This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: aGC8ROPspArLroylabu1y/wfz3GDX6OHP5tWh2Tt1vg=
Subject key identifier: 5C:19:81:D5:23:1F:AC:7B:94:08:A4:B2:E0:2B:51:36:C5:93:A8:CD
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 184E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 17DD
Signing time: Thu 18 Dec 2025 16:27:03 +0000
Manifest this update: Thu 18 Dec 2025 16:27:03 +0000
Manifest next update: Thu 25 Dec 2025 16:27:03 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: SEJuBcMo1fnPg9ZPMrtyObgGfU6N5wXLp6RJHVQz93w=)
2: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: Ki+ZYv+WbFodfUBA0Z9kcHIRNA0D2B2/Fqh0gMIddSg=)
3: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: Q50guEdFQrac2WGNIOWOMwAPEusnnVtr+0WbjS+0Iw8=)
4: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: 1XIBkz1xrsmaIEUuPCKysFF+5jDC/AbJdnY6h8iCmzA=)
5: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: K/ybxERnMroT+/HivxwCKoEx2WZjUMXQikxQf2o4Wtg=)
6: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: l9PAtv4FmfKEbsr39kSblkIdk4l36jBShaU/yhiu3EA=)
7: B04675FC959711EA9F290A33C4F9AE02.roa (hash: hvb2MvDqDZHyf0+HzbtgqnM+oZrlIejX067xarW4vdo=)
8: 696975861A3611EEA597E872C4F9AE02.roa (hash: oIGClTM3lHim9PRA3fKoX8EMPndg1+r8p0Zu4BUJRhA=)
9: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: 6dC3vmSVGgmkSh9nUR6cyWb5UZYgtCMEtbXtHWZQ+Ms=)
10: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: pRnYMFn3MsmdKZMCcupGBS8xip66wFsc4Vhu+CVQM8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6222 (0x184e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Dec 18 16:27:03 2025 GMT
Not After : Dec 25 16:27:03 2025 GMT
Subject: CN=69442b57-13b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:23:6c:f9:7e:21:87:05:a7:9e:ea:68:31:
85:7a:34:09:d0:b4:63:33:eb:7c:c9:63:2c:41:84:
c8:b1:90:ef:37:7f:27:f1:52:cb:8a:b8:29:71:1e:
ee:00:ee:d0:9a:3a:29:4e:03:51:40:24:e5:ba:07:
bd:8b:86:8e:24:74:3d:4e:58:fc:87:f7:2e:c4:19:
99:79:61:f0:df:ab:3b:56:bf:6b:29:e5:b8:87:ec:
a1:5f:46:fc:7e:37:b5:ed:ee:8c:15:a7:2e:b7:90:
f4:fa:5d:42:00:83:34:79:1f:be:8f:65:c2:7f:3e:
65:6c:44:52:89:97:32:ba:a4:55:d3:2c:9a:75:62:
bb:53:ff:9e:76:68:af:ad:ca:92:04:81:87:a6:8c:
a9:80:9b:ad:b9:40:57:91:51:af:83:92:f2:2d:9f:
78:ad:f2:da:c9:ce:67:8d:f1:08:63:7a:65:14:94:
42:b6:de:34:82:71:75:3c:2b:55:dd:23:77:a2:0a:
28:d6:84:54:25:9e:68:1f:a8:ba:b0:31:74:92:ab:
1b:92:76:d0:1c:ae:83:9d:4b:fb:ab:c8:80:d1:ee:
53:a3:9b:8f:86:ee:9b:d9:86:6d:46:20:bc:5e:c3:
97:12:de:56:66:9c:b6:23:63:34:2d:7a:e9:85:a0:
7c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:19:81:D5:23:1F:AC:7B:94:08:A4:B2:E0:2B:51:36:C5:93:A8:CD
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:1f:8f:ba:d1:be:dc:7d:02:70:d6:d2:3c:1b:9c:89:15:7a:
17:54:2c:29:a9:79:93:11:84:03:86:9c:c9:8f:73:47:d4:52:
dd:b8:ff:b4:ea:da:4d:f1:e4:19:71:90:62:8d:77:2c:7a:b8:
73:1a:0b:48:df:c6:ff:a6:48:8b:33:d3:c5:13:14:17:26:58:
f2:1d:df:ee:6a:85:c0:6f:47:5d:4f:eb:b3:98:0d:1b:94:f0:
10:01:28:e3:01:13:47:13:0a:d1:84:b3:46:3a:c6:f1:12:12:
1f:25:75:1f:16:ff:4d:cd:c8:c7:83:28:bf:80:43:37:9e:d4:
01:29:aa:42:d0:69:81:a7:c1:76:f7:21:8f:e1:ab:d7:ab:26:
72:be:81:74:3c:d8:e8:e3:cc:97:6f:8f:94:d1:fb:63:b7:d3:
e7:c5:4a:cb:3b:2e:d3:8c:99:e8:69:9e:5d:57:55:5d:e1:97:
57:58:b9:c1:e9:81:a2:1d:3d:74:00:11:03:a6:0b:50:7a:62:
26:6d:7a:82:2f:5b:7c:57:cb:ae:d7:9d:3f:51:86:1b:97:12:
a3:b0:61:80:a1:19:00:63:8b:f5:6d:40:19:c5:55:03:1f:f6:
ba:49:a7:44:b3:a8:49:03:f3:c7:54:57:33:ac:2b:7f:2a:4f:
f5:38:7d:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy
RDFBQ0Q4RkQwHhcNMjUxMjE4MTYyNzAzWhcNMjUxMjI1MTYyNzAzWjAYMRYwFAYD
VQQDDA02OTQ0MmI1Ny0xM2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqLEjbPl+IYcFp57qaDGFejQJ0LRjM+t8yWMsQYTIsZDvN38n8VLLirgpcR7u
AO7QmjopTgNRQCTluge9i4aOJHQ9Tlj8h/cuxBmZeWHw36s7Vr9rKeW4h+yhX0b8
fje17e6MFacut5D0+l1CAIM0eR++j2XCfz5lbERSiZcyuqRV0yyadWK7U/+edmiv
rcqSBIGHpoypgJutuUBXkVGvg5LyLZ94rfLayc5njfEIY3plFJRCtt40gnF1PCtV
3SN3ogoo1oRUJZ5oH6i6sDF0kqsbknbQHK6DnUv7q8iA0e5To5uPhu6b2YZtRiC8
XsOXEt5WZpy2I2M0LXrphaB8KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwZgdUj
H6x7lAiksuArUTbFk6jNMB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG
RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDk1Ri84NDhDODU3Q0RGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRv
N1BhMThlTWcwSHN0R3MyUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB4H4+60b7cfQJw1tI8G5yJFXoXVCwpqXmTEYQDhpzJj3NH1FLduP+0
6tpN8eQZcZBijXcserhzGgtI38b/pkiLM9PFExQXJljyHd/uaoXAb0ddT+uzmA0b
lPAQASjjARNHEwrRhLNGOsbxEhIfJXUfFv9NzcjHgyi/gEM3ntQBKapC0GmBp8F2
9yGP4avXqyZyvoF0PNjo48yXb4+U0ftjt9PnxUrLOy7TjJnoaZ5dV1Vd4ZdXWLnB
6YGiHT10ABEDpgtQemImbXqCL1t8V8uu150/UYYblxKjsGGAoRkAY4v1bUAZxVUD
H/a6SadEs6hJA/PHVFczrCt/Kk/1OH3W
-----END CERTIFICATE-----
Generated at Fri Dec 19 21:52:26 2025 by rpki-client