This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
File: FEVIn91QqkSsHSo8OhZuBsZir9U.mft (raw, json)
Hash identifier: kT6656yh8ZZDspBxudWOH7OJxhypWYQ2C1886W3u7fs=
Subject key identifier: 42:0B:DB:08:FA:67:09:1E:7C:D4:88:36:50:64:FC:3F:02:A5:98:FB
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 061D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
Manifest number: 05CE
Signing time: Thu 18 Dec 2025 22:40:51 +0000
Manifest this update: Thu 18 Dec 2025 22:40:50 +0000
Manifest next update: Thu 25 Dec 2025 22:40:50 +0000
Files and hashes: 1: FEVIn91QqkSsHSo8OhZuBsZir9U.crl (hash: OFC7VGdxR8RgM4BJE3TdLFTMijiNRfcm0bzVmcQQpfs=)
2: 56E0B60AFC1F11EF8049634BC4F9AE02.roa (hash: 7M25UNJ1vONZ1r0s8kY2p7aA4Tjs6Dy9Tr4sNtfDNa4=)
3: AE11F30C2F2E11F09F70883CC4F9AE02.roa (hash: yh1nzxSiRUxa7H/0rVdUE9yPITbri6FLNNs9bl3jZJE=)
4: F8769F9AA4B111EF8F61B261C4F9AE02.roa (hash: px99JgRYWuuSh83KgAf5CcDm6BMTh4m8BDXdelcFku4=)
5: E481FBD6F2A611EF8F8C0C51C4F9AE02.roa (hash: yrboOG9m2lvBWQHx/uqKC37vWN731mVNG5r2uRiBCHQ=)
6: 4A120466FC5F11EF9B1B9787C4F9AE02.roa (hash: bvuY+EeyLyXt1PvBvBIc9rRMl/RouVTPwyDaiKXq6NM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1565 (0x61d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Validity
Not Before: Dec 18 22:40:50 2025 GMT
Not After : Dec 25 22:40:50 2025 GMT
Subject: CN=694482f3-e963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:1f:1e:6c:59:a9:7d:aa:2f:e4:c4:49:81:
45:f9:80:d1:0d:88:bf:68:ca:9c:2f:72:df:c3:76:
30:11:14:24:67:29:e0:59:f7:d8:c9:0e:32:28:52:
fc:49:09:03:26:af:fa:7f:54:ad:de:7a:dc:18:57:
fc:d0:4c:3c:8e:01:63:40:86:c1:0a:ed:ea:c0:7a:
64:f0:5a:c7:9d:9a:15:6f:08:77:62:81:3a:21:00:
83:ab:e5:0f:95:c0:77:5c:37:6b:6f:90:ae:a4:0e:
9a:5f:7a:83:b3:34:d6:00:d8:12:0f:54:25:43:2f:
79:bc:d7:5c:46:64:8f:91:18:fd:17:57:49:fa:86:
5f:85:ce:db:65:14:98:74:e7:2a:d0:c4:3c:a6:b6:
70:1d:de:aa:58:74:9d:1a:c6:a1:3f:c7:40:dd:0c:
ee:fb:27:fb:d4:52:e6:b4:98:cc:79:f4:f5:50:dc:
c2:6c:65:a5:da:8a:40:a8:2d:5a:fa:e2:97:29:97:
95:dd:29:65:06:ae:45:79:6b:61:d2:41:d2:6a:cd:
bf:de:2b:5a:f9:58:7f:5c:e7:2c:fe:0e:15:8b:22:
5b:58:85:e7:89:bf:c5:81:fe:62:e5:76:17:2f:94:
7d:48:1f:52:f2:b7:7f:92:63:0d:4c:57:a8:5d:9e:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0B:DB:08:FA:67:09:1E:7C:D4:88:36:50:64:FC:3F:02:A5:98:FB
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:1b:6b:d4:d6:8f:c8:9d:d7:67:e6:ac:07:3f:ca:58:a6:0c:
5c:4d:b0:58:9f:aa:1e:e2:2e:6d:32:a5:2e:2e:ca:b8:b6:65:
eb:e3:8c:be:8a:d0:4f:41:8e:fc:8a:84:5e:4d:ad:9f:29:e3:
10:8e:0a:16:5d:ff:97:4b:7c:4b:b4:a5:d9:ac:71:e0:94:e7:
e5:38:47:3f:a8:a7:7f:8f:6d:36:4e:ef:02:a3:74:a4:4c:66:
60:cc:63:36:a4:54:9d:37:47:46:36:21:bc:28:3f:3f:ba:bf:
af:b5:b8:ed:46:f6:5b:33:72:0a:a3:f6:8e:f3:da:b5:50:e3:
8a:6a:80:ce:a3:af:14:57:00:54:0c:c9:ad:78:ef:80:a0:06:
ce:f2:e2:67:5b:a7:b8:13:b4:10:68:d8:18:65:32:c2:15:80:
24:5b:b9:68:13:7f:cb:e9:0c:26:98:0d:5d:47:f7:88:69:60:
3a:7d:2a:d2:28:b4:94:0e:f5:9e:67:a0:d0:9e:79:b7:59:22:
4c:f1:21:a1:7d:8a:78:20:44:47:56:b6:9e:f2:d4:1d:d3:21:
bc:68:32:bf:0d:c3:40:eb:a3:b0:83:11:c7:fa:de:39:49:8f:
81:ed:ce:f2:29:20:ab:8c:f1:1f:a1:7a:c8:f1:e4:26:33:4e:
46:49:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:46:56 2025 by rpki-client