This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
File: 5wLFqnTYyWzI7vVhjk_-79UdN_k.mft (raw, json)
Hash identifier: A9V/8RN2resopzliS6rleScTbGot0tUorVf0qWgyRGs=
Subject key identifier: 4B:3A:7E:7F:50:83:A7:0E:E7:39:64:FC:93:D8:88:C2:09:62:97:DD
Authority key identifier: E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9
Certificate issuer: /CN=A918CA0E/serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9
Certificate serial: 06D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
Manifest number: 06CD
Signing time: Thu 18 Dec 2025 21:31:22 +0000
Manifest this update: Thu 18 Dec 2025 21:31:21 +0000
Manifest next update: Thu 25 Dec 2025 21:31:21 +0000
Files and hashes: 1: 5wLFqnTYyWzI7vVhjk_-79UdN_k.crl (hash: 6Rjiscq1785QeStqh7380b1p/esVgzw9bqma5BKiL28=)
2: 98C0AE7E808411EBA15C9251C4F9AE02.roa (hash: zc3Pnw0/OkkjpSp764b1FQtIhHt1L5fn5FeWiUPa5I4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl
rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1747 (0x6d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CA0E, serialNumber=E702C5AA74D8C96CC8EEF5618E4FFEEFD51D37F9
Validity
Not Before: Dec 18 21:31:21 2025 GMT
Not After : Dec 25 21:31:21 2025 GMT
Subject: CN=694472aa-284c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:73:c0:f7:83:54:f7:57:77:14:13:9a:71:
f9:35:00:6f:45:c5:e3:7b:a7:4f:30:4b:7c:97:0a:
82:2a:05:2b:c6:26:f6:8d:fd:fd:17:4e:02:16:da:
90:75:c2:35:2f:d7:08:9c:4c:c9:6e:8c:40:40:2e:
44:b0:1a:2c:43:d6:ef:40:4d:59:15:81:7e:33:57:
73:f0:11:ad:d2:7c:e6:66:c3:a2:bb:bf:7c:3e:ba:
bc:39:58:4a:10:c2:75:f7:ab:a8:d8:4a:76:d9:84:
10:f5:cb:9d:a7:4a:c9:79:a4:86:7c:33:f8:b7:27:
14:69:52:9c:40:fd:e8:65:62:26:fc:b1:b3:02:a4:
83:c4:82:be:f1:c0:5d:7a:38:4e:49:7f:55:30:33:
75:5b:6f:64:59:c2:86:7a:17:3f:97:b1:dc:9a:37:
bf:00:1b:b2:09:cc:b2:ce:eb:ac:06:f2:3e:56:5d:
84:e0:b5:41:9b:55:57:8b:95:52:f6:f2:47:8b:9c:
df:56:a4:16:2a:68:37:30:69:ec:ba:0b:00:87:fe:
3d:0c:23:f3:98:bc:3e:d9:b3:20:d7:16:7f:40:6d:
59:d1:47:aa:1f:c4:9d:db:c8:17:88:e6:3b:26:72:
47:14:1f:f7:ba:85:b9:9f:cb:f2:91:6e:55:d3:d4:
f2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3A:7E:7F:50:83:A7:0E:E7:39:64:FC:93:D8:88:C2:09:62:97:DD
X509v3 Authority Key Identifier:
keyid:E7:02:C5:AA:74:D8:C9:6C:C8:EE:F5:61:8E:4F:FE:EF:D5:1D:37:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wLFqnTYyWzI7vVhjk_-79UdN_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA0E/8A1164CA807711EB97D94054C4F9AE02/5wLFqnTYyWzI7vVhjk_-79UdN_k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:5d:01:54:34:34:cd:a0:2c:b0:c1:1c:79:e9:23:97:e8:13:
d9:5f:5d:78:38:0e:14:49:e9:79:c2:67:da:a1:7c:ec:ac:2e:
de:44:cd:12:28:81:d6:9e:7f:e3:e2:96:87:df:65:02:0e:d7:
26:36:85:41:61:05:1b:db:5f:6b:6d:d2:2b:07:c5:8b:af:2a:
ac:10:8e:b0:2a:55:2f:e2:ff:8f:9f:4c:3e:2b:a9:16:06:9a:
bb:36:7f:38:db:a4:31:83:55:fa:ef:57:96:ca:9b:ef:ec:65:
45:d8:37:db:a2:13:0a:7d:c7:bf:45:0b:83:81:2f:4d:18:52:
b9:7d:a7:d9:95:07:f8:d4:a4:e9:00:1d:1d:63:6c:e0:f5:bc:
72:0f:37:09:5b:7c:5f:9a:2e:fc:58:8d:cb:9f:d5:7f:8e:72:
5e:7a:ac:3b:7f:94:51:4b:5c:be:ca:45:33:28:30:dc:8c:cc:
84:b0:5f:f5:2d:2c:cd:a1:3e:37:a3:d6:7e:7a:11:7b:0d:c9:
3e:9b:fe:0d:f0:22:1a:13:de:33:35:40:3c:9f:e0:9b:d8:23:
93:18:58:af:85:c8:65:1b:84:03:40:69:ad:44:96:19:94:5e:
21:9f:33:53:41:c5:ea:5f:6d:13:89:47:37:fd:d9:b8:00:d7:
54:e1:bd:40
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENBMEUxMTAvBgNVBAUTKEU3MDJDNUFBNzREOEM5NkNDOEVFRjU2MThFNEZGRUVG
RDUxRDM3RjkwHhcNMjUxMjE4MjEzMTIxWhcNMjUxMjI1MjEzMTIxWjAYMRYwFAYD
VQQDDA02OTQ0NzJhYS0yODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuK5zwPeDVPdXdxQTmnH5NQBvRcXje6dPMEt8lwqCKgUrxib2jf39F04CFtqQ
dcI1L9cInEzJboxAQC5EsBosQ9bvQE1ZFYF+M1dz8BGt0nzmZsOiu798Prq8OVhK
EMJ196uo2Ep22YQQ9cudp0rJeaSGfDP4tycUaVKcQP3oZWIm/LGzAqSDxIK+8cBd
ejhOSX9VMDN1W29kWcKGehc/l7Hcmje/ABuyCcyyzuusBvI+Vl2E4LVBm1VXi5VS
9vJHi5zfVqQWKmg3MGnsugsAh/49DCPzmLw+2bMg1xZ/QG1Z0UeqH8Sd28gXiOY7
JnJHFB/3uoW5n8vykW5V09TyAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEs6fn9Q
g6cO5zlk/JPYiMIJYpfdMB8GA1UdIwQYMBaAFOcCxap02MlsyO71YY5P/u/VHTf5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0EwRS84QTExNjRDQTgw
NzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlXekk3dlZoamtfLTc5VWRO
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV3TEZxblRZeVd6STd2Vmhqa18tNzlVZE5fay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Q0EwRS84QTExNjRDQTgwNzcxMUVCOTdEOTQwNTRDNEY5QUUwMi81d0xGcW5UWXlX
ekk3dlZoamtfLTc5VWROX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAnXQFUNDTNoCywwRx56SOX6BPZX114OA4USel5wmfaoXzsrC7eRM0S
KIHWnn/j4paH32UCDtcmNoVBYQUb219rbdIrB8WLryqsEI6wKlUv4v+Pn0w+K6kW
Bpq7Nn8426Qxg1X671eWypvv7GVF2DfbohMKfce/RQuDgS9NGFK5fafZlQf41KTp
AB0dY2zg9bxyDzcJW3xfmi78WI3Ln9V/jnJeeqw7f5RRS1y+ykUzKDDcjMyEsF/1
LSzNoT43o9Z+ehF7Dck+m/4N8CIaE94zNUA8n+Cb2COTGFivhchlG4QDQGmtRJYZ
lF4hnzNTQcXqX20TiUc3/dm4ANdU4b1A
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:59 2025 by rpki-client