This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
File: oS5eGyIRchg79rZX3xoG0wyhC_8.mft (raw, json)
Hash identifier: 5TQ8P5DjITlboCsWaV2GAwqjzhOyI6F463dbfd8omBc=
Subject key identifier: 26:9D:44:BE:8E:4A:FE:D4:F7:BD:4A:C8:CF:5E:0B:18:D2:31:E6:A0
Authority key identifier: A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
Certificate issuer: /CN=A918A5D6/serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Certificate serial: 75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
Manifest number: 73
Signing time: Fri 19 Dec 2025 05:51:32 +0000
Manifest this update: Fri 19 Dec 2025 05:51:31 +0000
Manifest next update: Fri 26 Dec 2025 05:51:31 +0000
Files and hashes: 1: oS5eGyIRchg79rZX3xoG0wyhC_8.crl (hash: zp+y5eypobahwOm/WcWaYKZKq1i+1sWztiYqW03T14E=)
2: 365AF68C2CCD11F08845DC73C4F9AE02.roa (hash: F4KKMKiW48gN9aBGOT2hP2pHnwX5JnqO3laTg5f8NeQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:51:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117 (0x75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A5D6, serialNumber=A12E5E1B221172183BF6B657DF1A06D30CA10BFF
Validity
Not Before: Dec 19 05:51:31 2025 GMT
Not After : Dec 26 05:51:31 2025 GMT
Subject: CN=6944e7e4-de85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a8:6e:4d:69:57:43:14:67:db:a3:d9:16:24:
26:4b:7b:b2:ec:d5:02:d2:67:0b:19:52:2e:52:9c:
65:d9:d8:ca:28:2b:c7:f9:a0:9b:86:34:ff:c5:88:
7e:6d:34:3c:37:51:36:67:d1:af:07:1a:db:8d:d6:
10:d1:b0:dd:62:e7:97:5e:af:99:55:d4:c2:ea:89:
e4:b5:4e:87:01:4a:cc:06:87:a1:e4:19:2b:c2:40:
51:8c:7f:a0:34:a7:2e:56:dc:c5:47:4c:b9:57:f7:
f2:1f:97:35:7d:7e:7f:07:ed:3f:85:7f:66:7e:46:
2c:fc:62:f0:94:f0:f8:ad:1d:e9:80:6c:e8:ff:58:
68:af:b1:e2:7c:5d:36:99:e9:7b:73:7a:50:33:74:
c5:e4:76:4a:cb:98:65:18:9f:fc:68:21:77:7e:c4:
96:04:c6:be:99:fa:ce:15:2f:35:49:da:73:63:0c:
5c:81:65:dc:37:0b:5f:f4:53:5b:8b:51:a0:aa:50:
60:78:b8:8f:09:44:5f:cf:dc:52:17:9d:ff:34:ed:
9e:99:6c:61:dc:c6:67:73:88:fc:12:4d:4f:84:c7:
84:0d:52:8a:2b:c0:e0:01:bc:9d:1f:5a:31:8e:20:
0c:91:80:16:c6:75:a8:6e:1b:87:80:53:36:a0:3b:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:44:BE:8E:4A:FE:D4:F7:BD:4A:C8:CF:5E:0B:18:D2:31:E6:A0
X509v3 Authority Key Identifier:
keyid:A1:2E:5E:1B:22:11:72:18:3B:F6:B6:57:DF:1A:06:D3:0C:A1:0B:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oS5eGyIRchg79rZX3xoG0wyhC_8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A5D6/6EAFB5242CCB11F0BD66C255C4F9AE02/oS5eGyIRchg79rZX3xoG0wyhC_8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:56:d4:57:9f:cc:bf:5c:fe:46:84:5b:72:b9:5d:7e:70:86:
a9:9f:c5:44:4e:aa:e8:f3:e0:65:60:6d:63:80:92:fb:f2:81:
cf:c2:5c:4e:1b:2d:65:ca:d1:03:2b:78:6c:6f:6c:55:db:73:
38:ee:40:bd:28:21:ac:a0:24:29:f4:91:32:cd:b6:c0:d6:fb:
cd:6c:6e:de:69:1a:dc:a9:61:0a:5b:de:30:b0:0f:85:be:a1:
2f:42:b2:69:f8:4d:5d:0e:c0:88:3b:e6:0c:d4:dd:ea:58:5f:
8a:83:30:14:85:e2:a0:25:cd:cf:f5:97:f3:64:b4:55:59:ac:
bc:4f:76:73:66:fc:fc:e6:4e:1f:28:fc:fc:ac:78:2a:a4:e3:
dc:ea:ee:53:38:ae:d4:81:89:ca:bf:97:dd:a4:cb:9d:81:7a:
4a:dc:b9:6b:94:3c:0f:62:b9:f4:e9:67:88:c3:6e:44:b0:26:
5e:11:d4:c0:2f:b2:b7:c4:53:69:06:d7:cb:52:01:5d:a7:88:
84:d6:e7:a2:02:b9:b0:3d:31:7e:05:5d:9b:82:92:d4:d5:45:
54:20:73:fa:8a:ba:20:e7:dd:d9:6e:43:3f:4f:0e:cc:fe:92:
2d:c4:0b:89:8f:68:ad:d3:e1:c6:64:cb:79:f0:a8:88:9d:f6:
e6:7b:8b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:32:02 2025 by rpki-client