This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
File: wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json)
Hash identifier: lC7Y5x45Qp8PEoRw0B1O81MQ6xiH+g3yWFrqhoLTXbc=
Subject key identifier: 38:F1:37:0D:A8:B4:F5:2F:C1:85:46:2E:D1:B6:B3:7A:4F:5C:E0:E8
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Certificate issuer: /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial: 080A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
Manifest number: 0804
Signing time: Sat 06 Dec 2025 20:04:54 +0000
Manifest this update: Sat 06 Dec 2025 20:04:53 +0000
Manifest next update: Sat 13 Dec 2025 20:04:53 +0000
Files and hashes: 1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: fDlFr2NHGYi9AsGyciKpccvsIHa2bAYuHlLFSobMU2U=)
2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: hCxFygIxGBaZzO8/d0Vcf9NqUsTf/UZgA3mXuGpyT3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Validity
Not Before: Dec 6 20:04:53 2025 GMT
Not After : Dec 13 20:04:53 2025 GMT
Subject: CN=69348c65-6387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:04:71:56:be:e6:d8:0f:03:ef:37:6e:da:
73:a1:81:73:4e:01:fd:a3:46:8f:e1:4c:dc:91:1a:
c9:26:1c:6f:8c:7a:81:b7:3d:62:d2:ad:88:f8:83:
31:58:8f:d2:82:4e:22:da:48:e2:b3:fa:ce:7f:cc:
2d:df:15:56:3f:1d:5b:7e:28:58:89:e7:0c:70:e5:
09:84:df:15:c6:45:0a:e9:93:76:4b:3d:b5:12:77:
c8:a1:96:d3:d6:61:de:6b:a7:43:ec:30:32:b0:a1:
94:ed:25:f8:e3:dd:52:7d:dc:c1:af:e2:0a:71:a8:
c3:ba:7e:50:d9:d4:17:77:4a:b9:3a:e0:3e:5a:61:
e8:9f:ee:20:3e:8e:8d:93:20:0a:27:1f:7d:17:e5:
67:ed:8d:ef:8f:1d:bf:e3:67:c4:21:e6:b5:4d:f9:
ed:8d:62:7d:28:ab:a6:99:7d:ec:e1:07:c0:e9:ae:
86:b4:5f:f1:b1:7b:e2:30:76:6c:8d:fd:c5:a6:1d:
12:9b:bf:0a:a8:5e:f5:c2:6a:3d:a6:af:37:7f:d1:
cf:84:53:9a:ca:a4:01:21:09:42:12:66:4c:b6:82:
1a:bd:ee:20:d4:ae:45:9e:d3:8b:48:57:37:a5:17:
74:07:8e:16:ed:d5:48:3d:fd:0a:2c:11:34:e2:ea:
73:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F1:37:0D:A8:B4:F5:2F:C1:85:46:2E:D1:B6:B3:7A:4F:5C:E0:E8
X509v3 Authority Key Identifier:
keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:3a:87:a2:6d:87:8f:d0:3a:d2:42:e2:23:55:bc:2d:f4:f3:
52:2d:65:eb:24:75:7d:f7:98:a1:77:e7:ec:b1:f0:4e:79:0f:
97:dd:6e:16:64:70:8b:32:5a:2b:e1:83:cb:62:93:0e:50:ca:
0b:58:da:86:52:af:89:73:bf:c8:f5:bb:da:5b:e8:76:53:92:
68:8c:75:dd:42:4f:79:8a:86:c5:51:af:3a:fe:59:1d:50:69:
94:12:79:d5:0a:89:00:9f:3a:28:1a:8b:60:27:f7:8f:a6:98:
9d:4c:93:71:c4:40:27:a8:a8:3f:de:e9:70:62:aa:92:16:e3:
39:85:21:c0:a1:86:8e:89:24:02:30:df:25:2f:03:e0:97:ba:
17:31:96:2e:21:2f:8e:54:a3:5c:0a:75:3a:fa:2d:16:36:d8:
3b:46:51:15:35:72:e7:3c:c5:b6:23:f0:5d:f6:bf:a2:d4:19:
db:cb:82:1c:fb:17:fb:b7:0f:a1:da:ed:13:00:d3:fe:d6:c9:
d6:76:00:3b:7d:23:9c:c3:9a:e8:fa:77:cf:9a:e5:8b:8d:c7:
a0:bc:20:fe:b7:4c:03:ce:65:73:6a:ec:b5:1f:da:e4:1c:70:
25:d0:01:0c:fa:32:38:a5:1e:f9:d2:f9:76:fd:9f:57:b9:69:
37:b0:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:03:31 2025 by rpki-client