This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
File: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft (raw, json)
Hash identifier: FLLh4jQjYFFRYp3Vl6OkZs4INRnuBs+6d+jGIFCah/0=
Subject key identifier: 5A:A4:EE:19:4C:A9:E9:32:57:85:FB:EA:5E:44:19:1D:82:BF:3D:E2
Authority key identifier: 7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
Certificate issuer: /CN=A918CC02/serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Certificate serial: BA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
Manifest number: B8
Signing time: Fri 05 Dec 2025 04:03:06 +0000
Manifest this update: Fri 05 Dec 2025 04:03:05 +0000
Manifest next update: Fri 12 Dec 2025 04:03:05 +0000
Files and hashes: 1: fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl (hash: 6B1nCwgzz26R8PUffbuegkNeTa+4+XHftWrtigHPZpw=)
2: AF9A0636B86B11EFA561215AC4F9AE02.roa (hash: IQuVhRxEVEVGhjHjWm/5ZT8FALp9LUYdzNWsXFb85sc=)
3: 34B9DBFAC5C011EF88F56A0AC4F9AE02.roa (hash: Q0xEzY7OClm7DHfEFVGlhio77iseRkYBQy+gJxQGWpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CC02, serialNumber=7F067A22A4A9E096FD86A6BA355A59249067D80C
Validity
Not Before: Dec 5 04:03:05 2025 GMT
Not After : Dec 12 04:03:05 2025 GMT
Subject: CN=6932597a-02d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:a1:9e:96:f3:5c:df:fd:c9:e6:f5:6e:5b:
bd:0c:65:e0:7d:95:62:b1:53:d0:7e:82:21:17:80:
21:e0:ba:3e:8f:e1:51:ca:67:1e:96:5d:36:bc:d1:
5e:11:89:40:2d:b1:1a:80:9b:84:e9:87:8c:72:a9:
b4:ca:8b:77:be:94:ae:80:b6:0b:d2:28:17:48:c3:
f8:3f:9e:0c:f9:6e:d1:98:fb:6b:fd:f6:92:f7:7f:
f7:63:37:5c:1e:c0:70:88:f0:54:a2:19:12:bf:0a:
61:bc:28:9a:04:bd:5a:d0:dc:11:b3:cb:73:d2:c7:
88:27:1e:4b:7e:10:df:31:5b:62:9d:64:9c:84:24:
ee:13:1f:e3:3d:fa:92:e5:ca:6e:43:37:75:6a:bf:
7d:90:e4:68:06:3c:b8:ee:03:b8:8a:85:26:87:9f:
45:09:c7:22:b5:b5:15:57:9c:d9:bf:2d:3c:86:7c:
15:61:17:e7:88:36:5d:78:07:64:e5:a0:5e:b3:45:
e7:ea:36:cb:52:29:f4:4e:8c:a8:6d:b4:f4:29:35:
1c:73:c4:c2:65:df:6d:87:f9:0b:d4:20:3f:2e:6e:
90:4a:04:f4:e4:93:af:12:aa:7d:35:88:e9:9e:a8:
d0:63:db:98:12:38:27:b9:a3:f1:58:80:cf:8b:b0:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A4:EE:19:4C:A9:E9:32:57:85:FB:EA:5E:44:19:1D:82:BF:3D:E2
X509v3 Authority Key Identifier:
keyid:7F:06:7A:22:A4:A9:E0:96:FD:86:A6:BA:35:5A:59:24:90:67:D8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/680C6246B86B11EF9A6A5058C4F9AE02/fwZ6IqSp4Jb9hqa6NVpZJJBn2Aw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6d:0b:03:81:89:7d:ca:0a:a8:56:64:2c:6c:08:e3:33:a3:
30:36:83:fc:b2:38:7d:e0:be:a3:a7:50:fc:d3:fb:7d:22:8c:
d0:82:c3:09:1a:6b:e8:05:b2:ee:51:93:e9:f7:48:98:46:69:
7b:48:4f:c2:02:57:89:f0:66:b9:9e:43:e1:b1:7c:3a:34:df:
bf:87:2e:9b:5d:cf:87:ab:c5:f7:b8:7c:08:8b:62:77:9a:39:
56:f7:b2:1f:84:ce:36:07:aa:ae:ee:51:4d:6c:9a:50:24:5a:
8c:04:3f:cd:94:b1:1c:0e:bf:67:b0:1d:c7:9b:cc:ad:f9:85:
d5:d0:ef:df:31:cb:23:9f:64:03:0a:ac:22:c5:44:e4:5d:4e:
07:9d:83:90:a5:1c:da:c9:5c:60:63:e1:4b:38:54:74:3f:2b:
a6:46:fd:0c:0c:bd:9f:65:50:c3:c9:e5:94:a1:8d:b0:d5:6d:
54:bf:f8:39:d5:8d:98:e3:87:20:15:78:60:49:68:7d:95:46:
03:4e:be:b6:5e:c7:59:3d:4e:0c:cf:0a:ed:21:97:4a:4e:36:
8f:1d:09:bf:83:df:47:5d:50:47:80:6a:f9:f7:80:ce:2f:ca:
ed:17:ca:bb:34:41:25:0c:0f:f4:a7:e5:9d:b4:ad:c9:c5:7f:
f9:48:52:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:41:53 2025 by rpki-client