This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json)
Hash identifier: mOXfKpU8SIRrQ+Ipu7TmMS8Ex1kQgamiQKz1RFPBD+8=
Subject key identifier: 03:20:0E:9B:E2:81:00:92:65:D6:01:74:0F:54:DF:6D:0C:94:B0:CA
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial: 2507
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
Manifest number: 24C4
Signing time: Sat 20 Dec 2025 15:38:09 +0000
Manifest this update: Sat 20 Dec 2025 15:38:09 +0000
Manifest next update: Sat 27 Dec 2025 15:38:09 +0000
Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: 5MSVVvb3NRztJX5ky2S4pak/OeNO0lbfX4G6aEMUbYY=)
2: 83684F548DF411E7A230506DC4F9AE02.roa (hash: 7rwSXJvv/HshNFddgboHnncSidkclYa/NvGMbxx8LFA=)
3: 027532E6385F11EAA879692AC4F9AE02.roa (hash: CM6RIxM9JHHGhZC10urcCuophC6TNcTlTYu0C+8d5wc=)
4: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: RYNGA3H5ydUqwQnOMshPikkHHM7bQr9sFSWMotIy4S0=)
5: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: +cU9ydF4cWSQqI/mYS8fYBUIoo4803uhA7oc0s3jgaU=)
6: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: nq0Uzk8SuEDu3ZbDp3B41hYz4SbibvM9axOdjGoUmDE=)
7: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: 4MVhPeL89L4iqif2jjx8A1Zl5rTPkTTCl8RIrLHaD+o=)
8: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: aaC6AltbMVKLhQjXZ7dpspAxhJD3m7klJ08VK8NpfEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9479 (0x2507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Validity
Not Before: Dec 20 15:38:09 2025 GMT
Not After : Dec 27 15:38:09 2025 GMT
Subject: CN=6946c2e1-59e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e2:1b:65:a1:ec:50:4d:83:a7:1f:a3:1f:a9:
3a:6b:5f:1c:e7:36:9f:e4:52:37:f6:89:09:15:49:
4a:63:22:69:57:b1:3e:ac:77:c2:74:c3:36:0d:f4:
ca:99:61:fe:a0:5b:ca:e9:6c:cf:88:e4:db:9c:2a:
69:66:51:e1:25:49:26:db:b1:05:90:32:d6:38:d9:
7e:c2:9f:62:f8:99:53:93:7f:0e:cb:45:96:98:5e:
d4:0b:91:d5:1e:88:bb:d6:dd:91:2b:a3:66:86:05:
df:72:37:fc:8f:14:47:96:6b:d0:5f:91:e2:b7:e3:
f0:92:f0:26:df:4b:6e:2c:e8:dc:35:c5:48:e4:5d:
31:47:40:e7:35:4c:93:76:b7:3a:ef:30:d4:b2:a6:
fc:43:67:0b:ea:6f:e6:94:c1:70:5e:ed:0c:35:04:
f4:75:70:64:4b:17:cd:c5:4c:ac:6d:b9:aa:c5:bb:
c2:b4:f5:c2:22:32:62:37:2b:8f:3b:3b:f5:43:66:
6c:e3:84:94:f5:f0:0d:4e:94:70:9d:bc:b1:1a:ad:
13:a6:cf:5f:aa:03:87:63:72:a5:7f:b1:3e:c5:1d:
12:6a:4e:65:7c:87:ea:c9:11:44:68:1f:47:1b:1f:
93:ba:bc:74:1c:de:ab:cd:2e:65:1d:40:de:52:7c:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:20:0E:9B:E2:81:00:92:65:D6:01:74:0F:54:DF:6D:0C:94:B0:CA
X509v3 Authority Key Identifier:
keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3e:25:4f:e0:d5:0b:b6:b0:1a:bd:99:6c:36:b1:ac:c9:74:
d0:87:d0:c9:ca:24:cc:c1:15:90:44:86:0a:70:f5:87:86:b3:
4f:61:32:e8:bc:9c:ff:31:29:c2:5b:07:e1:ff:a5:d6:26:b0:
02:86:1a:4e:fc:3d:8a:61:ba:15:6d:d6:a8:e4:8f:b8:38:d3:
a3:d2:5b:e0:99:d3:a0:7c:a6:3a:85:6e:32:0e:03:01:ef:1f:
9d:cd:33:2c:f3:ed:a0:c7:60:48:7d:2a:fe:7c:c7:86:c0:53:
41:fe:ba:32:69:db:07:51:63:1b:5e:e9:c7:61:cc:e9:df:53:
22:eb:65:5d:f5:1d:11:b4:29:a5:2d:ae:7c:55:0a:28:d1:56:
1d:02:a4:fa:eb:db:95:f1:87:33:0d:c9:7d:de:b2:ba:48:c7:
73:13:24:7b:a8:0b:4d:58:11:5c:f1:d2:f4:fb:2d:e4:96:80:
26:ae:8d:16:4e:9c:76:1f:13:ca:35:09:4e:6e:60:72:ce:14:
26:f0:4f:9d:5d:1b:f7:e7:1f:62:e0:cf:2a:2b:c1:f7:fe:ba:
e3:2d:ff:7a:2c:09:fa:88:33:64:13:32:c6:51:51:41:ee:b9:
81:ed:b8:d0:f9:05:ed:81:f7:be:be:ae:78:ef:23:ca:81:7e:
31:bc:54:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:56:31 2025 by rpki-client