This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
File: XFIDfgLgI3qkpHhukIwUJuu5qUc.mft (raw, json)
Hash identifier: XY9fNM5hTcYGhbePREm4KCchSNrXEVHjFyB3K4K80NI=
Subject key identifier: 4C:FD:EE:97:00:50:27:BF:DF:84:28:E9:D5:93:4C:F8:C5:F2:0B:35
Authority key identifier: 5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47
Certificate issuer: /CN=A912418E/serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
Manifest number: 18
Signing time: Fri 05 Dec 2025 05:40:52 +0000
Manifest this update: Fri 05 Dec 2025 05:40:51 +0000
Manifest next update: Fri 12 Dec 2025 05:40:51 +0000
Files and hashes: 1: XFIDfgLgI3qkpHhukIwUJuu5qUc.crl (hash: oq0HUGae2Yi3Mp1LXBakgZcTcu2TjwplhzWJiB7M1Oc=)
2: E7126E0AB08111F0B4456572C4F9AE02.roa (hash: KRwjwSWWBywAGAbXEKvDlNQZp8JppNvRq0fzU/i7zgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl
rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912418E, serialNumber=5C52037E02E0237AA4A4786E908C1426EBB9A947
Validity
Not Before: Dec 5 05:40:51 2025 GMT
Not After : Dec 12 05:40:51 2025 GMT
Subject: CN=69327063-7d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:c5:a0:88:7b:e8:94:78:88:f3:d0:5a:d1:
b4:ce:40:81:71:55:15:21:3b:b7:46:36:83:2a:98:
fa:61:18:97:87:c6:bd:21:da:7b:47:dc:85:33:46:
7c:55:b1:e5:3f:bd:22:2f:33:65:e6:5a:63:7a:d7:
fe:ac:44:b0:d0:d8:a5:43:93:3b:a6:d7:4e:af:7e:
b7:a6:9f:a8:4a:b0:65:3d:d6:de:71:02:2c:f4:40:
06:f5:6c:9a:55:a8:69:f3:1c:fd:48:66:6a:9f:7c:
a8:6b:6f:0e:e5:12:6b:38:94:1a:b9:34:d8:0f:59:
71:c8:8c:35:bd:39:05:ab:b5:6e:4a:9f:16:80:33:
a6:a0:48:95:5e:61:e3:06:5d:23:b2:aa:c8:44:40:
f3:e3:16:64:fc:d5:da:af:61:23:91:23:c6:8a:64:
82:38:e7:41:9d:72:f6:72:05:37:6d:df:d6:62:fb:
e1:e1:c2:e1:72:10:5f:aa:a8:63:30:bd:f1:fd:1d:
a8:10:7f:19:98:ef:2e:9a:76:5e:a0:b9:aa:b8:1f:
84:eb:c2:e1:c9:56:03:e9:98:ad:f8:ef:4d:69:e4:
cd:3d:3f:33:7f:17:74:5a:06:00:23:db:2e:5a:af:
54:8d:42:56:9c:35:e4:44:e7:00:50:5f:13:d4:ec:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FD:EE:97:00:50:27:BF:DF:84:28:E9:D5:93:4C:F8:C5:F2:0B:35
X509v3 Authority Key Identifier:
keyid:5C:52:03:7E:02:E0:23:7A:A4:A4:78:6E:90:8C:14:26:EB:B9:A9:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XFIDfgLgI3qkpHhukIwUJuu5qUc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912418E/E5676BECB08011F08A950351C4F9AE02/XFIDfgLgI3qkpHhukIwUJuu5qUc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:6b:76:3c:19:01:d5:76:ce:44:09:33:d0:69:1e:2a:5d:54:
8d:fd:b1:1a:cd:db:ac:53:65:1c:27:e8:d0:7f:0e:62:f9:6d:
33:60:c1:1c:d2:55:e6:96:3e:d6:01:f8:b4:04:d9:eb:b5:af:
9c:2e:56:e0:03:41:a2:e9:e1:b8:bf:4c:66:e4:08:70:e5:62:
1b:37:e3:09:ae:dc:24:38:51:50:7f:8b:b9:4f:a4:6c:ce:cd:
b4:c5:39:76:70:c9:2b:a2:29:8f:67:51:ad:98:f4:b4:ef:27:
83:93:13:fe:80:ce:af:1f:80:1e:60:e4:7b:aa:e3:b1:34:37:
f8:8e:3f:cc:86:84:a9:a9:ac:65:0e:00:a3:fd:02:b1:50:1c:
02:02:75:c1:4d:32:23:4b:9a:67:b7:8e:02:d6:d6:83:8b:ef:
42:44:ce:f4:a7:2e:82:8d:c9:80:e4:c9:a5:21:7f:61:1d:aa:
8b:bb:d0:3e:df:8d:55:78:34:fa:7d:47:4d:88:fa:dd:c4:d4:
c1:6c:e4:bd:27:b8:c5:9f:de:42:93:bb:23:b4:76:be:87:57:
76:32:01:e9:0e:0a:23:31:aa:86:46:2f:89:d8:2f:8d:eb:a0:
c6:29:d1:83:48:7c:ea:09:b2:c8:82:8b:bd:68:fe:42:fe:19:
45:99:c1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:13:55 2025 by rpki-client