This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
File: AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft (raw, json)
Hash identifier: 2jBqn7yejz0aiyJCVmR14jn7aE9PYHenNSpKGnQTl+I=
Subject key identifier: E2:1C:83:35:25:AE:28:E4:B9:20:BD:C0:C0:40:01:4A:A8:A6:FD:8E
Authority key identifier: 00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C
Certificate issuer: /CN=A915E131/serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
Manifest number: 18
Signing time: Fri 19 Dec 2025 06:46:48 +0000
Manifest this update: Fri 19 Dec 2025 06:46:48 +0000
Manifest next update: Fri 26 Dec 2025 06:46:48 +0000
Files and hashes: 1: AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl (hash: Zljg+fmGfz4Ys+ObUik8zCIcfQKvFkeC43c/FI73GZs=)
2: 7CCDD124BEC811F09972220FC4F9AE02.roa (hash: kF3MsF0LKW2hpCo2tc4HdlJWfcSXM3xD20g6oUSt0Tw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl
rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:46:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E131, serialNumber=005704403B95E58D8C4E71BF153DA3F264A9865C
Validity
Not Before: Dec 19 06:46:48 2025 GMT
Not After : Dec 26 06:46:48 2025 GMT
Subject: CN=6944f4d8-c968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:fa:78:24:ae:10:90:7d:52:4e:f2:08:1a:
34:b4:ad:e9:b0:0f:66:ae:82:6d:f5:4e:c8:4d:1b:
6a:cf:6a:10:e0:0a:e1:94:e3:29:1a:65:dd:93:f2:
3f:57:09:92:61:14:e6:e6:7c:94:04:b2:3f:43:24:
c9:81:0d:c9:24:c1:59:4e:5a:52:25:ac:eb:ec:63:
36:d9:a8:e7:18:c5:dd:bc:ef:3c:a1:97:9d:6e:a3:
d9:ba:80:17:cd:3d:59:57:ed:9a:9a:19:fd:ad:80:
6c:a8:43:d4:71:2b:2f:49:e8:7c:b0:71:4f:3e:c0:
15:06:20:27:98:f8:08:89:18:75:d6:8d:37:4b:1d:
87:a0:00:a8:eb:1b:c1:c8:5a:11:20:12:d8:8a:f0:
90:32:d3:4a:f9:83:06:ac:7c:39:5b:d2:10:73:20:
34:9a:3d:15:7e:d3:7f:f3:49:06:21:7e:29:28:01:
6c:dd:93:6c:7a:5b:46:54:b6:34:65:52:0d:1e:33:
b0:10:45:91:84:ae:8a:11:b1:1f:f0:8b:0b:82:17:
b8:83:4b:e4:e7:94:d8:85:af:61:e3:c7:c3:71:5f:
fd:07:65:82:c0:76:d5:dd:15:c9:8e:24:ed:05:ad:
5e:d5:87:58:cb:f3:f7:c3:51:ed:58:0f:e8:8b:c4:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1C:83:35:25:AE:28:E4:B9:20:BD:C0:C0:40:01:4A:A8:A6:FD:8E
X509v3 Authority Key Identifier:
keyid:00:57:04:40:3B:95:E5:8D:8C:4E:71:BF:15:3D:A3:F2:64:A9:86:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AFcEQDuV5Y2MTnG_FT2j8mSphlw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/5D4E541CBC1211F0AEFB607BC4F9AE02/AFcEQDuV5Y2MTnG_FT2j8mSphlw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:fa:95:92:0c:50:25:92:6e:66:58:aa:fe:d1:b3:af:7c:5c:
37:93:05:3f:42:21:0b:21:c6:5c:eb:f2:0f:06:49:77:91:56:
ea:29:87:31:12:a0:dd:26:c0:21:8f:c0:51:2e:02:c5:70:db:
90:7c:10:1d:e4:75:1c:c7:e8:ab:ab:ff:b9:b6:7f:05:ee:31:
bd:0f:c4:d6:64:11:06:48:f2:af:d9:9d:b6:e6:71:a7:c3:ac:
a6:5d:49:01:58:b8:20:f2:fd:72:b5:d5:7c:a3:68:a1:3e:c5:
e2:5c:b0:7e:e0:92:d2:d0:20:12:98:ef:e6:2b:2d:ba:9d:02:
82:89:85:59:3b:2e:b3:a8:e5:a1:6a:85:62:bc:27:90:a7:87:
b9:12:e3:7e:51:d3:1f:12:af:a2:12:d9:7f:76:57:0f:8b:34:
e1:25:c1:c8:85:80:6e:8b:e7:1e:35:66:ee:b5:16:50:00:62:
40:aa:34:d1:b2:4b:46:ff:71:f7:cc:d4:50:a5:40:f6:53:99:
cf:4f:8f:79:15:0a:22:67:d8:7f:38:d1:22:e3:b3:fd:41:62:
ff:b2:52:45:fd:3c:4f:5d:67:9b:ba:be:3f:96:d0:42:21:dc:
37:96:6b:4c:e5:df:8a:3c:79:3e:88:7b:db:58:27:28:29:f8:
91:cf:e2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:50:37 2025 by rpki-client