This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json)
Hash identifier: s4CL0vH9ux1GOKZ4PEwYiKr+yMmUxu920GYFpvnK9Aw=
Subject key identifier: 75:0F:0A:67:04:6C:DF:3F:5E:7C:B6:DB:34:87:5D:27:61:79:12:8D
Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
Manifest number: 9D
Signing time: Fri 19 Dec 2025 05:25:29 +0000
Manifest this update: Fri 19 Dec 2025 05:25:28 +0000
Manifest next update: Fri 26 Dec 2025 05:25:28 +0000
Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: 5pGFcdcIksc5O67zd+1s+5+kwudbF87v0B2uv98+HB0=)
2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: 0+vRm59ex9NMyreeXhWeUcmkTmPtMjioToFn5xjtXJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Validity
Not Before: Dec 19 05:25:28 2025 GMT
Not After : Dec 26 05:25:28 2025 GMT
Subject: CN=6944e1c9-0e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:7f:90:c3:5d:6f:8c:ec:7b:6c:5f:5f:b9:
c3:a4:77:7c:17:32:e1:6b:f2:c1:a6:68:c1:53:65:
00:b4:c5:a7:26:1e:52:63:18:cd:47:c4:22:d6:4a:
49:df:46:61:4e:d6:05:b7:62:6e:bf:12:38:1c:4f:
7f:3b:22:5c:77:f8:d0:cb:a1:5b:47:00:5f:41:d5:
4b:75:5a:77:26:1d:c1:5a:5c:ab:c1:8a:fe:5c:a2:
50:e6:5d:57:15:09:04:bf:53:71:7b:68:96:5f:15:
76:00:4a:70:6a:99:1f:92:2b:48:3c:e3:a3:a8:32:
b1:d0:59:79:66:4c:99:07:ca:04:94:9b:da:19:37:
52:47:ca:da:bb:9c:96:c5:f6:0e:b1:52:e8:51:3e:
89:a4:ea:5c:15:51:9d:24:c8:bc:25:27:92:55:b2:
b3:fc:fd:ec:7d:cf:0c:c1:36:41:34:fc:9d:75:71:
41:b8:e2:3c:a4:47:1d:91:ae:c1:d0:5b:39:95:42:
7f:ef:30:68:95:45:eb:df:80:a1:3b:45:64:b2:bc:
8f:6f:97:c3:2d:19:4a:d4:35:b2:08:f3:20:b1:96:
eb:91:33:bb:86:57:e3:24:7e:f5:4e:4b:45:7d:66:
0d:74:68:bb:f5:bd:7e:d8:a3:6b:39:20:6c:92:cb:
06:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0F:0A:67:04:6C:DF:3F:5E:7C:B6:DB:34:87:5D:27:61:79:12:8D
X509v3 Authority Key Identifier:
keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e7:83:ea:bc:30:e2:2e:24:1f:03:92:26:82:d1:65:2c:14:
fc:4a:3d:e7:e7:7b:ce:a3:7d:da:92:f7:fa:c5:bf:3b:ee:44:
4c:82:69:da:94:59:95:e9:5d:eb:66:4b:c2:16:5a:10:06:e8:
5c:02:2e:86:05:2f:25:16:9b:38:fa:92:14:67:b9:56:94:31:
b2:0b:b7:17:9a:1a:8a:95:81:15:5d:ff:56:b8:42:82:26:3f:
ca:32:32:5e:2a:da:28:38:ec:40:df:5f:b8:ea:22:2c:51:fc:
10:97:49:d8:9c:68:f1:d8:d5:8c:46:c0:ca:af:4b:5f:b2:a8:
30:0c:0d:8c:db:d4:b3:1c:44:ac:5b:a1:ff:ce:7c:88:12:04:
94:5d:72:a8:a5:e5:20:4a:f4:3f:5f:39:da:e8:65:f4:f3:44:
86:2e:ad:1d:33:ef:18:60:03:50:26:9a:08:52:f8:ae:d7:ed:
68:4d:cf:73:99:58:86:8f:39:04:09:2d:a4:56:33:68:6e:1c:
37:48:b4:a2:95:9f:13:c4:a2:7e:aa:7a:32:61:97:50:51:6b:
be:59:d4:f2:b8:e5:91:73:13:6c:38:f9:fd:cc:15:00:1a:29:
a5:7d:0a:94:00:90:e1:5e:cd:0a:f3:ab:32:0e:76:6a:f3:22:
61:70:c8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:39 2025 by rpki-client