This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
File: 2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json)
Hash identifier: P1jqETROmlzj3LhwGiMmvSVh1zYXKszq7iMqzfX3e5g=
Subject key identifier: 86:CC:20:E3:57:AC:40:D9:95:DF:0B:E0:28:1D:D6:75:C8:04:55:2D
Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Certificate serial: 08D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
Manifest number: 08BB
Signing time: Sat 20 Dec 2025 19:55:19 +0000
Manifest this update: Sat 20 Dec 2025 19:55:19 +0000
Manifest next update: Sat 27 Dec 2025 19:55:19 +0000
Files and hashes: 1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: srplIe/BzCXD7NAKKl4YAUSYPQZPmFSR1T6DNPwJoj4=)
2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: d3AVE6MmRgC9f1BP/vAUeg941gkBQiu4la3PQf5xjqo=)
3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: 69lFJmCSoZqJFnlRVMecyEqrZmFOaweKrojaOmIkHVY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:55:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2256 (0x8d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B
Validity
Not Before: Dec 20 19:55:19 2025 GMT
Not After : Dec 27 19:55:19 2025 GMT
Subject: CN=6946ff27-3210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:ac:fa:cd:c1:01:65:20:8d:c0:f9:72:88:
c7:96:67:35:26:54:89:85:88:4d:a4:05:07:ee:a3:
95:cc:fa:88:4c:09:59:7f:e0:d1:ef:64:6c:dd:56:
48:7f:08:52:46:76:de:52:62:cd:65:e5:6d:85:78:
60:8d:c1:5d:8a:72:2b:2b:99:41:87:81:81:fb:e1:
4b:9a:c7:e4:8b:3c:00:8f:2f:33:33:63:82:e3:91:
6b:30:d4:13:cd:fd:8c:a6:54:2e:83:cf:a3:6e:80:
73:e8:b6:e1:72:fc:db:09:07:95:5b:f9:de:52:a1:
fc:34:96:4c:a4:08:67:f8:45:cf:75:25:5f:dd:50:
b3:18:c2:c9:fe:44:41:8e:ab:d3:d6:08:50:62:54:
35:06:68:fd:12:ce:69:cf:04:ae:96:50:d9:bd:05:
a0:ab:db:70:3a:2c:de:e5:69:e2:96:ba:06:7b:ef:
19:1c:1a:a8:92:ab:ad:0c:ea:f3:8d:1c:95:c3:34:
90:c4:f1:68:d7:db:e9:f9:f4:5e:0e:82:8f:64:02:
ab:96:62:fa:a1:51:e0:af:23:1f:70:ab:4a:e8:84:
48:15:62:42:99:01:06:38:83:67:ba:5e:fe:33:2a:
7f:64:56:44:d7:0d:be:b5:e6:fb:79:c8:cf:73:6b:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CC:20:E3:57:AC:40:D9:95:DF:0B:E0:28:1D:D6:75:C8:04:55:2D
X509v3 Authority Key Identifier:
keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1d:21:38:11:bf:23:7f:fb:50:06:45:9c:8b:7d:aa:ea:10:
15:6a:c9:3b:c7:96:64:b5:93:07:89:40:dc:ca:e6:45:51:aa:
da:b2:89:3c:d6:b4:78:bb:ed:e8:be:9c:d4:ce:16:bb:06:66:
4c:69:bd:c2:88:95:3f:55:51:7f:06:bc:97:93:7f:fc:35:5d:
62:69:78:0f:21:2f:1c:e0:62:6d:57:5b:14:a5:48:4a:7b:bb:
de:5c:a4:5b:f8:dc:ff:7e:1f:3c:a6:a4:79:d7:bc:66:10:67:
9f:a5:e5:b6:ae:a7:b7:15:04:61:3b:b8:d6:28:ad:49:d2:2a:
63:0c:68:28:01:5b:ae:a2:cc:1e:25:b0:1c:9d:5c:18:9c:3e:
07:25:7f:fe:35:82:33:2d:2f:83:61:41:1c:9f:7b:0e:fd:f1:
70:0e:64:8f:ef:d1:12:1e:5a:72:a7:16:95:17:4d:7a:6e:1c:
8e:8d:ca:de:61:d8:a3:6e:ed:73:e8:c6:c0:37:58:2b:3c:93:
ec:b1:d5:e2:ad:4b:d3:ef:d7:2f:92:57:33:b2:9c:6e:dd:e5:
77:e9:e4:57:be:6c:d9:23:42:eb:bd:70:67:26:bd:16:4b:b9:
31:18:75:05:f0:a6:56:3a:14:5c:3b:d5:1e:51:18:45:1c:b0:
74:f7:10:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDRTIxMTAvBgNVBAUTKERBRkRFMEJDNkUwQUQzQTg5NUJDNzU2RDZDMzFBMUU2
MUI2RDM4M0IwHhcNMjUxMjIwMTk1NTE5WhcNMjUxMjI3MTk1NTE5WjAYMRYwFAYD
VQQDDA02OTQ2ZmYyNy0zMjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuOOs+s3BAWUgjcD5cojHlmc1JlSJhYhNpAUH7qOVzPqITAlZf+DR72Rs3VZI
fwhSRnbeUmLNZeVthXhgjcFdinIrK5lBh4GB++FLmsfkizwAjy8zM2OC45FrMNQT
zf2MplQug8+jboBz6LbhcvzbCQeVW/neUqH8NJZMpAhn+EXPdSVf3VCzGMLJ/kRB
jqvT1ghQYlQ1Bmj9Es5pzwSullDZvQWgq9twOize5WnilroGe+8ZHBqokqutDOrz
jRyVwzSQxPFo19vp+fReDoKPZAKrlmL6oVHgryMfcKtK6IRIFWJCmQEGOINnul7+
Myp/ZFZE1w2+teb7ecjPc2v9twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbMIONX
rEDZld8L4Cgd1nXIBFUtMB8GA1UdIwQYMBaAFNr94LxuCtOolbx1bWwxoeYbbTg7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNFMi82MTgwQzBBMkNE
NkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2aVZ2SFZ0YkRHaDVodHRP
RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ2M2d2RzRLMDZpVnZIVnRiREdoNWh0dE9Ecy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkNFMi82MTgwQzBBMkNENkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2
aVZ2SFZ0YkRHaDVodHRPRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChHSE4Eb8jf/tQBkWci32q6hAVask7x5ZktZMHiUDcyuZFUarasok8
1rR4u+3ovpzUzha7BmZMab3CiJU/VVF/BryXk3/8NV1iaXgPIS8c4GJtV1sUpUhK
e7veXKRb+Nz/fh88pqR517xmEGefpeW2rqe3FQRhO7jWKK1J0ipjDGgoAVuuoswe
JbAcnVwYnD4HJX/+NYIzLS+DYUEcn3sO/fFwDmSP79ESHlpypxaVF016bhyOjcre
Ydijbu1z6MbAN1grPJPssdXirUvT79cvklczspxu3eV36eRXvmzZI0LrvXBnJr0W
S7kxGHUF8KZWOhRcO9UeURhFHLB09xAF
-----END CERTIFICATE-----
Generated at Sun Dec 21 22:54:42 2025 by rpki-client