This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
File: et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft (raw, json)
Hash identifier: LgC+qXt9DPt5DNLIFZhm0/8DkXB+ZFW2/3050pvLQ/w=
Subject key identifier: 7B:8C:76:E7:54:BE:E4:B9:71:98:19:DB:E6:00:DE:EA:EF:84:14:3D
Authority key identifier: 7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1
Certificate issuer: /CN=A918E1CC/serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
Certificate serial: 071B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
Manifest number: 0714
Signing time: Thu 04 Dec 2025 20:45:59 +0000
Manifest this update: Thu 04 Dec 2025 20:45:59 +0000
Manifest next update: Thu 11 Dec 2025 20:45:59 +0000
Files and hashes: 1: et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl (hash: OiyI9YiZQH0pujkYplAUvFBKIozHaHLVzjDaL50mTvk=)
2: 210E6234639E11EB81185C31C4F9AE02.roa (hash: lpW0NjdmrOMG9GEGghvuTfgytfrpOcK9mbpw3h0K59c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl
rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1819 (0x71b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E1CC, serialNumber=7ADE40935A007E0B5BE1761405064EC943AFE0C1
Validity
Not Before: Dec 4 20:45:59 2025 GMT
Not After : Dec 11 20:45:59 2025 GMT
Subject: CN=6931f307-5954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b2:0b:fe:fc:63:51:77:e4:38:b2:bf:19:a9:
f9:15:71:64:98:9e:b3:a6:41:7b:84:49:7b:c6:d7:
b3:89:c4:63:aa:d8:c8:40:68:e1:ec:3d:a3:2f:a1:
e0:cb:c4:c6:f1:79:66:c3:74:ea:64:36:61:d4:6c:
80:b5:19:35:e1:25:c6:23:5b:e3:65:72:1f:19:fd:
c8:d3:4d:cf:f1:66:b2:f8:b5:41:b5:8c:01:2d:08:
d1:15:5c:bb:da:55:bf:a7:41:e6:e9:2b:5b:43:4e:
00:b9:4b:75:4f:34:e8:7e:c3:47:1e:8d:02:21:2e:
05:3b:29:fb:90:1e:78:d2:87:4e:43:8f:a0:e8:41:
89:61:58:3b:6c:d7:7e:67:8d:a4:23:7e:66:9f:b2:
bf:63:6c:d5:73:ad:10:84:aa:dd:19:ff:9c:15:08:
0d:48:1e:c5:99:7a:ec:b1:a8:5c:60:3c:d7:03:2a:
a2:9c:47:81:02:79:bf:af:4a:a5:c0:79:9a:2a:66:
57:d9:af:20:39:3a:90:62:ac:09:e1:c4:21:c8:5c:
d0:5d:29:24:12:24:b6:55:43:a8:a5:da:07:6e:8a:
5e:ce:9c:0d:61:71:82:bb:f4:92:20:8b:c5:3f:c5:
65:c2:31:91:84:e7:23:49:74:ab:41:53:e3:20:25:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8C:76:E7:54:BE:E4:B9:71:98:19:DB:E6:00:DE:EA:EF:84:14:3D
X509v3 Authority Key Identifier:
keyid:7A:DE:40:93:5A:00:7E:0B:5B:E1:76:14:05:06:4E:C9:43:AF:E0:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/et5Ak1oAfgtb4XYUBQZOyUOv4ME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1CC/5FEFDA8E639C11EB90B83013C4F9AE02/et5Ak1oAfgtb4XYUBQZOyUOv4ME.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:14:b7:5c:c0:23:2c:65:82:8a:ad:9a:98:c1:0e:27:c7:c5:
e7:2b:45:eb:b3:26:00:e0:02:b1:97:c7:ea:00:89:b8:36:85:
cd:13:1d:28:93:86:59:e5:5f:74:9c:51:d8:fe:c6:8b:c5:be:
cf:0e:37:01:37:3a:00:de:2b:c8:20:f1:b9:8a:77:1c:ea:d3:
24:bb:50:f7:fd:ce:57:e8:25:dd:fe:6b:34:77:46:0c:95:38:
28:8d:42:c4:18:b9:3b:18:96:93:7f:cf:ef:a1:6e:72:71:b5:
ef:33:93:4f:c7:f2:45:a2:a0:39:9e:bf:c6:fa:ab:3a:36:8f:
45:d0:05:3c:5c:40:d1:30:bb:ea:e8:c7:1b:5f:0f:ca:61:73:
9d:89:e4:ef:35:9a:e5:2d:26:f1:8f:2e:1f:5f:37:81:b8:d4:
13:bc:c1:43:c3:e4:d3:27:2c:13:91:a1:39:33:81:4d:fc:26:
2a:38:7e:4b:6c:08:bc:38:bd:e3:50:ea:f2:2e:79:9d:df:4d:
02:56:89:6f:ec:4e:32:f2:34:14:4e:28:0c:a4:03:ca:7c:cd:
8a:18:b1:3d:60:ce:38:9e:c1:04:8d:88:47:b8:85:0d:84:1d:
a4:e5:e1:14:2b:3a:5f:87:40:96:34:1a:a4:87:44:c4:8d:b3:
44:c0:11:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEUxQ0MxMTAvBgNVBAUTKDdBREU0MDkzNUEwMDdFMEI1QkUxNzYxNDA1MDY0RUM5
NDNBRkUwQzEwHhcNMjUxMjA0MjA0NTU5WhcNMjUxMjExMjA0NTU5WjAYMRYwFAYD
VQQDEw02OTMxZjMwNy01OTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9LIL/vxjUXfkOLK/Gan5FXFkmJ6zpkF7hEl7xtezicRjqtjIQGjh7D2jL6Hg
y8TG8Xlmw3TqZDZh1GyAtRk14SXGI1vjZXIfGf3I003P8Way+LVBtYwBLQjRFVy7
2lW/p0Hm6StbQ04AuUt1TzTofsNHHo0CIS4FOyn7kB540odOQ4+g6EGJYVg7bNd+
Z42kI35mn7K/Y2zVc60QhKrdGf+cFQgNSB7FmXrssahcYDzXAyqinEeBAnm/r0ql
wHmaKmZX2a8gOTqQYqwJ4cQhyFzQXSkkEiS2VUOopdoHbopezpwNYXGCu/SSIIvF
P8VlwjGRhOcjSXSrQVPjICVTawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuMdudU
vuS5cZgZ2+YA3urvhBQ9MB8GA1UdIwQYMBaAFHreQJNaAH4LW+F2FAUGTslDr+DB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTFDQy81RkVGREE4RTYz
OUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZndGI0WFlVQlFaT3lVT3Y0
TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V0NUFrMW9BZmd0YjRYWVVCUVpPeVVPdjRNRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTFDQy81RkVGREE4RTYzOUMxMUVCOTBCODMwMTNDNEY5QUUwMi9ldDVBazFvQWZn
dGI0WFlVQlFaT3lVT3Y0TUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDBFLdcwCMsZYKKrZqYwQ4nx8XnK0XrsyYA4AKxl8fqAIm4NoXNEx0o
k4ZZ5V90nFHY/saLxb7PDjcBNzoA3ivIIPG5incc6tMku1D3/c5X6CXd/ms0d0YM
lTgojULEGLk7GJaTf8/voW5ycbXvM5NPx/JFoqA5nr/G+qs6No9F0AU8XEDRMLvq
6McbXw/KYXOdieTvNZrlLSbxjy4fXzeBuNQTvMFDw+TTJywTkaE5M4FN/CYqOH5L
bAi8OL3jUOryLnmd300CVolv7E4y8jQUTigMpAPKfM2KGLE9YM44nsEEjYhHuIUN
hB2k5eEUKzpfh0CWNBqkh0TEjbNEwBH7
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:06:35 2025 by rpki-client