This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
File: pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json)
Hash identifier: T+e9fHkeMPCKLX7vzDN5s2QT4oyn9WG7lODz/UeToGk=
Subject key identifier: ED:54:19:97:2B:C2:25:57:FD:84:43:5D:4C:4D:9E:72:E1:4E:39:88
Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
Certificate issuer: /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Certificate serial: 019B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
Manifest number: 0198
Signing time: Mon 08 Dec 2025 18:31:48 +0000
Manifest this update: Mon 08 Dec 2025 18:31:47 +0000
Manifest next update: Mon 15 Dec 2025 18:31:47 +0000
Files and hashes: 1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: 85xAp10oe9uKu/Gk0wJ4FrsfXCjt8s94cVEBXtmav7s=)
2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: 8l049HuRfYTZKVjmyHEuH/syy1lOm3iSGmRbwY8PSnM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 15 Dec 2025 18:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA
Validity
Not Before: Dec 8 18:31:47 2025 GMT
Not After : Dec 15 18:31:47 2025 GMT
Subject: CN=69371993-4350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:b1:5a:dc:ce:aa:f9:ac:24:2a:1a:2e:90:
57:ba:a1:5f:8f:0f:3a:ec:a7:64:ca:18:ab:4e:18:
38:b7:71:ba:d5:49:b0:95:ac:8e:9f:68:8d:21:d6:
05:a5:cc:b0:8a:e3:59:e2:24:05:e4:5b:aa:f2:ad:
9e:75:59:b6:5d:a1:b6:0e:4c:a2:b2:62:cc:eb:0a:
58:26:a9:2f:be:04:fa:61:f1:33:f6:19:59:b2:47:
a0:06:3a:8d:5c:a7:b2:95:f5:8b:88:ff:65:c5:cb:
18:6c:29:c3:c9:95:89:95:72:0f:c7:e0:47:ed:81:
a7:f2:2c:04:53:87:e0:66:8b:dd:be:b8:45:44:50:
4c:1a:66:44:0d:a3:eb:36:6a:b6:d2:a6:03:15:3e:
b5:02:5a:68:03:56:f2:5c:7f:76:55:76:63:38:61:
c0:3c:4e:03:6f:d3:fe:2a:16:66:83:49:14:85:4f:
e8:9a:cf:dd:73:67:da:b6:a2:e7:f2:58:d4:3e:a7:
59:81:85:04:74:37:61:f1:69:8b:78:44:33:d6:b2:
42:86:78:68:90:e4:1b:ed:85:03:07:2f:98:a6:31:
a1:12:c7:e1:a6:dc:32:de:f9:19:2f:ad:c6:1d:bc:
00:15:92:ad:71:1d:73:e1:82:70:51:51:1c:81:db:
db:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:19:97:2B:C2:25:57:FD:84:43:5D:4C:4D:9E:72:E1:4E:39:88
X509v3 Authority Key Identifier:
keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:24:e9:ba:a8:33:73:5e:24:01:13:df:b2:f7:8d:e2:a7:16:
21:90:69:82:d1:e6:3b:f0:66:f2:e4:dc:e0:ab:3a:41:d7:2d:
1a:b1:07:1c:d2:0e:93:6c:00:08:cb:e8:4b:28:ce:2a:1c:75:
78:3d:d5:92:39:5e:0e:1f:cc:9d:ce:84:9e:04:fa:97:af:1a:
db:eb:1d:82:9a:14:70:24:a1:24:64:05:74:37:b0:16:d5:d8:
99:2c:ae:58:02:f7:04:5a:04:14:70:42:44:fd:7c:69:77:68:
0e:f8:89:1f:4f:6b:c8:ed:36:50:bc:ee:c1:08:a0:41:f5:0e:
c4:da:fa:04:71:3a:dd:64:67:5a:9b:59:e1:ac:29:d5:be:e4:
4e:d3:99:d9:e4:b9:01:b7:b6:fe:1a:ff:40:e4:ce:bf:7a:b3:
59:41:46:7a:84:1f:72:91:38:6a:69:13:59:67:4e:57:d3:65:
71:ed:54:9e:34:fd:c2:ef:fd:f9:4d:65:76:2e:a9:91:14:d1:
98:cc:78:c7:cf:e9:98:98:f9:d3:36:07:47:af:9f:9d:38:f1:
98:ad:98:6a:f0:70:bf:b2:74:84:b9:b8:bb:b9:ca:15:35:07:
4b:9a:ab:48:a7:eb:5e:dc:de:ff:93:bc:a3:00:d6:f6:10:6c:
77:66:b8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 17:23:03 2025 by rpki-client