This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier: 5EDb8lKOdD/XiwLe7GLUIkyaD8jkqE2cUfuXhONBx5Y=
Subject key identifier: 6A:27:3D:2A:B5:91:68:94:EF:30:01:9F:09:26:6D:E7:27:10:7A:A8
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial: 041D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number: 040D
Signing time: Thu 04 Dec 2025 22:53:55 +0000
Manifest this update: Thu 04 Dec 2025 22:53:54 +0000
Manifest next update: Thu 11 Dec 2025 22:53:54 +0000
Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: kumu31D3S2xSXNeYzRU7Lw0Xczjui9tv/QfeJRuAcc4=)
2: D9AD698C961211ECB515C474C4F9AE02.roa (hash: 0Y4nA/Aph2MoTUodk+O6k9Ce17owZ/QgLBqclqJBZ7I=)
3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: qLefOo7dvmrLJXMQn53EKJf0jFwExcla3oAdVHf5x9E=)
4: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: FkNOr2OAvQ+/2fjoQ+ttW/rGycCdH0fNwqceJH3qGXA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1053 (0x41d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Validity
Not Before: Dec 4 22:53:54 2025 GMT
Not After : Dec 11 22:53:54 2025 GMT
Subject: CN=69321103-ddea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:9f:17:bf:71:49:3d:a5:9f:44:91:35:cc:
2e:53:64:55:fc:1a:50:3b:95:a9:9d:22:51:85:f5:
aa:35:11:06:17:e6:47:fb:ba:a9:6e:23:61:07:0a:
74:fd:8e:a9:12:bb:df:77:57:8a:32:6f:4e:ec:26:
4a:59:87:5f:60:fe:47:dc:68:49:37:0e:9d:66:4f:
43:93:b2:51:c1:12:39:5b:d4:d7:85:09:a1:26:34:
4d:94:b6:cc:06:2f:8b:ee:5e:a9:61:d0:57:1a:12:
be:d2:4d:1f:72:74:1a:b0:c7:7e:31:8e:06:88:d3:
d1:11:c6:d5:c4:83:c3:3d:ad:b5:37:40:7b:36:09:
ec:a4:1a:db:33:f7:33:6a:e3:f6:6e:51:5a:5c:e8:
b9:86:b9:73:c0:6d:0d:53:9f:e0:09:ce:28:93:c5:
0a:b7:bc:0a:c7:ce:0b:41:73:11:5d:8b:09:65:33:
6f:17:df:cb:87:9a:e4:b4:c5:99:70:4f:dd:d3:0b:
d8:dd:ef:ff:e9:b5:4c:12:6e:74:43:2d:22:62:e1:
a3:bd:9a:42:ed:0f:47:e4:42:13:e8:67:3a:ca:a1:
18:21:b8:11:8d:15:92:fa:04:4d:0d:62:3c:b1:67:
63:79:55:37:33:5c:65:d2:b4:1f:02:34:29:0d:c8:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:27:3D:2A:B5:91:68:94:EF:30:01:9F:09:26:6D:E7:27:10:7A:A8
X509v3 Authority Key Identifier:
keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:21:57:3f:dd:c9:dc:fa:28:fd:7a:b9:5d:8f:3a:2f:99:89:
4d:74:27:d3:82:4a:3e:5c:2e:89:12:5b:b9:3a:d4:03:94:71:
67:ea:01:d9:d4:8c:c3:37:0a:63:a1:eb:bc:e2:35:d0:6b:1c:
6f:12:e4:13:54:15:c0:f2:30:b4:a2:75:c3:d0:56:4c:d6:9c:
a8:91:f3:7b:48:29:1a:96:54:ef:22:00:41:1a:34:73:5b:78:
00:fa:1d:42:ce:13:76:7b:ba:c4:27:23:dc:95:8b:51:4f:9e:
e2:d4:e9:46:47:12:2a:d7:e1:94:ee:dc:16:37:b4:e7:71:86:
78:a4:26:03:8c:3c:87:be:f1:0c:7b:ae:2a:ba:6d:75:eb:f7:
11:2a:64:22:a9:93:d3:91:ab:09:91:38:17:58:2e:47:50:73:
46:fe:a5:9b:eb:f6:c3:3d:f2:1a:b1:83:26:c6:c8:b9:be:dc:
d4:f8:f8:73:26:4d:73:07:24:01:04:da:15:20:9f:4d:6f:36:
39:4c:38:56:72:58:2c:fd:d9:d1:62:81:f5:ef:17:0b:52:cd:
27:56:3b:9b:86:d3:21:2a:71:a7:bc:f2:12:4d:ab:5e:99:3e:
b8:eb:58:a8:16:98:77:0e:90:55:69:1c:80:72:f2:79:87:86:
1d:9b:c9:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEYyMEIxMTAvBgNVBAUTKDc3MDNBNkQ1NkM3MTgwMjFCRDlDODlFQjNDNEJFRDgx
N0VENTZBRTUwHhcNMjUxMjA0MjI1MzU0WhcNMjUxMjExMjI1MzU0WjAYMRYwFAYD
VQQDEw02OTMyMTEwMy1kZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAphKfF79xST2ln0SRNcwuU2RV/BpQO5WpnSJRhfWqNREGF+ZH+7qpbiNhBwp0
/Y6pErvfd1eKMm9O7CZKWYdfYP5H3GhJNw6dZk9Dk7JRwRI5W9TXhQmhJjRNlLbM
Bi+L7l6pYdBXGhK+0k0fcnQasMd+MY4GiNPREcbVxIPDPa21N0B7NgnspBrbM/cz
auP2blFaXOi5hrlzwG0NU5/gCc4ok8UKt7wKx84LQXMRXYsJZTNvF9/Lh5rktMWZ
cE/d0wvY3e//6bVMEm50Qy0iYuGjvZpC7Q9H5EIT6Gc6yqEYIbgRjRWS+gRNDWI8
sWdjeVU3M1xl0rQfAjQpDcg7xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGonPSq1
kWiU7zABnwkmbecnEHqoMB8GA1UdIwQYMBaAFHcDptVscYAhvZyJ6zxL7YF+1Wrl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjIwQi8xOUU0REJGNjk2
MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdDRzluSW5yUEV2dGdYN1Zh
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R3T20xV3h4Z0NHOW5JbnJQRXZ0Z1g3VmF1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjIwQi8xOUU0REJGNjk2MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdD
RzluSW5yUEV2dGdYN1ZhdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAIVc/3cnc+ij9erldjzovmYlNdCfTgko+XC6JElu5OtQDlHFn6gHZ
1IzDNwpjoeu84jXQaxxvEuQTVBXA8jC0onXD0FZM1pyokfN7SCkallTvIgBBGjRz
W3gA+h1CzhN2e7rEJyPclYtRT57i1OlGRxIq1+GU7twWN7TncYZ4pCYDjDyHvvEM
e64qum116/cRKmQiqZPTkasJkTgXWC5HUHNG/qWb6/bDPfIasYMmxsi5vtzU+Phz
Jk1zByQBBNoVIJ9NbzY5TDhWclgs/dnRYoH17xcLUs0nVjubhtMhKnGnvPISTate
mT6461ioFph3DpBVaRyAcvJ5h4Ydm8kx
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:17:30 2025 by rpki-client