This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier: 2vB98e4i1LJ0nbOHqStB8tvHD/JFa+hyBdB8rLWBlbM=
Subject key identifier: 8E:BF:01:AB:04:E9:D4:58:09:EB:7E:FC:1D:6A:18:34:E1:32:33:69
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial: 0317
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number: 0308
Signing time: Thu 04 Dec 2025 23:34:12 +0000
Manifest this update: Thu 04 Dec 2025 23:34:12 +0000
Manifest next update: Thu 11 Dec 2025 23:34:12 +0000
Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: OpVOK5JYnwJZ+oT68rCxhlwpin9tVkCPKLufnAWGtJE=)
2: C79B240C249811EFABD23253C4F9AE02.roa (hash: 82ItOlvihDjqVoWpSyFuHxJCD90xjXFw0eTtjvUUFXI=)
3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: xP/jJhS+dRDMFII7/oN+e6tmZGRsaM2PF5rzA01lyJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791 (0x317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
Validity
Not Before: Dec 4 23:34:12 2025 GMT
Not After : Dec 11 23:34:12 2025 GMT
Subject: CN=69321a74-6029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:d9:c8:52:e6:59:9e:34:9e:d7:f0:db:e8:
c8:41:dd:a1:3c:07:e3:eb:15:17:45:0b:77:1c:73:
2c:00:f3:1d:96:1b:06:1e:d5:c1:5a:73:0a:cb:9f:
f8:d8:9e:5a:f7:96:ce:7b:b1:6b:90:bb:0e:ba:0d:
b8:f5:b0:8d:43:33:b9:bf:5c:2f:b3:93:76:68:86:
cc:8c:2c:81:fe:6c:6c:a4:c4:08:b8:7b:57:0a:cd:
77:e7:da:0a:32:c1:b4:00:d0:ea:db:84:c2:f1:ec:
a2:e8:2f:00:8b:0c:32:8a:46:23:ff:fd:cb:ea:a8:
53:4d:47:af:71:6d:5d:8a:57:4f:f7:22:4d:01:3b:
75:2f:17:82:39:ec:32:5f:73:0c:e1:a8:c4:e0:35:
a2:75:ea:7d:87:70:04:de:55:e0:09:bd:88:51:c1:
80:be:7c:9e:eb:5b:ec:14:a3:56:bb:2e:61:10:f0:
21:bb:06:4d:bf:e6:7a:00:37:b2:d6:b0:7e:86:55:
09:48:b8:4b:ac:50:92:73:be:be:a0:82:33:3b:e0:
49:17:66:65:29:e9:85:d5:e3:03:f2:51:2c:3d:6b:
bd:3e:9d:64:1a:43:8d:7c:c8:5f:8b:77:86:14:7a:
ca:24:08:2e:7a:80:59:12:a7:c3:ab:22:71:ed:c2:
d3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:01:AB:04:E9:D4:58:09:EB:7E:FC:1D:6A:18:34:E1:32:33:69
X509v3 Authority Key Identifier:
keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:60:74:eb:ec:95:94:c2:a2:af:a9:8d:b9:24:1b:be:a6:b0:
b6:d0:15:64:06:77:07:2f:ee:7e:ca:e0:54:9a:6b:4a:7a:4d:
4b:d3:25:56:ad:c8:95:81:0e:11:98:cb:67:50:eb:a0:71:b3:
42:20:a5:d4:3f:d6:34:ad:32:20:a6:5f:2c:68:97:14:e5:4e:
94:98:69:51:17:e8:9e:be:fe:b4:ce:42:02:12:48:61:80:f9:
d9:cd:c7:e7:b5:09:16:4f:14:22:2e:8e:90:35:96:6e:6d:97:
20:24:29:19:0a:ce:0f:e9:71:06:e5:39:1f:9b:62:1c:54:ad:
c8:0d:aa:66:50:45:d4:5e:88:28:42:ce:ca:44:10:41:03:7a:
47:8e:d2:64:0c:dd:ff:13:7d:fd:27:15:bb:55:a9:0c:c7:cd:
39:88:25:58:47:9a:cf:d4:1c:12:09:e5:ae:56:33:32:d5:75:
5c:3c:01:bc:5f:e2:67:2d:7e:6a:cc:46:03:80:ec:f0:aa:22:
cf:82:3b:bb:f3:8e:74:9e:f4:38:7a:ff:0c:be:67:21:11:4f:
e1:90:7b:35:64:96:cd:61:48:68:f3:0f:3c:ad:fc:27:99:03:
82:37:fc:47:f6:55:d2:9a:cb:99:52:67:40:d1:2a:16:0d:c6:
d7:82:1c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:52 2025 by rpki-client