This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
File: _pB9p6f5k3mm_UY90X0ltNUB3-g.mft (raw, json)
Hash identifier: 5vETJyKWXsMDut0RuELadEZJ87dBUkOzoPRbxktTA4s=
Subject key identifier: 51:7B:07:A8:26:A8:FB:D1:2B:D7:BF:2B:35:EA:6C:79:A7:EB:53:15
Authority key identifier: FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
Certificate issuer: /CN=A918D7D0/serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Certificate serial: 0872
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
Manifest number: 151D
Signing time: Mon 22 Dec 2025 17:49:41 +0000
Manifest this update: Mon 22 Dec 2025 17:49:40 +0000
Manifest next update: Mon 29 Dec 2025 17:49:40 +0000
Files and hashes: 1: _pB9p6f5k3mm_UY90X0ltNUB3-g.crl (hash: It2nzbTYvCkUEQHhXdN++qJCDYHp2vYi3ouLQ0At+64=)
2: 57B4ADB0066A11ECA8CBA567C4F9AE02.roa (hash: CrwjFPg8gDUHmyLmt3AGGq8klRcYSMyETp380bqgF2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D7D0, serialNumber=FE907DA7A7F99379A6FD463DD17D25B4D501DFE8
Validity
Not Before: Dec 22 17:49:40 2025 GMT
Not After : Dec 29 17:49:40 2025 GMT
Subject: CN=694984b5-d0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:a3:4d:e2:03:1e:27:d1:a4:83:54:10:6d:
6f:da:ee:5e:de:68:c8:fd:d8:f2:d3:0f:a1:35:ba:
7b:7b:a0:61:b4:72:73:33:4c:05:7b:fc:9e:5c:b9:
f5:fa:ab:64:f2:b8:92:0f:51:65:91:17:3e:a4:af:
3c:e8:f5:fa:d8:90:d1:c0:46:e8:1c:17:b4:23:a6:
bd:c8:15:3b:ca:55:dc:b1:b0:3c:a0:cb:64:f5:7f:
1d:73:b4:ea:a1:25:69:f8:0c:e7:5b:58:1a:59:e8:
e1:2a:f5:8a:8a:fc:d5:a9:87:df:9e:1c:69:d0:83:
d5:c8:4b:50:62:e0:61:0e:a6:5f:1d:28:72:da:8f:
ab:44:d5:31:99:67:d1:9f:69:de:60:40:37:35:94:
73:ed:61:5c:d3:8e:6a:02:19:c1:ff:04:be:62:38:
34:cc:3d:c4:d9:cc:d2:67:ee:c3:2d:17:f0:14:f5:
3d:2d:52:e1:88:13:6a:ff:b1:77:24:e0:12:a6:e4:
2a:6f:8b:a1:33:6b:1e:8f:87:c9:79:4b:ea:a5:66:
7d:1d:a6:76:37:29:1b:45:de:4c:ed:f4:90:fe:ac:
2b:96:0f:d5:ae:ec:ea:b0:6f:38:b8:2a:4a:93:db:
9e:ac:25:a6:db:db:72:76:a8:c1:11:cb:d6:67:85:
85:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7B:07:A8:26:A8:FB:D1:2B:D7:BF:2B:35:EA:6C:79:A7:EB:53:15
X509v3 Authority Key Identifier:
keyid:FE:90:7D:A7:A7:F9:93:79:A6:FD:46:3D:D1:7D:25:B4:D5:01:DF:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_pB9p6f5k3mm_UY90X0ltNUB3-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/_pB9p6f5k3mm_UY90X0ltNUB3-g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:9c:57:55:23:27:16:8d:75:67:c2:8a:20:44:c9:62:df:93:
93:df:37:4e:b7:1a:14:58:fa:6d:50:28:3c:c9:8d:a7:b2:07:
3b:fc:c4:43:1d:36:33:5d:4d:cd:eb:4a:4a:cf:1f:89:c1:42:
f7:b9:59:a3:cc:4a:45:c7:d2:97:b7:1f:e9:05:9d:ec:3d:ca:
17:2a:aa:3c:a9:bc:82:82:ec:00:18:9a:4d:13:58:d9:bd:5a:
9c:70:98:56:4c:c7:87:cb:7b:d2:35:b6:72:41:fc:8b:68:1b:
12:f9:4f:4b:90:32:ac:44:42:10:a0:12:ef:36:a3:32:ff:d3:
ce:8e:8d:cd:ac:58:5d:16:87:1e:6a:67:ea:91:f4:7d:9a:0d:
af:6e:e0:df:46:19:9f:f9:39:2e:80:b8:20:ef:75:ab:30:e1:
f4:61:e2:7c:98:f7:3b:79:c6:23:53:f8:82:11:c7:c6:c7:80:
47:1c:78:c4:4c:62:31:9f:59:39:4b:4a:0d:b6:64:b6:f6:32:
1c:81:fd:4b:63:c4:71:d8:82:6a:08:2a:52:1b:0f:75:c7:75:
dd:ea:6b:9d:07:ed:19:30:79:f1:9b:53:bd:c3:17:ec:93:43:
5f:cf:48:d7:2d:d2:d9:3d:35:7c:e8:04:dc:df:52:92:75:c2:
2c:d7:cf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:34:29 2025 by rpki-client