This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
File: 4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json)
Hash identifier: g0FKAURW6gOESuhjrk7726tLygMgdtF7GMz14XNiBd0=
Subject key identifier: AB:E5:71:4C:EA:76:12:24:E4:12:BD:2D:F3:45:E3:49:F0:27:35:18
Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
Certificate issuer: /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Certificate serial: 0218
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
Manifest number: 0212
Signing time: Fri 05 Dec 2025 00:40:52 +0000
Manifest this update: Fri 05 Dec 2025 00:40:51 +0000
Manifest next update: Fri 12 Dec 2025 00:40:51 +0000
Files and hashes: 1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: 4H2qYWj5NaBs+/lUHrIqlhwrBBuLreygUBgwfmrg3X0=)
2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: n/fmihpIZHCDL4WsFIyfm08swyisrTSxqfnG6noJQQ4=)
3: A4D24AE4C8A811F0B2500664C4F9AE02.roa (hash: 0LFTbWkvVQUDg8CWQLwjqmVzSTpNTSNnsxwRjNHTH2E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:40:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 536 (0x218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Validity
Not Before: Dec 5 00:40:51 2025 GMT
Not After : Dec 12 00:40:51 2025 GMT
Subject: CN=69322a13-dbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b0:e5:70:53:75:25:d7:be:7f:5e:46:86:c4:
e0:d0:5f:6e:22:8a:f0:46:4e:79:e5:8c:b4:3d:32:
8c:00:42:a4:c6:fd:1e:b2:98:eb:40:ad:f7:9b:c0:
fa:01:c4:80:94:ca:11:a6:ac:ac:1a:d8:fc:e9:63:
fc:3c:f4:16:a6:51:72:50:18:47:95:d2:27:65:28:
f7:a2:81:75:f5:79:17:1c:42:99:88:c7:55:e9:1e:
74:82:b0:42:06:49:0a:9a:bd:b3:a9:7e:2b:41:c1:
b8:74:35:26:52:41:6b:89:bc:d0:f5:f8:e7:ce:0a:
96:63:79:bb:c3:60:b2:b1:70:9f:6b:cc:60:c8:24:
5f:55:2e:36:90:2a:14:19:03:e7:cc:e6:74:db:2b:
e3:25:66:72:29:e4:56:3c:90:f9:2b:b0:c4:c1:2b:
5a:3b:e9:1f:12:08:d8:27:2b:d3:fe:c6:b3:7e:c7:
e8:9a:39:3c:f6:0d:47:b0:ab:3c:cd:44:f5:7e:20:
30:d2:c1:a5:e5:31:fa:6e:c5:45:36:7f:c1:bf:2a:
09:b3:21:01:aa:b2:f7:b1:70:89:ab:bc:b0:a6:74:
c0:4e:2c:f1:88:fc:ce:a0:54:f9:f9:de:1c:f0:1a:
35:ba:c8:59:09:89:f4:c0:88:30:9c:4d:dd:aa:5a:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E5:71:4C:EA:76:12:24:E4:12:BD:2D:F3:45:E3:49:F0:27:35:18
X509v3 Authority Key Identifier:
keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:df:72:1c:6c:90:d0:4c:cf:02:a0:8f:9b:09:e2:21:03:6f:
81:d5:51:55:dc:cb:ca:cb:2e:2b:bc:c9:00:12:61:17:c9:57:
2a:df:38:82:f8:09:0a:c5:44:29:1f:f3:01:94:28:73:da:db:
80:bb:b2:ba:f9:d7:c2:4c:29:8a:06:25:b2:7d:77:9b:b8:a0:
99:00:c7:05:1d:de:ab:9f:7c:b9:1a:a9:19:78:48:13:52:68:
f2:af:b8:d4:a1:e3:2f:c0:e1:47:c8:ab:25:26:23:a9:c9:27:
c5:05:85:ce:26:04:63:3f:24:d9:dd:e2:46:91:0c:14:4f:19:
da:b0:6e:dd:f2:7b:83:20:15:8c:34:1a:4e:f7:d4:13:17:50:
28:31:74:85:64:13:e4:40:75:ff:59:56:44:be:0f:ad:e7:e6:
ab:1f:1e:f1:e7:57:e0:ad:2a:52:24:23:d5:bc:b3:c6:99:0f:
fe:81:8f:39:d0:2c:e8:05:62:3a:a2:90:a2:97:57:5e:68:5a:
44:1e:dc:db:c0:fa:38:5f:65:f4:dc:34:76:31:e1:f7:8e:45:
90:42:fb:f2:8f:dc:d6:23:55:2d:87:aa:52:02:a5:9c:c7:58:
0c:fd:35:02:79:4d:60:c4:70:87:ba:4a:d8:dc:20:6f:8a:85:
c2:f9:29:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3
RTEzQUUxMDMwHhcNMjUxMjA1MDA0MDUxWhcNMjUxMjEyMDA0MDUxWjAYMRYwFAYD
VQQDEw02OTMyMmExMy1kYmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvbDlcFN1Jde+f15GhsTg0F9uIorwRk555Yy0PTKMAEKkxv0espjrQK33m8D6
AcSAlMoRpqysGtj86WP8PPQWplFyUBhHldInZSj3ooF19XkXHEKZiMdV6R50grBC
BkkKmr2zqX4rQcG4dDUmUkFribzQ9fjnzgqWY3m7w2CysXCfa8xgyCRfVS42kCoU
GQPnzOZ02yvjJWZyKeRWPJD5K7DEwStaO+kfEgjYJyvT/sazfsfomjk89g1HsKs8
zUT1fiAw0sGl5TH6bsVFNn/BvyoJsyEBqrL3sXCJq7ywpnTATizxiPzOoFT5+d4c
8Bo1ushZCYn0wIgwnE3dqlpSNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvlcUzq
dhIk5BK9LfNF40nwJzUYMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1
QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY
OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBs33IcbJDQTM8CoI+bCeIhA2+B1VFV3MvKyy4rvMkAEmEXyVcq3ziC
+AkKxUQpH/MBlChz2tuAu7K6+dfCTCmKBiWyfXebuKCZAMcFHd6rn3y5GqkZeEgT
Umjyr7jUoeMvwOFHyKslJiOpySfFBYXOJgRjPyTZ3eJGkQwUTxnasG7d8nuDIBWM
NBpO99QTF1AoMXSFZBPkQHX/WVZEvg+t5+arHx7x51fgrSpSJCPVvLPGmQ/+gY85
0CzoBWI6opCil1deaFpEHtzbwPo4X2X03DR2MeH3jkWQQvvyj9zWI1Uth6pSAqWc
x1gM/TUCeU1gxHCHukrY3CBvioXC+Sme
-----END CERTIFICATE-----
Generated at Sat Dec 6 23:04:34 2025 by rpki-client