This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
File: P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft (raw, json)
Hash identifier: Nxj9pF+2CH54SC980kW32Bk6HBtWespkfn7szBzE2/M=
Subject key identifier: 9F:C4:E4:BD:95:38:42:31:2C:24:B8:B8:BB:10:23:7E:70:F4:D6:51
Authority key identifier: 3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
Certificate issuer: /CN=A919F0DA/serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Certificate serial: 34F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
Manifest number: 616E
Signing time: Mon 22 Dec 2025 14:15:21 +0000
Manifest this update: Mon 22 Dec 2025 14:15:21 +0000
Manifest next update: Mon 29 Dec 2025 14:15:21 +0000
Files and hashes: 1: P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl (hash: 7WdsTNlrIVnXAgqZJTWcHisGj+/70fn+QgFw2GhRuIg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 14:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13557 (0x34f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=3F41E048D22B2A1AEA4CE0B844952A4A39D6CB37
Validity
Not Before: Dec 22 14:15:21 2025 GMT
Not After : Dec 29 14:15:21 2025 GMT
Subject: CN=69495279-704a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fc:9b:1c:bd:03:c6:cf:a1:c0:15:a7:d0:5b:
39:42:d0:66:a3:b2:d6:5a:eb:2a:c8:57:b9:93:bf:
ec:d8:f2:66:06:45:51:6e:62:b0:04:6e:a8:82:de:
e3:cc:e2:66:fa:81:97:ef:b6:52:43:02:63:5b:e3:
14:81:57:a4:dd:59:99:c8:cb:17:0c:1f:41:9e:2d:
be:78:bd:9c:ca:07:2c:19:b9:e1:cd:24:25:74:fa:
97:80:30:70:ab:91:73:a4:65:33:48:ec:dd:8e:45:
c3:0d:4b:dc:a6:be:00:10:ee:64:f4:3b:5f:a3:c6:
4a:37:f6:95:f1:e6:49:66:49:7e:be:20:1b:9a:88:
63:c7:1c:64:44:4f:2a:82:43:be:85:b9:bc:6d:f2:
e6:61:4e:ab:80:f8:44:fe:46:18:9d:e4:ed:d2:3d:
41:35:aa:1a:aa:c8:a7:14:8f:f3:62:de:4a:0d:52:
6a:fb:f3:0f:4c:04:54:4f:f6:26:e1:90:5e:7c:cc:
c6:e0:e1:c4:0c:15:c3:12:69:44:f2:ee:c5:fe:ea:
a8:af:1b:e4:e0:12:2d:2e:38:22:51:fc:6c:46:c1:
e1:82:e0:11:30:75:a0:fd:3f:65:f0:0b:15:bd:b7:
95:0f:2c:56:77:5e:28:ad:eb:38:4c:c0:fc:9a:a5:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C4:E4:BD:95:38:42:31:2C:24:B8:B8:BB:10:23:7E:70:F4:D6:51
X509v3 Authority Key Identifier:
keyid:3F:41:E0:48:D2:2B:2A:1A:EA:4C:E0:B8:44:95:2A:4A:39:D6:CB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/P0HgSNIrKhrqTOC4RJUqSjnWyzc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:ab:be:90:c3:56:b1:84:54:76:59:82:d4:12:70:25:3b:d5:
49:fd:1c:b5:0a:fe:13:cb:d1:75:62:a3:3a:48:00:e6:1c:8b:
eb:a4:07:39:73:bf:60:e5:41:f9:e9:93:7f:2f:bf:c1:bc:59:
ff:f5:e7:b2:55:9b:c4:29:ee:5a:fd:c9:89:4f:b4:6e:29:8d:
a1:dc:5c:b2:50:4c:b1:8c:7b:23:59:d6:2d:fb:8c:19:ef:12:
2d:3e:a6:c2:ae:2a:e7:6b:9e:62:ae:76:91:f7:bd:01:b2:ba:
06:7e:3d:3b:9a:f3:3b:f7:a2:41:be:1e:d7:ff:b1:e5:18:e9:
ed:2b:b7:f5:d3:c5:80:64:9f:05:1d:6e:f1:33:55:95:ed:f9:
d6:d2:52:34:88:62:8d:c6:01:0b:ed:5e:83:83:12:b5:2a:8f:
43:a4:79:ed:4c:d2:65:7e:d3:83:b9:89:b5:57:b9:ef:7d:15:
e0:e6:6a:ad:5a:93:1d:59:51:9f:fc:68:37:0a:17:01:8a:ab:
6a:39:b7:05:db:90:30:b9:c9:c0:61:5a:09:de:89:53:a1:7b:
68:b5:77:42:96:53:68:21:1b:08:36:68:2e:b8:22:e1:45:3c:
19:e3:b7:41:c1:05:51:1a:b7:44:88:08:9e:58:0b:eb:00:9f:
f5:e9:1e:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwREExMTAvBgNVBAUTKDNGNDFFMDQ4RDIyQjJBMUFFQTRDRTBCODQ0OTUyQTRB
MzlENkNCMzcwHhcNMjUxMjIyMTQxNTIxWhcNMjUxMjI5MTQxNTIxWjAYMRYwFAYD
VQQDDA02OTQ5NTI3OS03MDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm/ybHL0Dxs+hwBWn0Fs5QtBmo7LWWusqyFe5k7/s2PJmBkVRbmKwBG6ogt7j
zOJm+oGX77ZSQwJjW+MUgVek3VmZyMsXDB9Bni2+eL2cygcsGbnhzSQldPqXgDBw
q5FzpGUzSOzdjkXDDUvcpr4AEO5k9Dtfo8ZKN/aV8eZJZkl+viAbmohjxxxkRE8q
gkO+hbm8bfLmYU6rgPhE/kYYneTt0j1BNaoaqsinFI/zYt5KDVJq+/MPTARUT/Ym
4ZBefMzG4OHEDBXDEmlE8u7F/uqorxvk4BItLjgiUfxsRsHhguARMHWg/T9l8AsV
vbeVDyxWd14ores4TMD8mqVKhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/E5L2V
OEIxLCS4uLsQI35w9NZRMB8GA1UdIwQYMBaAFD9B4EjSKyoa6kzguESVKko51ss3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE
NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9QMEhnU05JcktocnFUT0M0UkpVcVNqbld5
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1AwSGdTTklyS2hycVRPQzRSSlVxU2puV3l6Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9QMEhnU05Jckto
cnFUT0M0UkpVcVNqbld5emMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzq76Qw1axhFR2WYLUEnAlO9VJ/Ry1Cv4Ty9F1YqM6SADmHIvrpAc5
c79g5UH56ZN/L7/BvFn/9eeyVZvEKe5a/cmJT7RuKY2h3FyyUEyxjHsjWdYt+4wZ
7xItPqbCrirna55irnaR970BsroGfj07mvM796JBvh7X/7HlGOntK7f108WAZJ8F
HW7xM1WV7fnW0lI0iGKNxgEL7V6DgxK1Ko9DpHntTNJlftODuYm1V7nvfRXg5mqt
WpMdWVGf/Gg3ChcBiqtqObcF25AwucnAYVoJ3olToXtotXdCllNoIRsINmguuCLh
RTwZ47dBwQVRGrdEiAieWAvrAJ/16R5m
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:18 2025 by rpki-client