e:c3:b8:5c:5c:a6:c6:b7:
65:2d:a3:6d:5f:35:a6:72:29:1e:1d:54:8f:34:fd:
02:e5:73:7f:d1:5c:f6:68:01:4d:34:87:62:eb:46:
97:0b:86:c6:a5:55:ca:9d:f9:69:23:42:ef:1c:95:
a9:80:6a:a7:f8:ea:49:57:ae:4b:86:57:bc:4c:16:
dd:83:85:ed:f6:b4:5f:ec:98:8a:ce:d1:26:6d:b1:
3d:cf:a9:77:98:29:c4:d2:ff:73:d0:1f:29:e0:b2:
81:6f:20:2a:38:57:1f:73:f6:4e:c5:a7:b7:8a:a7:
91:7f:dc:3e:22:24:14:9a:cc:71:44:79:4f:11:37:
0f:f3:ce:b6:5a:14:cc:fd:2a:e1:e3:5f:12:b8:b8:
05:97:a7:72:33:26:08:74:f7:f5:59:7d:17:df:15:
2d:17:51:23:03:17:a2:16:05:35:37:37:f4:1b:3d:
8b:fc:e3:c1:7a:f2:53:e9:72:e3:3a:65:e2:fc:3f:
27:76:b7:df:10:70:57:cb:32:6e:ca:82:e0:a8:68:
3c:63:a5:84:8c:7d:a1:60:1d:05:80:45:0e:d9:32:
d6:1d:38:af:34:c1:b7:ee:f0:fa:91:ca:dc:0b:9e:
62:dd:74:08:83:21:4b:df:f3:17:6e:ba:be:4b:b1:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AF:1A:9B:74:37:67:5A:74:C3:F7:A0:B0:53:52:D8:81:D2:AD:85
X509v3 Authority Key Identifier:
keyid:D7:D7:23:B7:A4:9F:19:FF:FC:9F:C7:30:D4:0F:69:50:48:CC:09:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/19cjt6SfGf_8n8cw1A9pUEjMCZk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C068/DB1B280E8CB811F082C92E63C4F9AE02/19cjt6SfGf_8n8cw1A9pUEjMCZk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:41:80:63:eb:b5:e2:3c:05:a2:fa:b1:fa:6f:20:7c:96:b0:
03:0b:74:df:08:bd:19:ff:10:db:9f:8c:1c:74:31:9f:63:65:
8e:6f:e2:85:35:ff:03:f4:95:a1:c2:b0:e8:b3:e6:30:6e:e8:
47:3c:ee:3b:2c:af:9b:82:3b:1c:41:13:15:a7:3d:b1:98:a5:
09:0b:83:ed:37:ed:97:8d:7b:da:55:d1:75:16:4a:19:ca:86:
80:67:82:50:9d:c0:e3:30:0b:9f:78:bd:39:5e:de:c8:9a:8d:
ea:12:7b:c0:17:2d:02:9a:14:e7:10:26:81:9e:6b:16:cc:d8:
2d:0c:bf:4f:c3:7f:cf:c4:1a:c5:df:2f:85:b8:07:75:5b:ec:
33:4d:d8:86:74:ed:d0:a1:24:ac:2e:04:8c:27:07:ed:64:e4:
b8:b2:66:6c:10:4f:92:dd:61:66:39:30:dd:d5:01:a0:46:7f:
59:dd:d1:b8:9e:da:02:c4:33:4a:9a:f6:a7:e2:de:f0:71:b3:
1c:4c:55:18:09:7f:08:cb:8c:b0:7d:98:87:07:6a:1e:5d:22:
84:8c:26:91:6a:86:5a:12:58:25:1a:ac:53:e3:25:89:82:88:
2a:fe:44:e5:a8:a4:e5:86:a1:6b:65:c0:aa:bb:f1:2e:ba:10:
4e:2e:47:95
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QzA2ODExMC8GA1UEBRMoRDdENzIzQjdBNDlGMTlGRkZDOUZDNzMwRDQwRjY5NTA0
OENDMDk5OTAeFw0yNTEyMDUwNTI3MjhaFw0yNTEyMTIwNTI3MjhaMBgxFjAUBgNV
BAMTDTY5MzI2ZDQwLWFlNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+CyBcvA6ew7hcXKbGt2Uto21fNaZyKR4dVI80/QLlc3/RXPZoAU00h2LrRpcL
hsalVcqd+WkjQu8clamAaqf46klXrkuGV7xMFt2Dhe32tF/smIrO0SZtsT3PqXeY
KcTS/3PQHyngsoFvICo4Vx9z9k7Fp7eKp5F/3D4iJBSazHFEeU8RNw/zzrZaFMz9
KuHjXxK4uAWXp3IzJgh09/VZfRffFS0XUSMDF6IWBTU3N/QbPYv848F68lPpcuM6
ZeL8Pyd2t98QcFfLMm7KguCoaDxjpYSMfaFgHQWARQ7ZMtYdOK80wbfu8PqRytwL
nmLddAiDIUvf8xduur5LseZ5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvK8am3Q3
Z1p0w/egsFNS2IHSrYUwHwYDVR0jBBgwFoAU19cjt6SfGf/8n8cw1A9pUEjMCZkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDMDY4L0RCMUIyODBFOENC
ODExRjA4MkM5MkU2M0M0RjlBRTAyLzE5Y2p0NlNmR2ZfOG44Y3cxQTlwVUVqTUNa
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvMTljanQ2U2ZHZl84bjhjdzFBOXBVRWpNQ1prLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlD
MDY4L0RCMUIyODBFOENCODExRjA4MkM5MkU2M0M0RjlBRTAyLzE5Y2p0NlNmR2Zf
OG44Y3cxQTlwVUVqTUNaay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHZBgGPrteI8BaL6sfpvIHyWsAMLdN8IvRn/ENufjBx0MZ9jZY5v4oU1
/wP0laHCsOiz5jBu6Ec87jssr5uCOxxBExWnPbGYpQkLg+037ZeNe9pV0XUWShnK
hoBnglCdwOMwC594vTle3siajeoSe8AXLQKaFOcQJoGeaxbM2C0Mv0/Df8/EGsXf
L4W4B3Vb7DNN2IZ07dChJKwuBIwnB+1k5LiyZmwQT5LdYWY5MN3VAaBGf1nd0bie
2gLEM0qa9qfi3vBxsxxMVRgJfwjLjLB9mIcHah5dIoSMJpFqhloSWCUarFPjJYmC
iCr+ROWopOWGoWtlwKq78S66EE4uR5U=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:00:22 2025 by rpki-client