This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
File: q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft (raw, json)
Hash identifier: sfsyrxaqPXRK350dCEwtcM63buCqKLSlNd+5zc/hQn0=
Subject key identifier: C9:86:96:11:E1:6D:1A:1A:0B:D8:70:3F:64:EF:91:1E:3E:82:B1:5D
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Certificate issuer: /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial: 05AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
Manifest number: 05A4
Signing time: Thu 18 Dec 2025 22:29:59 +0000
Manifest this update: Thu 18 Dec 2025 22:29:58 +0000
Manifest next update: Thu 25 Dec 2025 22:29:58 +0000
Files and hashes: 1: q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl (hash: xGkn1XGg9Jw+0/lP232ExzUddnTED4CrnWgKKrT2AgQ=)
2: 012EAE068C1411EDA66E4F28C4F9AE02.roa (hash: bvK3RLeaCONliQ5wzuPxM2m0myPmTbQv9PJcnbReiQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1452 (0x5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C5C8, serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Validity
Not Before: Dec 18 22:29:58 2025 GMT
Not After : Dec 25 22:29:58 2025 GMT
Subject: CN=69448067-a3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:35:89:ab:6a:da:c1:6f:c3:c7:2d:63:a8:
3a:01:f5:89:d0:6a:95:f6:ae:fe:f2:2b:6a:cc:02:
c2:fb:17:c9:8f:1d:32:65:de:72:45:4c:e1:6a:55:
bb:39:82:b8:e6:4a:e9:0b:0f:bb:21:d9:d0:6a:8c:
a9:35:fe:3d:93:ad:65:aa:c6:3c:ff:de:10:12:78:
e9:48:5b:2d:47:1f:7e:98:c2:b6:2a:f8:27:f4:e5:
74:6d:b5:2a:b8:0d:0d:35:98:4d:0c:51:53:79:24:
cc:0b:9d:d0:5e:a9:52:97:ff:d4:18:f5:db:a7:b8:
a3:28:53:bc:dd:91:8f:a5:a8:51:f8:0f:5d:3f:79:
b8:e1:3b:2e:72:72:02:25:54:87:f2:8a:9d:db:e8:
12:a0:35:2c:9d:78:20:f4:31:8a:0f:86:19:1c:fd:
cf:f4:1c:a2:ec:41:1d:32:3d:08:58:b5:00:32:93:
b3:a7:3e:91:84:91:2f:43:a5:94:3b:85:28:8c:85:
c8:e5:62:88:a3:87:91:fb:5e:9f:70:51:e3:8b:c9:
17:9a:f4:e8:41:ad:41:64:e4:32:68:2d:b5:35:f2:
12:ca:d6:db:9f:8e:f9:a4:65:95:ce:31:10:ac:14:
49:dd:55:93:70:ec:16:30:af:76:00:95:06:21:b5:
16:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:86:96:11:E1:6D:1A:1A:0B:D8:70:3F:64:EF:91:1E:3E:82:B1:5D
X509v3 Authority Key Identifier:
keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:2c:ba:f2:c1:8f:2c:0c:2a:b9:9e:3e:9c:6e:a3:cc:3d:56:
19:8e:60:ec:bb:71:8e:da:eb:3e:a1:97:c3:ad:f5:d0:9a:ff:
2f:4c:ee:f2:3b:11:ac:cf:e5:6a:10:fb:0b:0b:94:33:5f:d1:
15:b3:9a:16:df:ca:ba:de:7d:a2:5f:46:f0:7f:55:c2:3d:76:
06:b5:f4:6f:f6:3d:e2:4f:08:fd:ba:4a:03:2c:0a:95:74:73:
d6:41:24:11:56:e7:06:e3:e7:6e:43:41:9c:08:f9:9a:99:73:
db:2f:11:30:a9:c0:16:5d:66:20:a7:d1:7d:da:eb:39:9d:0b:
e4:86:f8:11:50:11:4f:0e:b9:ff:0e:d3:ac:bd:bf:24:a0:7c:
79:4d:cc:4d:f0:a5:c3:af:f1:2f:79:35:87:52:e4:ee:1d:47:
06:ea:9a:b0:76:94:f4:93:c2:ba:11:77:25:e5:1b:c0:63:de:
d4:38:23:4e:30:24:d7:1a:c0:ec:96:8b:32:a0:4c:52:26:0b:
0c:f3:d6:90:16:a3:ad:15:ad:34:d6:cb:06:b0:81:a2:8b:0a:
25:cf:7e:9f:23:35:e3:25:73:c3:3e:a4:59:c2:47:d7:37:dd:
0b:bc:49:70:46:2b:b9:49:15:1c:42:8c:62:3d:b6:37:cb:9f:
4c:a8:00:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM1QzgxMTAvBgNVBAUTKEFCOEE3NTE0MTdGRjY3RkM5OTQ4RTNENDI3Qjg0REQ2
NTkzRTkxODMwHhcNMjUxMjE4MjIyOTU4WhcNMjUxMjI1MjIyOTU4WjAYMRYwFAYD
VQQDDA02OTQ0ODA2Ny1hM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArMo1iatq2sFvw8ctY6g6AfWJ0GqV9q7+8itqzALC+xfJjx0yZd5yRUzhalW7
OYK45krpCw+7IdnQaoypNf49k61lqsY8/94QEnjpSFstRx9+mMK2Kvgn9OV0bbUq
uA0NNZhNDFFTeSTMC53QXqlSl//UGPXbp7ijKFO83ZGPpahR+A9dP3m44TsucnIC
JVSH8oqd2+gSoDUsnXgg9DGKD4YZHP3P9Byi7EEdMj0IWLUAMpOzpz6RhJEvQ6WU
O4UojIXI5WKIo4eR+16fcFHji8kXmvToQa1BZOQyaC21NfISytbbn475pGWVzjEQ
rBRJ3VWTcOwWMK92AJUGIbUWaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmGlhHh
bRoaC9hwP2TvkR4+grFdMB8GA1UdIwQYMBaAFKuKdRQX/2f8mUjj1Ce4TdZZPpGD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzVDOC8zREVGNDVDRUY1
RTUxMUVCQUU5NDY0MzdDNEY5QUUwMi9xNHAxRkJmX1pfeVpTT1BVSjdoTjFsay1r
WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E0cDFGQmZfWl95WlNPUFVKN2hOMWxrLWtZTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzVDOC8zREVGNDVDRUY1RTUxMUVCQUU5NDY0MzdDNEY5QUUwMi9xNHAxRkJmX1pf
eVpTT1BVSjdoTjFsay1rWU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBULLrywY8sDCq5nj6cbqPMPVYZjmDsu3GO2us+oZfDrfXQmv8vTO7y
OxGsz+VqEPsLC5QzX9EVs5oW38q63n2iX0bwf1XCPXYGtfRv9j3iTwj9ukoDLAqV
dHPWQSQRVucG4+duQ0GcCPmamXPbLxEwqcAWXWYgp9F92us5nQvkhvgRUBFPDrn/
DtOsvb8koHx5TcxN8KXDr/EveTWHUuTuHUcG6pqwdpT0k8K6EXcl5RvAY97UOCNO
MCTXGsDslosyoExSJgsM89aQFqOtFa001ssGsIGiiwolz36fIzXjJXPDPqRZwkfX
N90LvElwRiu5SRUcQoxiPbY3y59MqADg
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:37 2025 by rpki-client