This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
File: c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json)
Hash identifier: I9W1l/suOVTGHXX6SqZ8VrA5fPO9M1wyhF6pYdKhPnA=
Subject key identifier: 20:1F:8D:24:B3:77:C5:E6:71:AF:27:51:42:FC:F8:5B:09:9E:6A:27
Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Certificate serial: 1235
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
Manifest number: 1227
Signing time: Mon 22 Dec 2025 16:50:42 +0000
Manifest this update: Mon 22 Dec 2025 16:50:41 +0000
Manifest next update: Mon 29 Dec 2025 16:50:41 +0000
Files and hashes: 1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: t39xSeegfzt4XRXSIYNA0gIGqGYQv95KvNiAAMKZj3k=)
2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: 19PePHoFF22nUkndMtbal1vAJr/Bweg8ayj4IBTrMGk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl
rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4661 (0x1235)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67
Validity
Not Before: Dec 22 16:50:41 2025 GMT
Not After : Dec 29 16:50:41 2025 GMT
Subject: CN=694976e1-bea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:1f:db:9b:32:cd:11:34:ef:d7:f1:40:67:
57:d8:c1:87:01:ab:53:b8:b3:bc:48:c6:bb:ce:04:
3e:a9:09:2f:34:e4:16:91:2a:71:9d:21:09:da:6b:
a7:12:43:b5:3e:13:89:98:fd:2e:dd:71:48:be:7f:
c0:03:91:85:44:3a:41:01:e7:62:b2:d3:b6:27:89:
15:3b:37:8a:4a:40:58:fd:7a:1d:f4:a3:ee:49:53:
59:7b:d4:50:df:88:6f:69:74:67:63:36:00:2b:1f:
ed:89:02:95:b1:60:ef:f4:b2:1a:3e:70:6c:a2:0b:
0b:e5:1a:3d:e8:3d:9e:05:dd:57:ab:ac:6c:dc:23:
a0:f2:4a:d5:fd:a4:08:22:b2:e3:8d:21:b1:a7:a0:
88:04:f3:ce:9c:de:a1:4b:13:55:46:c8:b8:16:1f:
79:3a:6f:4f:4b:7a:a8:86:7e:e5:b0:e6:56:c9:d5:
26:41:49:cf:33:be:e0:64:1e:d1:6c:92:2b:8f:fe:
68:8a:45:d9:a4:9e:c7:ea:99:cd:0a:0c:a9:2a:de:
bf:d4:5d:77:b8:c9:23:11:07:04:b8:d6:a5:d3:f8:
63:5c:ab:c4:68:7f:d5:f6:47:74:c0:ff:e1:55:6f:
4d:6e:01:bc:d1:dd:a0:00:7e:66:4a:af:71:f7:32:
22:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1F:8D:24:B3:77:C5:E6:71:AF:27:51:42:FC:F8:5B:09:9E:6A:27
X509v3 Authority Key Identifier:
keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:e5:d0:13:18:ba:40:cf:f9:03:57:42:20:c3:e9:3b:6d:ab:
20:64:1d:ab:df:28:91:53:2b:aa:39:81:c1:a0:a7:af:4c:b2:
1a:0f:4c:cc:78:e9:46:5a:18:16:90:ad:fa:ab:77:d0:5f:4b:
22:46:2d:ce:db:98:2f:9a:19:93:e7:e1:bf:7e:89:2a:58:8e:
0f:4c:21:5f:91:05:10:9f:e7:96:9f:3c:02:e0:fc:88:75:51:
90:65:29:ff:d3:b1:15:84:26:8f:fd:1c:41:36:17:da:81:79:
5e:dc:9c:e8:4e:10:02:61:7e:e2:31:e5:58:26:2d:34:ba:47:
ea:83:b6:d6:25:32:83:c6:96:5d:a4:35:7b:db:ae:48:b9:48:
e4:09:f8:b1:ab:dd:f7:dd:13:c4:79:52:14:7f:04:e9:6a:30:
f5:ec:14:7e:0a:69:ab:85:02:d1:d8:4b:bc:b5:d6:9e:de:f2:
28:79:79:24:4a:90:63:96:c2:6e:b5:19:b6:e4:b8:95:b3:bb:
42:05:b1:7c:e3:9a:0c:d8:a1:6a:67:74:e5:6b:d9:ef:03:7a:
0d:a5:9d:a1:0e:09:9e:f2:e9:e9:02:d4:66:3b:32:f1:fc:68:
e4:d7:38:32:54:6f:66:97:cd:51:78:81:bb:d2:76:72:19:19:
c5:ab:93:d2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy
Q0NDMjFENjcwHhcNMjUxMjIyMTY1MDQxWhcNMjUxMjI5MTY1MDQxWjAYMRYwFAYD
VQQDDA02OTQ5NzZlMS1iZWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkqkf25syzRE079fxQGdX2MGHAatTuLO8SMa7zgQ+qQkvNOQWkSpxnSEJ2mun
EkO1PhOJmP0u3XFIvn/AA5GFRDpBAedistO2J4kVOzeKSkBY/Xod9KPuSVNZe9RQ
34hvaXRnYzYAKx/tiQKVsWDv9LIaPnBsogsL5Ro96D2eBd1Xq6xs3COg8krV/aQI
IrLjjSGxp6CIBPPOnN6hSxNVRsi4Fh95Om9PS3qohn7lsOZWydUmQUnPM77gZB7R
bJIrj/5oikXZpJ7H6pnNCgypKt6/1F13uMkjEQcEuNal0/hjXKvEaH/V9kd0wP/h
VW9NbgG80d2gAH5mSq9x9zIiXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAfjSSz
d8Xmca8nUUL8+FsJnmonMB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz
QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RERCOC9EM0REMzdGOEYzQjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhX
NTdua3Yxc01nWElzekNIV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAh5dATGLpAz/kDV0Igw+k7basgZB2r3yiRUyuqOYHBoKevTLIaD0zM
eOlGWhgWkK36q3fQX0siRi3O25gvmhmT5+G/fokqWI4PTCFfkQUQn+eWnzwC4PyI
dVGQZSn/07EVhCaP/RxBNhfagXle3JzoThACYX7iMeVYJi00ukfqg7bWJTKDxpZd
pDV7265IuUjkCfixq9333RPEeVIUfwTpajD17BR+CmmrhQLR2Eu8tdae3vIoeXkk
SpBjlsJutRm25LiVs7tCBbF845oM2KFqZ3Tla9nvA3oNpZ2hDgme8unpAtRmOzLx
/Gjk1zgyVG9ml81ReIG70nZyGRnFq5PS
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:47 2025 by rpki-client