This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
File: pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json)
Hash identifier: VzZBnGFANroEoMJ9ASi2osah/zbfZN4RO3zDEDzAOqQ=
Subject key identifier: 87:55:07:89:95:84:90:22:36:21:AE:5A:76:E9:62:03:9A:7D:A9:7B
Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
Certificate issuer: /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Certificate serial: 01A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
Manifest number: 019D
Signing time: Thu 18 Dec 2025 18:47:53 +0000
Manifest this update: Thu 18 Dec 2025 18:47:53 +0000
Manifest next update: Thu 25 Dec 2025 18:47:53 +0000
Files and hashes: 1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: lt/zlLT2GEd2sQhquYqekGHF+TcS5u+SUw+UwUyFdbk=)
2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: 8l049HuRfYTZKVjmyHEuH/syy1lOm3iSGmRbwY8PSnM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416 (0x1a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Validity
Not Before: Dec 18 18:47:53 2025 GMT
Not After : Dec 25 18:47:53 2025 GMT
Subject: CN=69444c59-db25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:de:3c:3e:18:ff:97:e0:76:aa:cb:36:a9:
c3:65:28:f7:3d:7b:77:a5:8c:6a:db:0b:aa:be:bd:
84:62:83:91:e1:bd:6a:ae:63:6c:1f:04:3a:e7:b0:
f2:89:bd:24:9a:bd:7d:cd:b9:89:11:af:c4:86:30:
95:f5:9f:32:0b:71:3a:64:89:64:d6:f7:74:47:f2:
2d:b2:1d:53:ab:f3:6e:99:02:cc:eb:e6:e5:b2:cc:
91:90:2b:e9:b1:27:bc:bd:98:26:1c:72:9a:d5:c1:
69:6b:ae:b7:fa:ea:ee:78:9d:99:65:2a:37:2b:ad:
ac:aa:1d:e9:7d:ec:55:bc:a5:0c:5a:6a:a9:46:79:
82:15:a5:5f:09:69:37:36:b2:f2:01:89:7d:70:76:
b9:ad:40:5c:db:c9:c7:cd:8d:cf:3b:e9:70:26:8c:
d9:67:46:02:d1:64:f4:f6:8b:31:d2:a3:75:63:3f:
9f:32:b5:7e:03:28:04:ad:2e:7b:73:7a:81:70:57:
26:1b:65:44:87:22:38:18:dd:fa:e3:10:ff:cb:c6:
e5:91:b2:b2:ae:02:6f:39:0b:4f:cc:e3:05:9c:56:
b0:9f:ce:e8:90:54:d5:75:08:23:92:6d:f6:a7:58:
d9:7b:77:ac:5c:e8:ff:8a:c0:59:6c:3e:7c:16:0a:
26:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:55:07:89:95:84:90:22:36:21:AE:5A:76:E9:62:03:9A:7D:A9:7B
X509v3 Authority Key Identifier:
keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:89:24:75:bf:b1:ac:21:61:32:c0:e6:d9:86:68:c1:92:a8:
d5:4f:8d:fb:95:9a:2a:d3:7d:ae:7d:21:e3:eb:d9:0a:04:1e:
ec:38:c8:14:1f:c0:c4:55:34:9e:cc:bc:10:ad:4d:55:58:37:
81:52:ab:38:f4:f1:53:dc:11:2e:09:92:a4:41:d2:6d:99:c2:
dc:7a:37:3a:da:d3:a2:49:4b:9f:9d:40:21:eb:2e:41:53:ad:
21:fb:41:fb:fb:d5:03:34:4b:d7:47:3c:ec:15:8e:df:ec:19:
d6:68:bf:7a:4a:46:22:ce:80:c2:a1:44:3f:9c:13:fb:9b:a8:
19:d8:bc:37:0f:a1:29:b1:d8:a7:26:9e:b1:c2:56:60:3a:e1:
83:e7:a8:62:06:a0:32:cf:8c:49:58:1b:e6:37:39:ed:e4:6a:
fa:76:ed:ec:97:bf:af:f5:f7:8d:24:31:81:d8:85:14:ff:1b:
ba:87:29:f0:c6:13:21:b8:f2:2c:f7:6b:f4:aa:3d:88:21:75:
c0:2d:b7:74:9d:f6:3c:e5:24:6f:d2:8d:fc:d1:2a:2d:74:07:
95:93:d3:28:8c:cd:db:1b:da:d9:56:ed:e8:9f:02:21:da:2c:
25:a5:ca:b7:df:70:6c:c0:02:47:c3:be:39:91:dd:1c:9c:38:
55:70:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:55:36 2025 by rpki-client