This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json)
Hash identifier: 0p3M7tv8GaqXcKaRwP2OsyJZefnToEpUX31Pg83DVBo=
Subject key identifier: FC:58:AC:19:C4:28:06:B3:F7:FE:6E:48:BB:60:5F:E7:E8:F5:EF:88
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial: 18FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
Manifest number: 1868
Signing time: Thu 18 Dec 2025 16:26:54 +0000
Manifest this update: Thu 18 Dec 2025 16:26:53 +0000
Manifest next update: Thu 25 Dec 2025 16:26:53 +0000
Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: eLMnBRwYIfX2lBfMNC7wFZGpEifFjS43h/Ph9fIy3ls=)
2: AF2BF494314B11F0BDC2D637C4F9AE02.roa (hash: /1J4f9DUb/35uCpXwmz+NmbAI2453+Nij3SziuypiQY=)
3: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: MYDMwEH13UUV8AshJhyD48FZfAvalduY5XFAT0V7ih0=)
4: 4409B8649D1011F0B28FB758C4F9AE02.roa (hash: A/zZSRGjkMwADjlZyW6cF/auyn1kJtFRTWSHvAVO1hc=)
5: 0717511C564511F0A1E8983AC4F9AE02.roa (hash: xG2LS6C8x8CQUK4qPW/RvBSwEnqkcjEWwMOeK61dfdw=)
6: 5D75149CD70D11F0B16F7C3995D3641D.roa (hash: W2WG2pihA0Y79l/nVFRnSUeCLL6oNnSZep7NvPbt3Ek=)
7: EF885538C28B11EBBF310469C4F9AE02.roa (hash: zCtYWfWmMHrxhAWz295ThSf+06H/coZnMyFAor81eJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6394 (0x18fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Validity
Not Before: Dec 18 16:26:53 2025 GMT
Not After : Dec 25 16:26:53 2025 GMT
Subject: CN=69442b4d-983b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:3c:2c:3d:31:a2:0f:f1:96:37:51:af:8d:
ae:b3:85:a7:3d:87:70:6e:31:19:5b:aa:e7:ca:7a:
0a:76:61:35:e1:bc:4c:6a:8d:5d:5f:00:45:a8:0c:
30:88:3b:e6:04:d5:09:d1:64:7c:51:22:12:7c:36:
ea:28:71:da:66:56:cd:2b:9a:6b:a2:69:fe:96:cd:
d0:ec:9f:d8:b9:f5:bc:a3:12:21:94:41:de:03:d0:
b5:af:a3:05:73:09:88:f6:0c:17:12:9f:e5:14:c1:
07:83:c7:5d:a6:36:d4:41:54:f1:e4:27:f3:d5:d5:
57:eb:75:c6:bc:02:95:33:40:67:36:52:d1:e0:86:
fe:78:e3:82:53:97:b0:79:9c:ed:ac:cd:c4:92:67:
d9:38:8e:0c:e0:d7:a6:78:c0:9d:27:89:fd:6f:77:
f0:7d:2d:ea:eb:db:bc:24:40:c6:cc:fe:bc:be:50:
86:15:57:32:5d:7c:fc:24:48:75:c6:41:44:42:ef:
79:ba:5f:2f:06:5b:f3:18:c8:3e:c2:a2:f6:03:b0:
87:a0:a6:26:41:4f:0a:17:02:be:8a:fd:63:56:84:
6b:60:74:ae:e0:4f:7f:99:37:fa:04:1d:82:de:38:
0d:0a:e9:45:62:72:68:49:fd:50:c6:0f:e3:0f:c1:
2c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:AC:19:C4:28:06:B3:F7:FE:6E:48:BB:60:5F:E7:E8:F5:EF:88
X509v3 Authority Key Identifier:
keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9b:a1:61:19:25:e8:e1:42:a6:50:12:b5:98:c2:27:a0:85:
ef:55:cd:37:1b:c7:39:3e:cc:38:54:d8:83:2f:a6:35:1d:71:
53:27:97:3f:03:55:f1:b9:b8:ee:d3:7b:24:07:4c:e6:95:f6:
25:a0:10:f2:de:f5:39:55:06:4b:23:b9:92:4e:c7:5a:30:d0:
3b:c5:8d:9a:ed:4b:54:75:c7:84:45:e2:64:e1:6e:4e:93:2c:
79:53:d0:88:5d:ba:ef:5c:97:4f:f8:f7:a5:09:56:35:b9:e1:
c1:ed:98:e3:fb:ba:87:2f:dd:b1:04:df:14:95:40:56:a6:55:
84:c5:c3:5b:d8:c8:62:d8:ba:61:f9:4b:f8:93:cb:d4:58:eb:
fc:21:d2:31:07:95:3e:ba:8d:1b:b4:04:ae:d1:28:09:c1:c4:
51:11:e6:ff:c8:95:77:70:f2:0c:9f:c7:ff:62:c0:56:7f:bd:
c7:43:8b:50:54:74:f2:70:82:be:a2:7e:81:a9:4f:99:a3:32:
34:a7:0a:81:1d:71:81:30:90:d8:9d:4c:d9:ea:14:c8:99:32:
60:9e:39:1d:a6:72:b3:2f:0e:25:0c:57:00:25:77:3d:e5:c3:
f3:2e:b7:71:de:18:f9:b6:81:c4:5e:4c:bb:4f:f1:45:71:77:
48:ea:fc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:05:58 2025 by rpki-client