This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier: 6msvMERq6JZ4cdgJ4/8LjQtYn6ke+JBLIA6W7pmKosQ=
Subject key identifier: BC:8F:72:CD:05:DF:73:87:06:91:5D:6B:59:7A:B8:93:76:48:5B:5C
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: 01E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number: 01C6
Signing time: Fri 05 Dec 2025 01:30:20 +0000
Manifest this update: Fri 05 Dec 2025 01:30:20 +0000
Manifest next update: Fri 12 Dec 2025 01:30:20 +0000
Files and hashes: 1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: ZjXEz8E4SvQ+io89/YUwpCJ/0J/zPuXT57ZZJNj2cWQ=)
2: 06856B04A5EA11F095618A7CC4F9AE02.roa (hash: TuFTA9EywCFfz3mauYPbCJRfabXsCP/+IjwcQJDFIS8=)
3: DFDB8AC8C20F11F0B5737644C4F9AE02.roa (hash: HsRRhiuv69FpVu34yku721+K50eXNGh78oO+8hVYI9M=)
4: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: iRxA1ggG5Gg6gMWZuZ8L1lPJN3fft+M4sC43triwT/s=)
5: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: tbP1wHLZXWdBy80smo7nwsfBeTkYD2DmwbznFImHmJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 482 (0x1e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Validity
Not Before: Dec 5 01:30:20 2025 GMT
Not After : Dec 12 01:30:20 2025 GMT
Subject: CN=693235ac-3b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:3d:09:22:8b:47:7e:fd:02:a2:07:b6:2f:
7c:b2:f4:ae:25:b8:f5:4a:08:bc:91:eb:81:ee:31:
78:f5:2a:54:37:d8:4d:a2:82:99:91:6f:ab:ba:43:
31:7d:47:70:5a:fb:e7:70:2e:e5:e1:d4:58:56:fe:
05:fd:38:d0:1d:46:c7:2b:bb:d3:42:11:2c:5c:4c:
57:79:08:18:15:63:24:1a:89:fa:82:43:43:51:05:
f5:cd:f3:9b:b8:c6:00:45:bf:7e:eb:0c:45:7a:14:
a9:a2:5f:b0:e8:68:7f:5d:ce:38:0f:48:8a:18:f3:
c1:e4:2b:db:71:e5:98:7d:cf:5e:b3:6e:ca:ad:5b:
90:0f:bb:4b:e6:ea:90:b5:2a:4c:4b:c7:50:43:48:
d4:61:4e:fd:59:50:9b:af:80:84:c9:ab:57:5a:27:
52:e5:67:37:10:cb:7c:82:04:3d:25:43:4c:c8:87:
d6:b3:41:d4:42:c2:76:04:4d:24:96:5c:90:32:ec:
f0:57:56:53:f4:f6:a6:7f:41:6e:c5:5e:87:c5:93:
29:00:76:5e:20:1a:fa:82:80:26:55:ee:ad:7a:3b:
ce:fd:c3:32:e9:6c:4c:df:2e:63:c6:a1:b1:bb:79:
9f:e1:2d:55:23:47:75:89:cd:43:d7:74:6a:12:bd:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8F:72:CD:05:DF:73:87:06:91:5D:6B:59:7A:B8:93:76:48:5B:5C
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:92:03:82:c0:af:d4:a3:f2:a8:11:97:78:f2:fc:10:dd:91:
8e:ac:1f:45:00:6d:a8:76:93:36:57:97:4d:45:72:47:13:fb:
34:be:37:f4:1f:67:27:dd:55:17:be:fb:78:5d:df:0d:77:6c:
b5:c2:63:97:86:33:1b:12:a0:49:d7:a3:ad:28:85:70:d9:1d:
49:a5:96:e9:a9:7d:3d:5d:14:00:52:d7:ee:b7:28:34:89:04:
eb:cf:00:22:58:6f:e1:9d:db:fd:8f:c4:81:6c:fb:23:8a:86:
65:b2:91:6f:c1:0a:e6:b3:f3:a2:f5:b5:0a:cb:59:a7:f1:86:
89:67:37:d7:39:10:47:b2:a1:da:fb:2a:5a:ee:44:c9:c1:6f:
ce:4e:9e:f1:c0:f1:9f:2a:fe:a5:1c:7f:5d:8b:19:51:db:02:
bc:5b:8e:31:ed:5e:02:ca:8f:d3:b7:06:72:d0:4d:5c:5c:08:
82:3a:bf:ff:c4:5b:f3:eb:42:48:ea:03:78:94:e5:e5:2f:35:
5c:5a:05:85:2d:63:4e:0f:26:19:3a:16:3c:55:34:3e:4b:52:
6b:d6:bc:15:55:95:1d:fe:fe:77:e5:58:25:e2:c0:50:3b:37:
ba:e0:a0:05:62:3e:84:b8:1c:5e:b0:6b:66:c1:ab:90:01:a8:
f4:6f:2f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:42:38 2025 by rpki-client