This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
File: aEWjVwdX5r8sBIWsIXib_1AFHpo.mft (raw, json)
Hash identifier: qVkUtveWKlOXMLjb3d///VBiGmqekjN26SYnI7lNWiw=
Subject key identifier: 8E:90:96:DA:85:51:2C:7A:EA:75:3F:9C:FF:E8:CA:85:A7:B4:EB:57
Authority key identifier: 68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
Certificate issuer: /CN=A913500A/serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
Manifest number: 01AE
Signing time: Fri 19 Dec 2025 02:21:07 +0000
Manifest this update: Fri 19 Dec 2025 02:21:06 +0000
Manifest next update: Fri 26 Dec 2025 02:21:06 +0000
Files and hashes: 1: aEWjVwdX5r8sBIWsIXib_1AFHpo.crl (hash: +WxQWBrxEUM/n+K7yko/QJTSDg8hadbalhN8QX1y1+A=)
2: 0CE4B8C6474911EEA995D74FC4F9AE02.roa (hash: o8XeNpRnuUBlVWA6mPKxdSovFEQUWjBzrI7Rs+4BJAM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913500A, serialNumber=6845A3570757E6BF2C0485AC21789BFF50051E9A
Validity
Not Before: Dec 19 02:21:06 2025 GMT
Not After : Dec 26 02:21:06 2025 GMT
Subject: CN=6944b693-b4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:08:c7:a3:fe:df:2d:d8:0e:82:d0:80:5c:2f:
8d:96:86:a2:a0:e8:fa:7b:39:63:7d:8c:01:f9:33:
d8:88:67:32:1b:cd:87:c3:d3:f9:a0:75:10:c8:68:
c2:c5:57:0d:86:72:2d:dd:ec:07:06:1a:7f:db:5b:
77:44:ef:e3:3a:b6:32:ee:82:46:6e:1a:fc:b6:3b:
a2:45:39:cf:3d:17:2f:28:14:0b:1d:bb:19:bc:eb:
19:74:8a:11:a9:14:43:10:88:90:a2:3f:fe:62:96:
d1:f7:f6:fa:81:70:cf:11:d9:d1:eb:05:f8:9b:36:
ea:ff:bc:16:95:af:a2:4b:84:2d:19:ce:12:be:a1:
c1:4d:f6:80:bd:35:c0:ec:b5:68:2c:7d:51:52:a3:
a5:26:cf:10:4e:67:35:8d:f7:3f:35:f9:35:fe:75:
b5:85:6b:78:dc:a7:72:58:6d:e1:da:cf:04:d1:82:
e9:28:d6:e2:c0:16:74:52:3c:79:08:fe:76:8f:9e:
1e:08:e5:3e:a0:7b:ac:98:86:da:d1:e5:d0:34:0a:
52:77:3d:c2:6b:2d:ed:a6:cb:8c:9c:96:b0:59:8b:
d1:6e:00:17:39:77:b7:2f:4a:a7:4e:9f:4a:a6:71:
70:2f:2b:48:3a:83:66:c3:3b:b7:3a:04:82:01:0f:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:90:96:DA:85:51:2C:7A:EA:75:3F:9C:FF:E8:CA:85:A7:B4:EB:57
X509v3 Authority Key Identifier:
keyid:68:45:A3:57:07:57:E6:BF:2C:04:85:AC:21:78:9B:FF:50:05:1E:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEWjVwdX5r8sBIWsIXib_1AFHpo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913500A/CCA3EA92473F11EE87F40A7EC4F9AE02/aEWjVwdX5r8sBIWsIXib_1AFHpo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b6:07:da:58:a4:89:0c:b0:d7:37:5c:fd:4c:2d:4f:f1:bb:
8c:74:70:d5:d0:40:1e:39:9d:1c:d2:6e:e0:5e:ee:47:61:08:
60:56:7a:cb:5d:fd:49:94:ba:af:d3:94:44:83:4b:5b:39:1f:
f4:9d:0b:70:ce:ed:96:14:b5:3a:cc:6d:bd:fb:02:5e:bd:48:
11:cd:98:1d:fd:07:37:82:5d:03:8a:a3:8a:4d:a6:47:14:59:
d4:69:80:aa:e2:4c:78:df:22:1d:74:67:19:b8:cd:d5:5c:7c:
f7:61:ff:ed:df:9f:df:f9:22:db:9f:6d:0c:72:72:c7:61:43:
83:7d:b4:51:dc:e1:c5:9e:4f:e6:88:77:9b:75:61:4b:5b:af:
ec:52:1c:d7:f9:8b:12:ea:5f:ae:6d:8b:ce:4b:48:f6:82:8b:
10:35:72:30:0a:60:d4:1f:bf:fc:65:e4:73:15:e7:73:0d:f1:
51:e6:d0:08:0a:ba:f0:2e:81:9a:89:59:eb:82:8e:ce:dc:64:
3a:9d:39:41:cb:2a:ce:3f:d5:21:d5:60:ab:98:24:1d:80:0d:
0a:03:b6:92:ba:30:1f:a9:18:92:d4:ae:67:49:ee:67:00:91:
8c:36:19:b8:12:15:d1:21:5a:68:01:f5:b4:03:c5:ee:8c:40:
9e:cb:a4:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzUwMEExMTAvBgNVBAUTKDY4NDVBMzU3MDc1N0U2QkYyQzA0ODVBQzIxNzg5QkZG
NTAwNTFFOUEwHhcNMjUxMjE5MDIyMTA2WhcNMjUxMjI2MDIyMTA2WjAYMRYwFAYD
VQQDDA02OTQ0YjY5My1iNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlgjHo/7fLdgOgtCAXC+NloaioOj6ezljfYwB+TPYiGcyG82Hw9P5oHUQyGjC
xVcNhnIt3ewHBhp/21t3RO/jOrYy7oJGbhr8tjuiRTnPPRcvKBQLHbsZvOsZdIoR
qRRDEIiQoj/+YpbR9/b6gXDPEdnR6wX4mzbq/7wWla+iS4QtGc4SvqHBTfaAvTXA
7LVoLH1RUqOlJs8QTmc1jfc/Nfk1/nW1hWt43KdyWG3h2s8E0YLpKNbiwBZ0Ujx5
CP52j54eCOU+oHusmIba0eXQNApSdz3Cay3tpsuMnJawWYvRbgAXOXe3L0qnTp9K
pnFwLytIOoNmwzu3OgSCAQ/V6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6QltqF
USx66nU/nP/oyoWntOtXMB8GA1UdIwQYMBaAFGhFo1cHV+a/LASFrCF4m/9QBR6a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAwQS9DQ0EzRUE5MjQ3
M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVyOHNCSVdzSVhpYl8xQUZI
cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FFV2pWd2RYNXI4c0JJV3NJWGliXzFBRkhwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTAwQS9DQ0EzRUE5MjQ3M0YxMUVFODdGNDBBN0VDNEY5QUUwMi9hRVdqVndkWDVy
OHNCSVdzSVhpYl8xQUZIcG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPtgfaWKSJDLDXN1z9TC1P8buMdHDV0EAeOZ0c0m7gXu5HYQhgVnrL
Xf1JlLqv05REg0tbOR/0nQtwzu2WFLU6zG29+wJevUgRzZgd/Qc3gl0DiqOKTaZH
FFnUaYCq4kx43yIddGcZuM3VXHz3Yf/t35/f+SLbn20McnLHYUODfbRR3OHFnk/m
iHebdWFLW6/sUhzX+YsS6l+ubYvOS0j2gosQNXIwCmDUH7/8ZeRzFedzDfFR5tAI
CrrwLoGaiVnrgo7O3GQ6nTlByyrOP9Uh1WCrmCQdgA0KA7aSujAfqRiS1K5nSe5n
AJGMNhm4EhXRIVpoAfW0A8XujECey6RK
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:28 2025 by rpki-client