This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
File: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft (raw, json)
Hash identifier: SMgduGxUjeIbBeilXV4SZqNrRm8DC4s83aQI+n9Y8LQ=
Subject key identifier: 0B:8C:F7:FF:17:5D:8B:0E:BB:E5:6F:21:8C:98:AE:FA:87:88:C6:77
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial: 0744
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
Manifest number: 0722
Signing time: Thu 18 Dec 2025 21:18:12 +0000
Manifest this update: Thu 18 Dec 2025 21:18:12 +0000
Manifest next update: Thu 25 Dec 2025 21:18:12 +0000
Files and hashes: 1: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl (hash: MpHGsav9o9SWISkPf+qNZ+l6mxnKZ9HTBpDObVRu7Ec=)
2: 5997C4D0719A11EEBBA64415C4F9AE02.roa (hash: 2hIQWvs5gCQjNeqkzYCi7IsHJw8uYq2a3BY4+uJn8rA=)
3: 34956990D75511EF80E68A39C4F9AE02.roa (hash: dxCqVoSNOkIPa8mn9WccbxZTxKG1nVMRR4a4UGacE9I=)
4: 80DE56F2355D11F0A8C7F559C4F9AE02.roa (hash: ZHB5HyWHIeMUdK8FQ83iXhPDeHhVdive57aqWkTwI34=)
5: 05F05106586011EE9399A92EC4F9AE02.roa (hash: uE1Fce5x0iyRAmN0knxTtSotHjcQGH0Wea/3oUShZPs=)
6: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (hash: E255PQy8J0Om1w8sX22dbtF3FegoajHcFmWtic98DmU=)
7: 58EBEC82719A11EEBBA64415C4F9AE02.roa (hash: lRSKSHnJ9I173rhXzeEXncsQoFojPmJc5tNaNSnncqo=)
8: C0681BF2CF4911EF8531B085C4F9AE02.roa (hash: TnWWrKTfNekbVi6pIzTrH/qhvsHIadymtQxdXn+0jBk=)
9: 3524F8BCD75511EF80E68A39C4F9AE02.roa (hash: hXI7auCZSPvAdHOfiV427I6HYIQHsMDxA6gjGw/HO3w=)
10: 8065DE3E355D11F0A8C7F559C4F9AE02.roa (hash: u+3Kqlk1/ablMkybk1cn19GMLJzdy6UlNuONo3CbZ6Y=)
11: 364089B4D75511EF80E68A39C4F9AE02.roa (hash: NrUDO3l9X5LzCJUbUlr+EVuvLPXgjAkVWS40pKWplwg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1860 (0x744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Validity
Not Before: Dec 18 21:18:12 2025 GMT
Not After : Dec 25 21:18:12 2025 GMT
Subject: CN=69446f94-864d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:29:85:37:e5:b9:f4:fa:9f:fe:9f:d5:7c:
6d:45:85:51:80:df:60:49:19:4a:fc:12:75:19:70:
5e:cb:b6:74:32:0d:6c:dd:ff:38:55:b9:75:21:d0:
91:48:62:92:8e:b3:07:12:59:ba:f4:9b:41:92:87:
27:d5:12:0e:25:29:65:71:5e:09:dd:49:a7:5a:b1:
88:09:99:5c:7d:b8:23:d3:f3:d6:c6:ae:91:3d:6c:
6f:75:94:eb:33:3c:01:a5:75:cb:e9:ec:ab:6c:f7:
4a:1b:b8:86:51:a1:06:8f:1e:af:31:28:a8:b2:30:
08:d1:41:ce:e5:02:c6:a3:43:f2:66:85:30:c6:45:
45:d5:f5:10:78:e2:0e:f9:81:0d:b8:aa:c1:51:f1:
d9:f5:32:e9:be:96:32:f5:09:59:25:5c:5d:ba:66:
24:ae:86:9e:96:b2:24:ae:61:c8:32:fa:ad:51:d4:
4d:11:d9:de:81:5e:f3:1f:72:58:9b:89:44:49:08:
d2:a1:f9:05:47:08:0a:60:73:42:fe:e7:97:bb:27:
21:75:a1:12:91:a6:76:3d:7a:69:b6:e2:10:be:30:
fc:d1:59:57:ac:84:fb:65:2f:75:70:c9:45:76:9a:
c9:96:4f:b4:21:7b:49:80:9e:f0:7f:2d:6b:19:8d:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8C:F7:FF:17:5D:8B:0E:BB:E5:6F:21:8C:98:AE:FA:87:88:C6:77
X509v3 Authority Key Identifier:
keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d9:be:f8:a4:e8:e7:26:4f:b0:6d:c1:1b:eb:12:67:16:5d:
62:ff:6a:8e:91:59:e7:ad:05:1a:bf:05:ab:ca:30:75:6d:08:
2c:a7:52:22:bd:cc:f7:e9:83:c4:0c:2f:99:6c:6a:7a:29:89:
ef:47:3d:52:26:9f:b1:c1:9e:2b:5c:ae:ea:42:ce:ad:ba:ae:
da:33:e2:a7:0c:f0:b6:e1:4d:b4:b0:12:f7:87:ec:c4:70:ac:
ee:5a:e1:e6:b9:e5:fd:fa:1a:99:5d:60:99:0d:3a:0a:65:57:
f8:7a:fc:cf:24:99:b0:0e:21:9c:1c:59:0d:c6:8b:90:b4:27:
d6:41:46:ab:3b:3e:2e:64:73:16:e2:81:5e:ed:b7:36:6c:93:
98:83:e7:3e:4a:0f:3e:15:19:6f:f3:4b:74:dc:fd:ba:33:99:
24:0e:80:77:47:20:17:c6:18:01:69:a2:10:65:a1:63:46:ee:
56:3d:4e:43:6c:7e:22:df:9b:a0:01:62:5f:d2:c6:06:1a:00:
bf:65:10:f8:ef:b0:be:6e:ca:88:96:92:60:02:d2:ce:b2:9d:
ca:b1:45:62:a2:f9:6e:59:db:3f:78:b5:06:91:39:73:ab:0b:
e7:ba:36:bf:b4:78:12:72:66:2d:f0:44:df:8f:1c:4d:f6:56:
ab:fd:f7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:32:37 2025 by rpki-client