This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json)
Hash identifier: 6RAA6eMwjSOQa4GVPVi6k3dzhzxWOXtgUeXIGxGLJQc=
Subject key identifier: 53:84:03:84:24:26:24:33:E4:16:5A:72:44:40:79:3B:8E:41:E3:67
Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
Manifest number: 01FE
Signing time: Fri 05 Dec 2025 00:43:13 +0000
Manifest this update: Fri 05 Dec 2025 00:43:12 +0000
Manifest next update: Fri 12 Dec 2025 00:43:12 +0000
Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: G8vf4HAVk/Pym9QMTTiclWJSEMdabDrOCZFxGp0mLgM=)
2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:43:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Validity
Not Before: Dec 5 00:43:12 2025 GMT
Not After : Dec 12 00:43:12 2025 GMT
Subject: CN=69322aa1-3332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:ce:64:8e:6b:37:ac:1b:ce:84:a6:fb:11:
ab:32:b2:a6:34:c9:46:b8:72:81:7b:1c:8e:ab:7a:
a3:a1:4c:d3:9f:27:b1:f0:86:54:f5:f5:51:ba:36:
2e:da:4a:24:4d:91:c7:89:a7:de:43:dc:7a:0d:f5:
00:98:56:4a:37:7d:49:49:2d:b5:34:97:2f:8a:2d:
ad:bc:e8:9e:53:07:1e:7b:cc:36:a2:6e:8b:ab:06:
ca:3a:39:d6:15:11:8e:cb:58:c6:88:15:30:ce:28:
6f:a8:6a:2f:56:25:97:8c:f1:24:98:bb:cc:1f:1a:
00:94:69:96:06:6a:e2:1d:45:d4:bb:5e:b6:a2:39:
de:81:8a:79:24:aa:72:81:83:ae:93:97:c1:f1:ba:
96:46:19:24:ec:3d:e9:ec:6e:81:19:c5:49:38:6c:
ca:c5:cf:66:9a:48:d5:a3:dc:73:2f:43:6b:09:c6:
24:e8:6c:33:1d:7c:0d:2d:ab:d0:6b:76:d3:b6:fd:
de:e4:73:be:f7:fb:6b:c6:75:fa:2f:00:30:47:be:
7e:5e:a5:9e:e4:0f:b9:13:ae:9f:65:a9:d2:4b:21:
52:b5:1e:b1:5a:d2:2a:4d:20:23:04:bd:6d:0f:d3:
17:45:c9:4e:b7:f9:3a:0e:25:af:70:a8:11:eb:c6:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:84:03:84:24:26:24:33:E4:16:5A:72:44:40:79:3B:8E:41:E3:67
X509v3 Authority Key Identifier:
keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:16:fb:dd:f2:bb:98:fa:61:97:67:7f:a6:e4:cf:16:0c:ca:
0d:2d:fc:f5:18:4c:dd:d9:4e:ec:bf:5d:38:74:4d:5f:3b:d0:
b2:93:6a:d9:df:d4:d3:40:b2:1a:19:48:c8:e9:11:cd:36:7c:
ef:73:50:c0:da:9c:c3:e7:e3:d1:52:3a:c4:8f:3e:72:ad:2e:
f1:31:5c:a3:a0:bc:af:25:c8:50:77:50:6e:c7:b4:59:23:3f:
88:38:c5:ee:8b:b8:70:53:84:5b:6b:17:fa:1e:04:b6:d4:21:
ae:3d:48:96:ee:72:ad:dc:8c:de:01:2c:1f:a5:8c:84:e8:ce:
7b:ea:d8:31:a6:cd:12:4e:da:2b:45:44:86:c3:10:ba:44:d1:
56:da:6f:4f:4c:3c:52:96:c7:6d:5b:ea:9c:9b:4a:10:76:c3:
3b:68:47:d8:a3:31:ea:b4:d6:72:f0:f2:a1:d4:81:07:38:e3:
0f:20:4c:af:07:fe:c2:7f:39:4e:eb:5d:f1:02:07:f6:17:a3:
8a:fa:55:d5:0a:c6:bf:9c:c0:97:71:24:17:55:76:e8:e6:42:
b9:80:1b:82:92:29:84:82:7f:e3:03:75:8d:5c:76:9c:f7:e8:
36:2b:0d:47:fd:fb:6b:9e:4e:d8:c2:af:af:de:be:a6:6b:e8:
b1:82:c9:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4
MkYxNDVBNEEwHhcNMjUxMjA1MDA0MzEyWhcNMjUxMjEyMDA0MzEyWjAYMRYwFAYD
VQQDEw02OTMyMmFhMS0zMzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqtXOZI5rN6wbzoSm+xGrMrKmNMlGuHKBexyOq3qjoUzTnyex8IZU9fVRujYu
2kokTZHHiafeQ9x6DfUAmFZKN31JSS21NJcvii2tvOieUwcee8w2om6LqwbKOjnW
FRGOy1jGiBUwzihvqGovViWXjPEkmLvMHxoAlGmWBmriHUXUu162ojnegYp5JKpy
gYOuk5fB8bqWRhkk7D3p7G6BGcVJOGzKxc9mmkjVo9xzL0NrCcYk6GwzHXwNLavQ
a3bTtv3e5HO+9/trxnX6LwAwR75+XqWe5A+5E66fZanSSyFStR6xWtIqTSAjBL1t
D9MXRclOt/k6DiWvcKgR68Y9wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOEA4Qk
JiQz5BZackRAeTuOQeNnMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy
M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX
a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4
ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVFvvd8ruY+mGXZ3+m5M8WDMoNLfz1GEzd2U7sv104dE1fO9Cyk2rZ
39TTQLIaGUjI6RHNNnzvc1DA2pzD5+PRUjrEjz5yrS7xMVyjoLyvJchQd1Bux7RZ
Iz+IOMXui7hwU4Rbaxf6HgS21CGuPUiW7nKt3IzeASwfpYyE6M576tgxps0STtor
RUSGwxC6RNFW2m9PTDxSlsdtW+qcm0oQdsM7aEfYozHqtNZy8PKh1IEHOOMPIEyv
B/7CfzlO613xAgf2F6OK+lXVCsa/nMCXcSQXVXbo5kK5gBuCkimEgn/jA3WNXHac
9+g2Kw1H/ftrnk7Ywq+v3r6ma+ixgskT
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:05 2025 by rpki-client