This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
File: No88k4tgFBJSGjqBkAmXj8_pHn4.mft (raw, json)
Hash identifier: aHsACirFBYr4Q0vMZsEOHIQikAec6cDxwaC8a7VwKK8=
Subject key identifier: 94:13:59:DB:C0:03:43:A8:14:B3:54:C6:0F:17:4F:B0:2A:0A:C5:E1
Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Certificate serial: 17C5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
Manifest number: 171D
Signing time: Sat 20 Dec 2025 16:21:12 +0000
Manifest this update: Sat 20 Dec 2025 16:21:11 +0000
Manifest next update: Sat 27 Dec 2025 16:21:11 +0000
Files and hashes: 1: No88k4tgFBJSGjqBkAmXj8_pHn4.crl (hash: e4K9uWCyvHG6J+UF5rl5f8CHIkI26vox+Imrumeobxg=)
2: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (hash: S7+wUQWXWYyVNfVrHQD8NP/Kenz4c8yGRRnN25FwcFg=)
3: 5EB452C8D70D11F0B16F7C3995D3641D.roa (hash: QKniKB0i9U/qZ82wwtBMU77bAEO0dwptMvMlVYHgVtE=)
4: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (hash: D5/phfHv7NRnNh1uVB5OcYl3HKLOcCjwwCcn5LIOY04=)
5: 760F20A2439411EDA0D65E77C4F9AE02.roa (hash: z4J2zWK+daoCcDWCwroSrs4nVvB5wPQCYZ736zqUbvA=)
6: 987E6D9E985711F08C4D1E11C4F9AE02.roa (hash: t0aqBhUy2E1vHGSzZ+V/fFaWtfLzEKA+l6C3kep9pTU=)
7: 986FA3843F8F11EBA86B1F11C4F9AE02.roa (hash: 3qsyI1RYdC4IxoOEtj35JjtCqUJZACqFj6a64FAn/R4=)
8: F053A1CAC28B11EBBF310469C4F9AE02.roa (hash: +baJ4IIlVuI0qFlzRCIAXw8ieoi3Maif+6sxqFCGNb8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6085 (0x17c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E
Validity
Not Before: Dec 20 16:21:11 2025 GMT
Not After : Dec 27 16:21:11 2025 GMT
Subject: CN=6946ccf8-b536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:53:78:99:ed:15:bd:2a:00:e5:88:29:72:
37:42:28:f3:ee:b0:81:40:84:61:06:68:2e:6e:c4:
4a:e0:bc:73:86:00:49:98:46:77:e6:c0:63:e0:b4:
71:ff:da:13:07:54:bd:cf:02:63:e2:66:8e:39:52:
4d:ca:7f:c7:bc:59:d6:8b:f8:03:31:a8:08:bc:3b:
fe:b8:b8:e7:6a:6a:17:b4:94:04:fe:74:6f:4e:0b:
77:b6:29:bc:f3:f4:19:63:a1:d9:cb:ad:55:6d:08:
1f:57:c6:92:15:3e:cd:27:fc:1d:3b:6c:66:16:08:
41:a3:d6:25:76:3f:e2:7c:47:f8:72:ac:0c:40:7a:
67:fb:89:bd:b1:58:07:d6:65:25:89:77:8b:52:4f:
45:6f:0b:58:4a:ff:a6:ba:2b:50:a8:9c:20:9b:fe:
d3:e9:c2:07:42:54:0d:60:bd:63:55:1a:39:b3:b3:
fb:3e:d5:80:37:7c:a5:f4:66:e9:9e:fc:f6:2e:c0:
9f:db:ea:db:0b:a2:ae:54:e4:48:c6:50:5d:27:50:
aa:8d:1c:8e:c6:68:4a:15:22:df:a9:b8:eb:4a:8e:
ff:e5:08:4a:ec:72:9c:95:12:44:39:1b:e6:cf:09:
1e:66:ca:d5:c3:41:b3:50:e5:37:19:32:ee:50:b8:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:13:59:DB:C0:03:43:A8:14:B3:54:C6:0F:17:4F:B0:2A:0A:C5:E1
X509v3 Authority Key Identifier:
keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:77:c0:9f:fd:5a:dc:1b:2c:80:b2:71:e9:1b:67:02:29:9b:
d4:ab:a5:47:96:38:99:55:33:f2:d1:88:30:fa:b8:8a:c2:af:
29:d8:79:a1:6f:da:73:6b:37:ee:cd:0b:31:9a:4c:b4:23:a9:
a6:fa:3a:8b:b3:27:01:e0:de:d7:d7:26:a1:ba:a7:da:e2:dd:
4d:2c:22:86:12:dc:a3:7c:54:4a:e8:e4:4c:5d:20:c5:69:23:
ce:80:c5:71:59:fc:71:c3:db:ca:09:9e:e1:a0:81:c8:84:c7:
9d:40:e8:50:31:17:8d:7d:0f:00:fb:e8:80:7b:4a:61:99:e3:
30:a4:ca:47:19:51:ee:4a:17:21:b9:57:93:c9:a9:2b:46:2c:
bb:dc:9a:bb:9e:07:ff:c6:02:f5:bb:42:74:5f:41:15:48:cd:
14:3d:75:b4:11:0a:28:98:98:61:57:d7:24:dc:cf:5b:2a:c9:
25:d3:3f:b4:d1:88:53:6b:f2:84:c6:e4:27:f0:21:bb:f4:0f:
90:f4:00:2a:07:4e:3e:01:fb:0d:ed:50:ff:d6:02:12:b5:58:
7a:1a:5c:27:b0:17:7c:19:48:ef:c2:07:f8:6c:ba:38:45:d9:
3d:ad:80:3d:f2:6e:0c:0d:a1:b6:bb:01:78:d1:a1:f3:6c:5a:
31:ec:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 18:01:26 2025 by rpki-client