This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier: Dhs3dObQo8fHyzBnrbBEObn0qf1pZOdl8xdk64sUUBM=
Subject key identifier: 70:13:A6:66:4A:59:40:1E:3B:6B:20:A9:A0:41:B7:E7:B0:0F:E3:B2
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial: 031F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number: 0310
Signing time: Sun 21 Dec 2025 00:23:14 +0000
Manifest this update: Sun 21 Dec 2025 00:23:14 +0000
Manifest next update: Sun 28 Dec 2025 00:23:14 +0000
Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: BFu8sLhKsFu7VZNZfHs3daXc+VpvR9zc7EkluzlcJLg=)
2: C79B240C249811EFABD23253C4F9AE02.roa (hash: 82ItOlvihDjqVoWpSyFuHxJCD90xjXFw0eTtjvUUFXI=)
3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: xP/jJhS+dRDMFII7/oN+e6tmZGRsaM2PF5rzA01lyJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 00:23:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 799 (0x31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
Validity
Not Before: Dec 21 00:23:14 2025 GMT
Not After : Dec 28 00:23:14 2025 GMT
Subject: CN=69473df2-b5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:2f:92:88:a5:6c:df:c5:c8:db:4c:56:8e:
29:16:bb:00:2f:c4:00:f6:cf:e8:90:1d:cf:bf:31:
a1:8c:51:06:57:c3:53:3e:64:bc:4f:01:f8:a4:44:
d1:ce:67:89:64:9b:aa:00:ea:77:e9:5a:68:24:ab:
9b:1a:25:ed:93:b3:3a:6e:92:93:b1:31:dd:0c:8c:
71:18:ed:4a:b3:e7:3a:a9:c2:80:7b:64:37:84:80:
73:75:d4:a5:62:29:b2:7d:a1:fa:2a:c8:16:55:1b:
b2:cf:d9:a7:ff:c5:28:a1:a0:40:e1:91:15:27:25:
9b:ae:50:7a:84:ee:66:3a:97:a6:6f:cc:8e:cd:e3:
4d:3f:8b:bf:99:e0:c3:9b:4b:44:65:80:7c:a2:b5:
4d:33:c1:55:39:0d:bc:0f:90:dd:9f:84:5b:22:70:
e7:63:6c:8d:48:e3:98:75:24:52:68:ef:9f:46:9e:
27:23:1f:01:78:d7:3f:2e:65:e6:6a:e8:e6:51:eb:
ec:a9:8e:e4:8e:ac:87:98:8a:bb:0b:a1:57:51:19:
2e:f7:a7:ff:c0:68:31:9a:a2:23:cc:a6:ae:f2:44:
97:ec:9a:d9:ce:a9:da:67:1f:a9:59:e1:77:61:d3:
f1:34:55:ff:af:de:ed:64:bb:80:d5:44:51:b0:2b:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:13:A6:66:4A:59:40:1E:3B:6B:20:A9:A0:41:B7:E7:B0:0F:E3:B2
X509v3 Authority Key Identifier:
keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:60:37:45:f7:63:18:38:21:f8:28:08:7b:3a:43:ff:0b:62:
51:30:a1:2a:e1:ec:28:78:b9:81:d5:05:f1:32:fb:8e:00:56:
61:e7:06:65:25:dd:92:ac:df:c0:b2:65:44:05:e6:31:a8:4f:
09:48:26:89:87:fc:7a:8a:35:57:08:c1:88:3e:39:69:9e:0d:
fe:34:45:7e:6a:e5:6a:d3:11:ef:46:ea:1e:4c:d2:f4:d3:80:
a3:e3:e2:9d:8c:3c:cb:81:30:44:42:b6:91:d6:9b:90:d5:36:
7b:9c:bb:60:5c:48:3a:68:7e:35:e9:aa:b5:bf:9d:99:46:88:
04:65:aa:63:28:cd:1e:3b:ee:a8:8c:cc:a0:21:c7:e9:0f:65:
82:1e:64:45:24:ef:f4:33:25:b4:bc:8f:ef:83:e6:d7:ed:2b:
64:5d:e4:75:28:73:cf:e7:61:d6:ae:92:ce:1b:44:49:c5:37:
48:ee:54:25:53:4a:10:75:d5:1b:ac:9b:59:89:03:6d:76:13:
55:f2:7b:17:bf:a5:f6:22:9d:52:ae:a9:8f:7a:59:eb:1e:aa:
45:f5:41:99:1b:40:37:d4:44:0d:10:1e:db:d4:ad:9f:40:b6:
e9:90:c5:c0:d3:9f:fa:f0:de:bc:a5:64:3f:01:35:47:6b:46:
65:84:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 10:42:25 2025 by rpki-client