This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
File: RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft (raw, json)
Hash identifier: B/6b2QO01fRfzBM1Fl9MHe9y0hOu5PfatROVtssxtkY=
Subject key identifier: D7:06:89:13:67:ED:B8:70:61:93:9D:26:13:72:69:9D:B3:ED:83:21
Authority key identifier: 44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
Certificate issuer: /CN=A919C5FE/serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Certificate serial: 1302
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
Manifest number: 12F9
Signing time: Mon 22 Dec 2025 16:45:23 +0000
Manifest this update: Mon 22 Dec 2025 16:45:23 +0000
Manifest next update: Mon 29 Dec 2025 16:45:23 +0000
Files and hashes: 1: RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl (hash: 3VTWZ1buCG2hjy53ckO24nglI+e8CHU9YRxOAOixwC4=)
2: C3CD4B12C85411E8A5D4274BC4F9AE02.roa (hash: eY3ibsYzV91/JflqQnul3DxFJH+5O7KLj0qmVYC2zhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4866 (0x1302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919C5FE, serialNumber=44ABE24B70A116046F744211D18D026505B0C7B3
Validity
Not Before: Dec 22 16:45:23 2025 GMT
Not After : Dec 29 16:45:23 2025 GMT
Subject: CN=694975a3-bff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:b7:29:09:32:fd:b1:a1:f5:55:98:d5:61:
9a:dd:fb:8a:f1:fc:a8:86:5a:7e:c2:2f:dc:88:7f:
2e:4d:72:48:30:41:0e:e1:de:3b:c9:36:35:5b:d7:
36:ca:e1:b8:32:93:97:63:8a:f4:75:40:fd:a9:d3:
65:19:68:12:88:bf:a6:43:02:b3:bb:f7:a4:52:ab:
8e:c0:ac:78:40:3c:99:f6:d0:66:c0:a8:5a:83:1b:
e8:1a:f3:cb:01:7c:c8:1e:a4:a3:8a:22:72:0d:20:
87:80:25:b7:93:83:d6:8c:67:22:75:b4:18:1e:97:
62:0d:f7:71:56:45:bd:21:9b:97:e6:16:d5:1e:d3:
04:76:7d:e7:30:68:0b:3e:38:f3:5c:78:c7:97:fd:
fb:8d:60:d0:93:13:52:4f:d6:4e:16:9d:47:3a:63:
01:74:93:69:58:c4:e5:cb:c5:d0:25:49:76:57:12:
3c:35:b4:f0:14:fd:03:98:13:f1:67:3a:14:c1:f2:
8a:48:62:d8:22:10:6b:d9:86:94:b6:61:29:e8:81:
d6:bc:92:60:89:5b:3c:a1:fa:d9:fa:5f:21:de:04:
87:64:5a:c3:11:5b:9b:94:35:48:b2:30:be:77:b4:
c7:5c:24:7d:bc:84:a1:a5:30:07:7e:6d:d0:bb:93:
ac:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:89:13:67:ED:B8:70:61:93:9D:26:13:72:69:9D:B3:ED:83:21
X509v3 Authority Key Identifier:
keyid:44:AB:E2:4B:70:A1:16:04:6F:74:42:11:D1:8D:02:65:05:B0:C7:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RKviS3ChFgRvdEIR0Y0CZQWwx7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5FE/A07FA1CEC85311E8AB54D348C4F9AE02/RKviS3ChFgRvdEIR0Y0CZQWwx7M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:9d:24:e5:03:43:e2:2d:3b:d8:c3:55:46:e4:a9:42:7c:d6:
7a:bb:5c:f6:d0:47:0b:6b:c6:8d:06:bf:32:83:21:3f:cf:82:
53:f3:0b:36:ee:6e:7a:fb:1c:ed:e6:2f:d7:8b:28:0c:5e:f6:
21:19:26:a9:ce:99:6f:34:6a:d7:b7:fb:bf:65:13:5f:bb:63:
69:8c:37:ca:aa:73:2d:b6:0d:f8:0e:b5:13:b8:ac:63:a7:55:
d8:e8:bf:79:45:36:31:2d:85:e1:33:27:03:54:ed:ea:d2:5d:
d0:17:8e:74:34:3d:67:7c:f6:5b:ad:c7:f8:1e:a5:da:0c:0d:
8f:39:ef:1b:e3:29:33:81:58:bf:df:43:8c:a8:f2:91:dd:e3:
23:10:65:fa:62:aa:82:a2:9a:5c:20:e1:05:d1:2c:e0:05:55:
17:58:65:c3:d0:85:0f:3f:b3:14:42:ed:e8:55:14:c5:a7:62:
93:72:22:6e:81:89:38:62:c6:4a:06:0f:02:91:ec:0d:65:15:
7c:08:87:44:7b:5f:e0:62:c6:62:7e:75:8d:84:ef:a4:b1:20:
51:44:fe:f2:f1:77:92:2b:82:3d:51:66:04:a6:8e:97:05:37:
2e:07:cf:5b:06:29:46:89:b2:d4:9e:ff:43:51:46:4f:de:63:
af:59:08:42
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM1RkUxMTAvBgNVBAUTKDQ0QUJFMjRCNzBBMTE2MDQ2Rjc0NDIxMUQxOEQwMjY1
MDVCMEM3QjMwHhcNMjUxMjIyMTY0NTIzWhcNMjUxMjI5MTY0NTIzWjAYMRYwFAYD
VQQDDA02OTQ5NzVhMy1iZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqlS3KQky/bGh9VWY1WGa3fuK8fyohlp+wi/ciH8uTXJIMEEO4d47yTY1W9c2
yuG4MpOXY4r0dUD9qdNlGWgSiL+mQwKzu/ekUquOwKx4QDyZ9tBmwKhagxvoGvPL
AXzIHqSjiiJyDSCHgCW3k4PWjGcidbQYHpdiDfdxVkW9IZuX5hbVHtMEdn3nMGgL
PjjzXHjHl/37jWDQkxNST9ZOFp1HOmMBdJNpWMTly8XQJUl2VxI8NbTwFP0DmBPx
ZzoUwfKKSGLYIhBr2YaUtmEp6IHWvJJgiVs8ofrZ+l8h3gSHZFrDEVublDVIsjC+
d7THXCR9vIShpTAHfm3Qu5OstwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcGiRNn
7bhwYZOdJhNyaZ2z7YMhMB8GA1UdIwQYMBaAFESr4ktwoRYEb3RCEdGNAmUFsMez
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzVGRS9BMDdGQTFDRUM4
NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZnUnZkRUlSMFkwQ1pRV3d4
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JLdmlTM0NoRmdSdmRFSVIwWTBDWlFXd3g3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzVGRS9BMDdGQTFDRUM4NTMxMUU4QUI1NEQzNDhDNEY5QUUwMi9SS3ZpUzNDaEZn
UnZkRUlSMFkwQ1pRV3d4N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHnSTlA0PiLTvYw1VG5KlCfNZ6u1z20EcLa8aNBr8ygyE/z4JT8ws2
7m56+xzt5i/XiygMXvYhGSapzplvNGrXt/u/ZRNfu2NpjDfKqnMttg34DrUTuKxj
p1XY6L95RTYxLYXhMycDVO3q0l3QF450ND1nfPZbrcf4HqXaDA2POe8b4ykzgVi/
30OMqPKR3eMjEGX6YqqCoppcIOEF0SzgBVUXWGXD0IUPP7MUQu3oVRTFp2KTciJu
gYk4YsZKBg8CkewNZRV8CIdEe1/gYsZifnWNhO+ksSBRRP7y8XeSK4I9UWYEpo6X
BTcuB89bBilGibLUnv9DUUZP3mOvWQhC
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:34 2025 by rpki-client