This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier: mfOosvol9pGzWHcL6ZmFr1hR986k0Ea6Dy90bbMg45A=
Subject key identifier: 49:3E:C5:2E:40:A5:A8:C3:D0:40:D9:8B:F5:19:63:04:17:F2:F3:C6
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 5CE1DF490CB9E4900FC2DB1CB6EC3BDA8BC24BBE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number: 06B6
Signing time: Sun 21 Dec 2025 14:18:18 +0000
Manifest this update: Sun 21 Dec 2025 14:13:18 +0000
Manifest next update: Mon 22 Dec 2025 18:08:18 +0000
Files and hashes: 1: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
2: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
3: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
4: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: +4tXyWsaiRHSXG8P5CHqHOsB1VxBVcZt9mbPuK3f9qs=)
5: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: Y8US0Ocdq6iuACcuu6blfuO/mWF61f4U7kbk1PWrIBw=)
6: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
7: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: aiTwY7exOIWYXIKbSyXz+xb7jVL186qs815q9Rt7CIg=)
8: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 18:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e1:df:49:0c:b9:e4:90:0f:c2:db:1c:b6:ec:3b:da:8b:c2:4b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Dec 21 14:13:18 2025 GMT
Not After : Dec 22 18:08:18 2025 GMT
Subject: CN=493EC52E40A5A8C3D040D98BF519630417F2F3C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:37:75:8f:1c:c7:16:f8:11:a9:cb:8c:42:
30:9d:9e:e2:69:94:20:80:7c:67:8f:16:32:ef:cf:
7b:b1:13:59:25:e4:c4:e6:af:93:dd:6f:9e:fd:16:
28:a6:6a:ef:38:4f:73:7d:c2:19:95:20:fc:41:73:
46:eb:c2:9d:c0:9f:25:6b:8d:97:17:a2:35:99:ed:
06:b9:c6:5c:2c:71:4d:b0:6e:28:fb:1f:9c:98:45:
24:ce:67:c2:69:c7:96:cc:a0:c5:52:c8:c0:70:88:
a8:8b:f2:11:03:db:2b:b2:f0:75:d9:1e:66:2e:59:
63:6f:2e:3c:1c:be:ad:36:6f:be:d7:10:7d:d0:b8:
1e:bc:75:4e:3b:93:7c:6a:3b:a6:db:d5:19:05:bc:
df:b4:78:34:90:78:64:d4:ca:1c:2a:64:1f:8f:c0:
a8:d7:70:0b:9c:1d:8a:18:08:4d:d3:99:60:83:a7:
eb:78:08:dc:5d:8b:d4:7e:19:e3:f0:16:7e:68:fd:
a7:a1:4a:66:94:35:ae:c6:1e:8c:dd:82:b0:b4:3c:
e7:73:1c:3b:6f:36:ef:af:f5:fd:21:d5:08:62:dc:
8c:36:8a:33:59:58:3e:21:15:92:38:e4:62:28:c5:
b4:d4:fa:10:cc:5a:ee:e2:b8:1a:89:b4:0f:bd:57:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3E:C5:2E:40:A5:A8:C3:D0:40:D9:8B:F5:19:63:04:17:F2:F3:C6
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:50:59:d5:23:d7:cd:4c:39:84:cb:cf:eb:f6:e3:f5:df:d8:
61:49:70:b1:98:e6:07:ac:d9:eb:6b:fb:4a:a5:7b:5b:c8:4a:
4c:93:14:0e:a5:70:99:97:cc:a6:5e:43:cd:dc:bf:33:ba:82:
5e:c6:28:1e:21:97:f3:c3:ce:a2:da:39:47:72:b6:3c:20:83:
be:1f:28:f1:0b:39:9f:ea:2b:e1:25:54:43:ab:fd:fc:a4:cb:
01:d7:11:fb:24:bd:4e:27:57:b4:a3:b8:7d:8e:db:60:02:c8:
0d:db:3a:d4:6e:26:6e:7c:cf:4f:4d:3e:89:3b:69:76:7b:82:
f8:6e:25:fb:1a:6d:d9:98:ba:d8:9d:96:ba:e7:84:99:e5:95:
35:41:87:57:63:ad:af:7f:aa:a3:b1:78:97:8e:0e:e9:b7:dd:
d0:d4:8a:c2:cc:d6:16:32:7c:4b:67:a8:f9:c8:7e:7f:a7:6a:
a4:c3:b8:ea:a1:0f:f2:a2:1b:dd:61:a1:c5:84:6d:92:9f:6d:
62:96:62:d8:45:f3:89:5a:99:14:00:61:c5:10:5f:73:da:9e:
ef:22:6a:85:32:28:07:cc:12:f9:6b:b0:42:18:c1:ef:91:3d:
4f:34:aa:e6:10:ff:07:66:05:ff:e5:8c:d4:ed:1e:ab:1a:e5:
35:b0:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:07:09 2025 by rpki-client