This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
File: t0SkTltlPmx6kM9gNOANz9iUfWA.mft (raw, json)
Hash identifier: mMaD/BkrsZ5geabgArJU94cVKRMZkeqYsWVTBHnUu+k=
Subject key identifier: D5:F3:F0:3A:40:8E:14:29:AD:19:A1:81:8A:98:F4:6D:26:74:D3:E9
Authority key identifier: B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
Certificate issuer: /CN=A914EBE5/serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Certificate serial: 18C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
Manifest number: 18B3
Signing time: Sat 06 Dec 2025 16:05:37 +0000
Manifest this update: Sat 06 Dec 2025 16:05:36 +0000
Manifest next update: Sat 13 Dec 2025 16:05:36 +0000
Files and hashes: 1: t0SkTltlPmx6kM9gNOANz9iUfWA.crl (hash: 9QYQiJpoeDxqsvajMieOjvEtO9D0HzncS9+7xaPJ/BM=)
2: 253B1382106C11F08D824C19C4F9AE02.roa (hash: Lm98gfuE4nx/90/5gHuI/T5p7zlVxbDFyDvflUZQMdA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:05:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6341 (0x18c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EBE5, serialNumber=B744A44E5B653E6C7A90CF6034E00DCFD8947D60
Validity
Not Before: Dec 6 16:05:36 2025 GMT
Not After : Dec 13 16:05:36 2025 GMT
Subject: CN=69345450-ca92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:ed:fe:23:28:aa:b0:aa:c2:b6:b5:05:9e:
3b:f1:79:35:b0:88:00:aa:f1:dd:bc:89:d2:f7:49:
5b:b8:e3:c2:23:1a:20:29:d3:ed:e4:84:9b:7f:e6:
1a:a5:bb:fe:ac:4b:8b:86:7d:81:ed:ca:e7:da:b5:
a7:d8:c8:98:74:9d:e1:d2:bd:9d:2c:95:00:34:d3:
44:44:75:44:87:b4:46:4d:f5:12:dd:79:22:a1:54:
04:18:19:a7:94:5d:50:86:fa:52:5d:d1:ac:fc:3a:
c4:de:af:f1:6a:02:a3:84:06:11:f3:15:42:9c:12:
c4:38:7c:83:9a:65:06:20:ec:41:48:c3:da:e3:45:
a3:da:58:de:9c:a9:e5:d8:4f:8c:31:81:9c:74:a9:
b8:6d:24:87:db:67:6d:c9:b5:db:17:12:1e:42:63:
9f:a6:18:a6:6f:d0:87:74:ee:43:c8:6c:90:29:5a:
2c:b8:39:34:af:a9:b6:57:c0:a9:5d:65:92:f3:81:
bb:fe:c5:dc:60:bd:a6:d1:32:55:fd:24:50:f1:f4:
55:cd:a5:63:d3:25:ed:45:d0:80:c7:b1:71:57:ec:
f8:90:b7:d8:13:ba:67:bf:3f:ef:d0:3d:c7:74:b8:
d9:1b:cb:4a:89:04:2b:36:7c:ed:a9:6a:0f:a1:0b:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F3:F0:3A:40:8E:14:29:AD:19:A1:81:8A:98:F4:6D:26:74:D3:E9
X509v3 Authority Key Identifier:
keyid:B7:44:A4:4E:5B:65:3E:6C:7A:90:CF:60:34:E0:0D:CF:D8:94:7D:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0SkTltlPmx6kM9gNOANz9iUfWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBE5/64C52708A95F11E79AD4E734C4F9AE02/t0SkTltlPmx6kM9gNOANz9iUfWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:c1:5e:f3:1d:ec:56:dc:d2:46:80:12:10:0b:a9:17:91:3d:
c1:e6:72:ee:cb:ef:1f:3a:29:f1:98:63:ee:87:50:80:9e:93:
44:68:28:7b:b7:67:dc:0d:1d:8f:62:26:aa:cc:db:81:9f:61:
af:2e:af:ad:cd:90:fa:27:ce:fd:a2:0e:b5:13:83:1f:7b:85:
66:1e:07:79:ac:a0:5a:e4:57:9f:d1:8e:94:90:91:58:61:be:
69:05:49:1d:75:66:6a:d2:3a:3b:92:a5:f3:bb:af:11:b1:12:
e4:7a:48:32:27:4e:32:08:cb:4a:d9:d4:5b:a0:d2:9d:00:44:
f1:d2:fd:2f:14:7c:a1:4f:83:aa:44:fe:ba:aa:16:3e:23:62:
d1:1e:d5:1f:c4:45:aa:41:3b:5b:e2:9f:0d:c4:6f:35:35:ce:
56:3e:03:2b:17:6d:50:03:6a:7f:c4:62:7a:3d:f6:31:db:d4:
76:4b:ae:27:fb:15:0d:91:1c:5a:49:27:70:2a:ae:b4:4d:14:
42:8d:42:f8:cd:59:9c:92:f2:1e:88:77:07:72:fb:d4:fd:31:
d4:68:b5:a9:b9:d2:69:f8:a8:29:0f:10:ce:e0:3b:dd:b2:fd:
54:4f:c6:86:53:a9:e8:d4:33:55:a2:1c:15:d5:a3:d1:cd:38:
13:85:2a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:43:44 2025 by rpki-client