This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft
File: ChYfF3ryrIp11Br-R61A0quRh8o.mft (raw, json)
Hash identifier: Sxfc/DDVBo0mBnriNyFofN7YKoRa9i6JHdrgjOJ+8Fk=
Subject key identifier: 50:06:78:CE:C4:DB:12:7C:EF:76:A8:5A:43:7D:50:53:C9:15:60:85
Authority key identifier: 0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA
Certificate issuer: /CN=A918D0AA/serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA
Certificate serial: 0244
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft
Manifest number: 023C
Signing time: Sun 07 Dec 2025 00:32:59 +0000
Manifest this update: Sun 07 Dec 2025 00:32:59 +0000
Manifest next update: Sun 14 Dec 2025 00:32:59 +0000
Files and hashes: 1: ChYfF3ryrIp11Br-R61A0quRh8o.crl (hash: c+TrJdJ3ocGMebqVdBf/miYF2o4+4Mlap3SALzMlx/M=)
2: 7817D2327A5C11EDA0156D76C4F9AE02.roa (hash: /aLZRZnVDc3gbgHvgjjTVhimEYu2WCp9inOhdZerK9k=)
3: 1376B9341FAE11F0B3E41E84C4F9AE02.roa (hash: 046Nkak/mvU2MIy/D/sQyHF4+9Nf/OVFcgvY3OIqwCQ=)
4: 130A89761FAE11F0B3E41E84C4F9AE02.roa (hash: 7uR7mk8CLJJlZZvBz+Qm2/sDak7TWidIc0rXMu5Xnkk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl
rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580 (0x244)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D0AA, serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA
Validity
Not Before: Dec 7 00:32:59 2025 GMT
Not After : Dec 14 00:32:59 2025 GMT
Subject: CN=6934cb3b-42e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:cb:33:d5:ac:d0:3f:48:a6:bb:4d:fd:cb:
0f:8c:42:32:d8:b9:5e:af:21:5e:4e:33:55:c3:6d:
83:2d:a8:39:96:ea:db:83:b2:30:44:f7:4b:7b:6c:
46:c6:3a:ce:b1:aa:04:fa:7a:56:15:c0:dd:97:a6:
3c:f7:67:6e:bc:27:a3:72:18:0f:42:1b:89:2b:c9:
ee:ca:03:55:c4:ec:c6:3b:eb:ca:e8:2c:11:ae:a4:
e8:68:f3:8e:bb:87:96:e3:0c:e4:31:8b:e8:46:73:
17:5b:66:83:f3:2b:7c:f8:da:2d:38:86:1d:a9:9b:
21:52:b4:de:e9:8e:98:df:bf:a7:38:09:b3:b1:9e:
53:e6:b9:fa:1d:20:00:2b:df:47:b2:31:24:13:e1:
ca:33:51:79:c6:c2:12:fc:eb:9e:59:98:ec:c1:9f:
c2:59:00:c8:d8:53:2c:2f:11:29:3d:00:2c:80:f9:
72:4f:7d:5d:a2:17:b8:59:f0:35:e7:fe:2a:75:48:
d9:5a:67:9a:6c:c2:d6:7a:d0:ae:4b:5e:c2:be:f5:
c6:c6:bd:60:0a:b5:72:5d:26:31:32:61:44:49:44:
92:5b:a7:2d:9c:db:e3:43:a1:f8:f0:4b:6e:24:3f:
07:c8:b1:10:3d:c4:4f:93:44:ba:2c:b8:4a:d5:ac:
b8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:78:CE:C4:DB:12:7C:EF:76:A8:5A:43:7D:50:53:C9:15:60:85
X509v3 Authority Key Identifier:
keyid:0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0e:da:8c:3e:b5:a9:c0:83:73:f1:f2:35:50:41:46:c3:47:
99:0a:a7:28:3d:ab:05:82:c0:fc:b5:02:1c:97:2d:58:44:95:
53:a0:09:ac:96:95:65:97:7d:6f:ee:fa:16:f0:96:97:2d:de:
8b:54:63:ec:78:b2:52:97:bd:37:17:66:b9:54:30:cf:b0:8c:
8a:f8:5f:fc:bc:c8:6e:97:ae:8a:4d:df:b0:e3:d8:43:af:b7:
58:a2:3d:2e:76:8a:a3:f9:0e:f4:d6:fc:36:a2:2e:ce:32:53:
da:f0:79:c2:98:92:62:6c:78:27:a8:08:fe:c6:6a:fe:ba:df:
00:11:9b:76:f6:52:b5:54:3f:d2:c7:e8:61:50:00:4c:79:84:
c9:9e:7b:ae:7e:c6:3a:2f:ef:41:cd:48:6f:88:ee:97:7b:fe:
78:a5:40:70:84:a4:89:c9:bc:4e:69:12:eb:61:6b:6f:ee:97:
c0:6d:70:a3:77:43:bb:82:61:0d:8b:f0:29:83:1d:ea:cd:f0:
d7:f8:3c:f3:cd:35:bb:30:56:99:58:72:16:32:48:0c:5d:fe:
cd:16:38:2c:40:51:14:2a:e8:bc:15:d7:39:05:8b:60:f5:e8:
d6:5a:8a:08:7d:01:92:7d:0d:91:9d:da:be:c3:a0:3a:a9:fb:
43:15:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:46:16 2025 by rpki-client