This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File: 1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier: 0NlIZdi3AZIgiBMS2nCnm8nO77hmhJWfKsH0RIvqyA0=
Subject key identifier: D0:49:BB:93:A1:CC:FD:8A:1E:5A:89:E2:B0:A8:0E:9F:C4:22:8E:50
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial: 30B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number: 3081
Signing time: Sat 06 Dec 2025 15:16:08 +0000
Manifest this update: Sat 06 Dec 2025 15:16:07 +0000
Manifest next update: Sat 13 Dec 2025 15:16:07 +0000
Files and hashes: 1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: nyCVLDH1uLf3nHP3yHx311ksFrZXLNPn25a/P/A6zpY=)
2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 04Ktf7aHmtk6w5MhGrvObQ/LJOb4uBLGbSar+Thl/fM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12466 (0x30b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Validity
Not Before: Dec 6 15:16:07 2025 GMT
Not After : Dec 13 15:16:07 2025 GMT
Subject: CN=693448b7-5368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:ec:d8:74:91:da:ad:ef:b6:d7:4d:45:b1:
ca:9a:98:5f:df:21:cf:f5:8b:37:d3:12:99:f5:87:
45:1a:ec:87:a4:03:dd:65:67:4e:cc:aa:e1:2e:15:
46:f8:2e:19:86:90:58:bd:66:9b:93:86:f4:15:74:
56:cd:2b:a4:3e:99:0a:18:8c:96:ba:98:39:4a:d4:
8a:67:dc:ba:8f:47:2e:07:6a:96:5d:aa:11:10:ce:
47:dc:16:aa:f9:b5:59:38:65:8b:f4:1b:12:35:0e:
0a:d8:c7:92:4c:43:5d:66:a1:ab:69:a3:b9:28:5b:
da:57:80:f3:af:60:a6:78:e3:de:f6:ba:05:7f:c3:
5b:8b:d3:09:db:01:d3:1d:f1:e5:bc:5b:18:19:7a:
e4:95:00:6c:bf:1b:1a:38:3a:84:6f:23:af:67:29:
d5:59:9d:a4:c5:cf:af:56:c8:cc:d6:9f:79:11:1c:
0e:7b:b8:67:53:a3:e5:6a:e2:1e:6b:45:ee:77:e7:
e7:46:d7:49:13:87:d0:ef:4e:4a:9d:df:f5:30:07:
f6:8c:d9:c5:99:f4:3c:a9:3b:6b:53:a2:90:9f:a4:
be:fa:c3:8b:f9:20:bb:15:9b:a1:e0:1d:1b:b1:f0:
57:05:f8:70:a7:89:68:8e:2a:7a:53:44:c5:aa:7d:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:49:BB:93:A1:CC:FD:8A:1E:5A:89:E2:B0:A8:0E:9F:C4:22:8E:50
X509v3 Authority Key Identifier:
keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:0e:de:12:ef:47:61:cb:f5:3e:eb:75:1d:37:9d:f0:0b:f5:
27:b7:30:35:79:13:91:de:d4:df:0b:62:e1:c6:10:c5:90:d9:
b1:8f:61:64:d2:a6:f1:51:1a:63:4f:05:d6:05:b6:0f:76:0f:
46:2a:14:84:40:60:f6:0d:25:30:6d:d2:85:9c:46:b7:b2:c4:
8a:b5:37:2d:aa:3e:f6:02:16:8c:64:9c:a8:fc:71:9c:f4:6a:
0f:b0:d1:7d:ca:32:64:6b:eb:0f:43:16:dc:a9:a6:5c:4b:1a:
9e:5e:63:4b:2b:3f:db:d6:30:80:50:3e:f9:c3:01:b1:14:a5:
92:cd:47:81:83:5c:47:4c:49:de:2a:5f:3d:07:9c:0d:b8:03:
fc:49:b0:13:96:6d:a3:68:f7:25:c4:d0:64:87:ca:e3:4d:43:
8d:6a:e7:79:8d:37:b2:9b:41:f0:15:8d:87:a6:3d:bd:73:6b:
a6:6c:1e:c8:b6:c0:cc:88:93:27:74:af:a1:e2:ff:73:3d:44:
36:c2:21:c7:25:fa:c0:40:e0:cb:02:ab:ef:90:00:d1:6c:ea:
6f:77:09:45:34:f5:6b:03:e0:e3:29:00:1b:36:e1:99:23:64:
ef:f4:e6:1e:75:f0:c7:7f:f0:0b:23:07:04:18:74:75:df:51:
3b:d8:36:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:00:39 2025 by rpki-client