This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
File: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft (raw, json)
Hash identifier: KEA3x5KW0feELkKAXSpgvrdXOfDejpgHh4lOpg0szow=
Subject key identifier: CD:06:D3:90:62:39:8A:22:05:77:5E:03:76:6A:43:34:EE:61:40:8D
Authority key identifier: C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01
Certificate issuer: /CN=A918CA19/serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201
Certificate serial: 0222
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
Manifest number: 021F
Signing time: Fri 05 Dec 2025 00:26:40 +0000
Manifest this update: Fri 05 Dec 2025 00:26:40 +0000
Manifest next update: Fri 12 Dec 2025 00:26:40 +0000
Files and hashes: 1: xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl (hash: Wz5Wljh9DxXv2FyJYYTbqO8DGE09nyJRw/AZPr/q3Ak=)
2: AE94F8108CDD11ED8F7B6515C4F9AE02.roa (hash: RmJtDMkcxfQ3eQrKn0Yy1kaaLYDY2h9Y7DjrNYqUSm8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl
rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 546 (0x222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CA19, serialNumber=C4F9322EEE96709E4221C6DD3CECB840384F0201
Validity
Not Before: Dec 5 00:26:40 2025 GMT
Not After : Dec 12 00:26:40 2025 GMT
Subject: CN=693226c0-ee1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:c8:5a:2f:ea:09:e1:d7:8b:60:94:72:83:
5c:fa:10:82:df:f4:99:df:33:7d:f1:0e:db:a5:dd:
ec:ab:ea:ca:df:51:f1:5d:01:81:ca:1c:8a:a3:0a:
f9:1f:b1:98:49:ea:5d:62:0e:e8:4d:c6:f7:39:59:
a0:f0:62:f3:98:9a:c7:40:32:5a:f5:c1:e0:cb:a1:
85:f5:63:23:ba:3d:64:fb:89:18:d7:08:d5:4d:c4:
9c:d7:ff:da:ef:ad:94:79:83:b9:e7:54:d3:f4:72:
90:f8:08:95:d5:a6:86:27:bc:93:cb:63:24:31:43:
c5:d1:ee:c4:e5:2f:1f:75:f5:85:c7:9f:dd:96:10:
3f:0b:b3:5b:b6:7c:df:50:7e:ef:ef:75:a5:3b:35:
13:ba:f4:4d:43:37:87:79:35:d8:7f:bc:78:98:90:
e2:11:26:eb:1d:f3:41:85:a6:43:df:b2:88:5c:80:
dc:6a:65:e5:6d:90:a8:ad:7a:dc:b4:fd:9b:8a:9f:
f6:ee:fb:74:a5:e3:d8:bc:a4:e5:55:4a:60:f5:3f:
d5:43:b5:9c:a0:f5:cb:f4:32:5e:fc:53:e6:32:d3:
45:8a:e2:f9:eb:fc:02:e1:55:c2:45:87:ad:bc:25:
38:2e:9f:a3:65:f5:9d:76:67:03:ef:4a:c9:c8:ae:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:06:D3:90:62:39:8A:22:05:77:5E:03:76:6A:43:34:EE:61:40:8D
X509v3 Authority Key Identifier:
keyid:C4:F9:32:2E:EE:96:70:9E:42:21:C6:DD:3C:EC:B8:40:38:4F:02:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CA19/F802A4248CD911ED99097D0FC4F9AE02/xPkyLu6WcJ5CIcbdPOy4QDhPAgE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:ca:ab:7f:46:2d:4b:47:a7:5f:45:9a:2f:58:a2:78:79:84:
d2:d4:cb:f4:45:90:36:e8:6d:b2:f1:18:01:b0:95:3c:21:c7:
6d:83:69:1f:5d:82:13:ac:27:0d:03:a5:e0:6d:7e:3f:1f:70:
a4:e6:a0:3c:ce:b9:1e:c8:66:ed:15:d3:d0:aa:a6:ff:0e:79:
84:df:64:52:1a:58:ae:fa:b4:2c:6f:d6:e6:fd:fc:b4:fc:df:
51:e9:fb:33:c7:71:dc:8c:c3:04:e4:62:e4:c0:cd:9c:dc:e8:
68:b4:03:ef:73:26:75:de:0c:96:e9:a4:5b:b4:2e:86:1b:64:
a6:37:77:90:57:88:f6:81:9b:20:ac:1c:d8:4a:ec:f2:37:b3:
9c:e3:52:f2:f2:d9:e3:fa:9e:5b:d5:41:7a:a7:27:6b:42:9f:
04:c9:5f:35:cf:08:2e:65:b0:4a:4e:fd:a5:24:8c:03:48:6b:
be:fa:bf:c8:c9:7a:db:6c:10:d5:f9:af:de:07:60:5d:3d:af:
48:09:e5:4a:4d:cf:01:c2:16:67:2e:18:91:7e:86:b0:eb:11:
34:36:28:e4:8d:64:a4:c5:60:f5:2e:90:0b:24:ca:0e:a5:40:
3c:a5:3a:e7:9f:9d:23:cf:ad:1e:bb:30:a3:9f:42:5e:16:38:
35:8b:6a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:22 2025 by rpki-client