This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
File: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft (raw, json)
Hash identifier: NGpTN0w7byJesCFRUr1yH+ygjB3iKVUHO922tn3SdSU=
Subject key identifier: CC:B6:A0:9D:D1:BF:48:3A:7A:3C:38:AF:04:1C:AD:07:E0:5D:BC:4F
Authority key identifier: D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB
Certificate issuer: /CN=A918FE4B/serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB
Certificate serial: 77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
Manifest number: 02A4
Signing time: Wed 31 Dec 2025 01:11:15 +0000
Manifest this update: Wed 31 Dec 2025 01:11:15 +0000
Manifest next update: Wed 07 Jan 2026 01:11:15 +0000
Files and hashes: 1: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl (hash: x7sxUUHIGrs/1FWctS4xIkT5xb9oMv8Nw9zlhSxm8zA=)
2: F22AC4E253FA11F0ACEFB91BC4F9AE02.roa (hash: zV/07wRUVY1rurlMX/hm5KuzjNtGcUHEDL2bs1ve1Lk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl
rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 01:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FE4B, serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB
Validity
Not Before: Dec 31 01:11:15 2025 GMT
Not After : Jan 7 01:11:15 2026 GMT
Subject: CN=69547833-bcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:33:0f:e9:85:09:e4:e2:9c:34:38:18:8e:
2e:f8:fd:31:78:55:60:2f:2d:6b:9e:c1:c3:d5:7f:
5b:d7:b7:ff:34:03:53:2d:75:b7:62:37:2a:ce:90:
8d:2c:2e:52:eb:e0:91:fc:71:d3:a3:f9:d4:28:5a:
2c:95:d8:86:ec:6a:42:ec:3a:18:5c:d9:59:8f:6f:
a8:80:e8:6f:ce:f3:1c:1e:a0:3b:71:c4:f7:6f:23:
de:5d:53:f2:06:2c:cd:2b:10:af:67:4a:38:9f:29:
a8:0c:24:8f:47:65:50:2b:e7:28:f8:3e:b8:57:09:
4c:8d:28:f1:51:bd:57:fb:91:58:3a:ec:da:ce:cc:
ed:02:6c:5d:4c:bf:ce:55:99:77:e4:f8:48:57:91:
92:70:cd:e6:78:33:72:a5:bc:08:e8:19:a6:e1:c8:
32:b0:f7:c5:c0:d9:7b:4e:65:d0:ed:20:02:7e:82:
1f:eb:98:08:3d:a9:d2:be:cc:45:b0:39:bf:fb:64:
10:40:57:d1:8b:ac:0e:f3:f7:60:45:3c:60:54:bb:
1e:3c:08:81:f5:2c:54:5c:b5:ba:fd:f9:08:44:90:
90:66:1b:08:a1:8c:6d:1c:a2:81:b8:f6:ef:94:05:
c9:c9:ba:a7:2b:67:e9:e4:89:f2:ff:53:b6:08:cb:
eb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B6:A0:9D:D1:BF:48:3A:7A:3C:38:AF:04:1C:AD:07:E0:5D:BC:4F
X509v3 Authority Key Identifier:
keyid:D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:04:0a:73:61:cc:e5:2e:c8:a8:be:03:cd:36:83:a4:0d:c8:
8a:1d:75:67:32:c8:2f:be:d2:13:b3:82:01:a2:a6:e1:74:0c:
dc:bd:75:5f:97:b7:32:d9:28:1e:3f:83:9d:ec:3e:6f:ce:24:
42:48:14:c3:05:b9:10:9e:24:e2:d7:85:9f:13:da:8a:4b:b7:
95:93:fd:d6:d0:4d:ff:cc:07:81:a6:67:f8:57:ad:5b:8d:88:
c8:b3:97:3b:5b:ce:6c:f8:b6:d9:f4:a1:ea:62:0f:be:f5:cb:
c1:85:2d:d2:8f:23:db:6f:9d:d9:97:5f:2b:8b:db:35:83:00:
d5:70:98:45:35:9d:de:c0:7f:86:f9:9a:e2:5c:87:0e:11:62:
4b:79:64:7a:76:2d:b6:5f:d0:81:b0:1e:ab:5b:4b:51:b2:be:
5a:e1:d2:f9:d1:ed:8b:df:a2:4f:5a:e8:66:56:b6:12:ce:39:
8b:07:56:67:f7:41:a2:b3:10:b4:27:fc:04:5a:88:7e:ff:41:
86:ee:2c:8e:78:06:0e:d6:af:4f:c6:41:e9:95:65:11:7d:10:
f9:65:e3:92:88:aa:06:c4:67:33:8c:4f:4f:67:13:3c:bf:a2:
24:af:28:0b:c5:47:bf:64:b2:5e:88:57:b0:7a:ab:7c:75:23:
a2:19:85:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 08:17:31 2025 by rpki-client