This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
File: et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft (raw, json)
Hash identifier: d/ExjEGkcx69pRysu8ld5JBK4uPqQ1L0Yg1NH3KLF/0=
Subject key identifier: 04:E1:20:CD:FD:E6:39:62:86:80:FF:10:C6:FB:62:04:9E:09:7C:FB
Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1
Certificate issuer: /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
Certificate serial: 0722
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
Manifest number: 071B
Signing time: Thu 18 Dec 2025 21:17:22 +0000
Manifest this update: Thu 18 Dec 2025 21:17:21 +0000
Manifest next update: Thu 25 Dec 2025 21:17:21 +0000
Files and hashes: 1: et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl (hash: UK16yur2Uza8pBmseRtIec39fhU4i5cQvElWgoo6pdc=)
2: 210E6234639E11EB81185C31C4F9AE02.roa (hash: lpW0NjdmrOMG9GEGghvuTfgytfrpOcK9mbpw3h0K59c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl
rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1826 (0x722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E1CC, serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
Validity
Not Before: Dec 18 21:17:21 2025 GMT
Not After : Dec 25 21:17:21 2025 GMT
Subject: CN=69446f62-7fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:79:4c:37:52:c4:10:c6:07:f2:ac:15:37:
66:24:9c:cd:c3:16:e4:c9:9f:6a:21:8e:b2:4f:ff:
af:52:24:9e:99:80:82:9f:1f:2e:13:4e:68:b7:55:
c8:80:bf:5f:25:cf:04:50:80:68:ef:46:81:1e:4c:
b7:6b:35:9c:46:af:8e:84:ec:1a:98:fd:7c:e9:78:
36:4f:20:06:3f:87:fc:2a:21:d9:29:ac:38:10:03:
f4:c0:fb:a8:5b:f2:e2:a4:d4:88:39:31:cf:1b:33:
02:1b:72:d5:f1:77:55:87:8c:91:e3:ba:36:27:1a:
c2:d4:b6:df:c7:18:17:55:84:6a:ae:88:b5:93:aa:
fc:5f:26:5f:b3:e7:63:8d:7a:72:5d:c4:d1:e9:63:
3d:c8:6f:e6:f0:44:1f:f8:ba:c0:ed:cf:3a:32:e7:
2b:ca:d3:be:9a:ca:fe:eb:fa:cf:ec:28:c4:7e:ea:
ec:f5:83:e3:f0:84:08:b0:ca:55:33:e2:c0:ec:2d:
46:ab:ea:ac:df:65:61:46:24:5d:d4:d3:bc:6c:66:
87:eb:a6:76:f9:85:36:c4:94:45:22:9c:be:97:ae:
25:70:54:1b:fe:2b:12:d6:ec:ef:83:51:06:46:ac:
02:fe:94:94:d2:a2:44:5e:06:16:1c:78:6d:5b:a9:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E1:20:CD:FD:E6:39:62:86:80:FF:10:C6:FB:62:04:9E:09:7C:FB
X509v3 Authority Key Identifier:
keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:4c:d2:3e:38:94:7a:15:b3:6b:d8:52:6e:3c:20:a4:78:06:
83:2e:b0:d5:0e:35:84:55:b1:1a:9a:f5:15:35:16:ec:78:a7:
83:52:c2:c1:55:c8:5b:5c:1c:9b:3b:4e:68:84:c2:cc:73:31:
16:13:de:75:13:66:2e:20:f7:f4:93:1f:a9:db:5a:c4:b9:f0:
af:39:7d:53:ac:fd:80:6c:a2:a6:c5:c9:1d:a4:37:62:d9:10:
2e:05:41:07:1f:53:8e:73:a7:fd:bf:54:25:70:dc:68:90:64:
a3:6e:cd:dd:37:b6:aa:48:90:b7:52:fb:bb:b9:d9:05:84:e3:
61:2e:c6:d6:e9:d2:75:23:47:7a:f3:37:0d:f5:ac:40:97:03:
1a:52:a7:11:8b:17:fa:42:2f:8e:5c:cd:2c:50:74:3b:b3:bc:
91:79:da:1e:a2:f0:3d:ac:f9:af:4e:f4:db:d1:09:87:ad:2b:
8a:b6:d8:ea:5a:88:7b:d3:2b:37:1f:0e:e1:d0:1e:1b:e6:2a:
4f:a2:1e:80:1a:53:70:5d:bc:e7:04:6d:11:ac:9c:ca:a9:11:
da:42:b5:07:45:ac:08:7b:53:d1:7c:a4:5e:57:25:a4:9d:10:
69:dc:54:10:49:5d:dd:00:03:ef:83:6d:25:64:ce:e3:da:52:
f7:14:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:15:58 2025 by rpki-client