This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft
File: E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft (raw, json)
Hash identifier: g9ItyhbFtR71yg3E2r60hRdnVRm9L2KWuxmfPBtn1Ow=
Subject key identifier: F3:DC:02:FE:6C:7B:3F:62:64:C2:19:D8:B1:B3:FF:30:6E:65:84:57
Authority key identifier: E4:A2:D2:F4:E4:87:25:65:FB:EB:0E:AA:00:02:F7:EB:05:9E:5C:1C
Certificate issuer: /CN=A918C2870001/serialNumber=E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C
Certificate serial: 51A5860F01BF6C5B01C48B93C20E1F98049C7EEF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft
Manifest number: 08
Signing time: Fri 19 Dec 2025 14:48:11 +0000
Manifest this update: Fri 19 Dec 2025 14:43:11 +0000
Manifest next update: Sat 20 Dec 2025 14:52:11 +0000
Files and hashes: 1: E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.crl (hash: 0lNBBl7G04PZIRr0y7RWgjzpau1x+LG2McxBgs6Jk4o=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.crl
rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 14:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:a5:86:0f:01:bf:6c:5b:01:c4:8b:93:c2:0e:1f:98:04:9c:7e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C2870001, serialNumber=E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C
Validity
Not Before: Dec 19 14:43:11 2025 GMT
Not After : Dec 20 14:52:11 2025 GMT
Subject: CN=F3DC02FE6C7B3F6264C219D8B1B3FF306E658457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:08:7f:35:0c:08:c8:67:8d:13:10:4f:60:
b4:ae:05:83:0d:fc:07:97:43:ed:ed:9b:ca:71:8e:
68:42:86:00:e7:36:82:25:93:2a:1f:11:32:6a:b1:
20:5a:fd:29:06:63:20:68:b8:63:3e:3f:e0:0e:55:
fa:a1:fe:da:f3:75:70:63:e0:5c:dd:db:2a:e3:66:
e0:f8:23:09:fc:3e:4c:cb:60:1b:27:87:19:a1:41:
48:ea:3d:05:53:d1:22:2c:53:b4:80:82:fe:17:c7:
17:3c:68:94:07:13:8c:49:dc:4c:b0:05:63:32:fb:
94:fe:0b:58:ed:30:e5:14:f7:92:8c:c2:db:a2:6e:
ec:63:ee:e6:1f:fb:6d:b4:f8:a0:c0:dc:63:66:f1:
35:6e:a7:7a:1f:8f:1e:c2:54:73:80:c5:bc:70:8d:
3a:55:c6:3b:02:8e:bb:c3:ec:8d:42:3e:46:d9:bc:
62:96:c8:04:ea:a1:ab:05:9b:1b:ef:f6:62:03:7b:
3c:24:4a:8c:7f:9d:85:93:fe:9e:ea:bc:86:e0:b9:
be:70:d8:44:2e:7f:1a:03:e9:65:90:b6:35:13:c0:
93:d6:e8:0e:ff:62:f5:c3:b8:88:4e:2e:20:48:55:
28:1b:ac:19:16:19:a4:07:c4:1f:06:32:79:c0:fe:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DC:02:FE:6C:7B:3F:62:64:C2:19:D8:B1:B3:FF:30:6E:65:84:57
X509v3 Authority Key Identifier:
keyid:E4:A2:D2:F4:E4:87:25:65:FB:EB:0E:AA:00:02:F7:EB:05:9E:5C:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5KLS9OSHJWX76w6qAAL36wWeXBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A918C2870001/0/E4A2D2F4E4872565FBEB0EAA0002F7EB059E5C1C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ad:7d:a5:16:04:8a:09:bb:80:fc:81:37:89:67:90:44:39:
1a:4f:d5:6a:60:5f:84:bf:8c:50:de:12:0a:53:fc:1a:52:18:
db:c0:f0:6c:19:bf:f1:a8:14:d3:5e:a6:3c:c1:f9:7d:fc:4b:
ce:c9:24:ba:81:37:d3:04:ff:79:b3:e1:15:7b:c7:60:93:d0:
29:35:3b:11:1e:8d:c0:64:f8:52:f2:7c:6d:d7:69:99:3e:cf:
c9:19:ee:24:b3:a1:c4:85:c4:e7:e3:86:f8:77:fe:97:e7:a9:
6e:7e:ff:ae:e0:a5:d0:9e:43:21:a7:47:26:8a:a6:09:8b:a2:
1a:5b:5e:ec:d8:a5:8f:28:2b:fe:14:c0:6e:64:cc:66:6a:e5:
24:aa:ed:bf:b1:1f:c2:a2:43:4e:ce:47:86:ca:a6:97:f8:a3:
d2:e9:a4:d3:2f:58:06:df:d6:c2:c3:07:4e:43:9d:b5:2e:1d:
df:e3:78:d4:64:19:2f:4a:d4:0a:71:50:2b:8f:54:f5:b6:46:
ce:2c:ae:82:4d:c1:1c:c1:85:ca:12:9b:e2:e8:cd:6b:a2:56:
1e:8d:d8:39:c8:0a:b2:18:28:75:a3:b1:03:55:c9:56:f6:9a:
c6:6f:5d:d6:30:0c:23:f0:89:d5:39:b8:70:a1:b1:6a:27:02:
e9:49:51:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:41:59 2025 by rpki-client