This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
File: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft (raw, json)
Hash identifier: SouL8ScHit7GZNfgWdb9OIkpLyx5MTWAwZGlse8gQgY=
Subject key identifier: 51:E6:27:DF:9B:58:C7:CE:7F:24:DF:D6:A5:8B:FA:D3:6E:10:CF:D4
Authority key identifier: 16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
Certificate issuer: /CN=A918FC40/serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Certificate serial: 0B8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
Manifest number: 0B75
Signing time: Sat 06 Dec 2025 18:22:11 +0000
Manifest this update: Sat 06 Dec 2025 18:22:11 +0000
Manifest next update: Sat 13 Dec 2025 18:22:11 +0000
Files and hashes: 1: FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl (hash: /+Jl9Exx/JZuo9l/impnwpPOOfoPrLENB/+PezMfhaA=)
2: 9D999E187CA811F0AE15ED6EC4F9AE02.roa (hash: XUFwo2AoDu03LerHonuKCTWQdv0ZoVpeC0iTRlacVE0=)
3: B285AC807CA911F09D442F15C4F9AE02.roa (hash: HV5Eb4OMjxYhqHD53soPXDKu2JSkg3JbM+FdTglULNc=)
4: DC06CBC0419A11EAA5E2BA6EC4F9AE02.roa (hash: G2W8m/eV6702B0nYB9iT5F2PnH2esMGhObytqKEXlpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2959 (0xb8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC40, serialNumber=1601D8650DD556B2AFB083B233FF65AE3DAD1571
Validity
Not Before: Dec 6 18:22:11 2025 GMT
Not After : Dec 13 18:22:11 2025 GMT
Subject: CN=69347453-28d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:0c:92:72:1f:3c:0b:1e:21:3d:a1:de:e3:
5c:f4:6d:8d:5c:37:f5:af:4d:7e:e9:2f:1d:e8:4e:
b0:d6:eb:56:65:e5:4e:8c:ea:7b:84:83:5c:f9:57:
6e:27:0c:7e:c7:82:14:4b:ad:f5:c3:ae:fa:a0:ef:
0b:42:a5:9b:a6:01:fe:c1:e3:6e:24:ba:f6:e7:e9:
57:d0:e1:90:4c:c5:b9:c9:0b:22:91:ba:18:6c:f9:
ff:78:1c:bc:a2:00:5f:c5:ab:9d:55:ee:ca:2b:10:
4b:25:79:8b:92:09:03:53:dc:ab:60:6b:7d:0f:84:
68:75:17:aa:3a:56:c3:ab:f6:92:b5:47:95:07:37:
f2:3c:47:85:92:e8:df:dc:94:30:43:0e:fd:81:9a:
ea:18:21:13:66:a4:e3:e4:0d:8b:7e:8c:38:fc:76:
0f:7b:8b:42:c6:f9:c5:04:f4:a7:5f:3f:72:e5:d7:
a4:32:a8:17:12:34:f8:da:2c:8a:f7:15:a3:a9:21:
4e:1e:4a:58:46:60:aa:db:2f:b4:2d:97:1f:13:e4:
c0:76:a0:26:e0:b7:39:05:74:68:b4:7d:60:f1:f2:
68:70:19:c6:49:56:56:bc:5a:1a:a3:e6:58:d7:66:
0c:c2:02:4c:90:5c:5f:44:29:5a:00:3e:30:53:ed:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E6:27:DF:9B:58:C7:CE:7F:24:DF:D6:A5:8B:FA:D3:6E:10:CF:D4
X509v3 Authority Key Identifier:
keyid:16:01:D8:65:0D:D5:56:B2:AF:B0:83:B2:33:FF:65:AE:3D:AD:15:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC40/617F353640E111EABC62DB26C4F9AE02/FgHYZQ3VVrKvsIOyM_9lrj2tFXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bb:fe:3f:15:b0:1a:69:5f:96:7c:05:56:1d:b2:93:d5:a4:
b2:02:8e:e4:e5:3f:46:f4:68:eb:aa:f1:20:6d:44:67:eb:45:
e8:56:a5:39:a5:2b:15:93:5a:a1:50:c5:32:56:4a:41:1a:10:
eb:47:8c:67:df:9c:e8:20:3e:65:3b:91:17:9c:2a:34:1b:c5:
45:5d:ad:11:1f:dc:73:51:21:ad:6e:4b:9a:c8:bc:d0:60:98:
35:6d:28:82:48:bd:1c:e2:3c:6a:71:45:a8:7e:74:70:7c:78:
c7:2e:dc:c0:04:ec:a4:ab:05:7b:e4:55:42:ce:4d:a4:c2:da:
1d:fd:c1:0e:03:49:bc:cb:a5:0b:ee:e6:d3:80:5b:5a:93:25:
95:9c:65:27:14:84:11:b3:ae:50:b1:81:18:61:df:08:69:b2:
b5:1e:f2:18:de:af:5a:fd:c9:5f:13:41:5a:91:e7:93:79:f7:
ae:e1:93:02:0b:e1:29:1e:f6:d8:92:db:39:50:70:cf:ec:f9:
a2:3f:7f:c8:bd:0f:2d:a2:69:03:6c:b0:1b:7f:da:d4:5a:fa:
c1:fb:8c:03:bf:57:d4:49:91:34:95:19:0c:b6:66:58:9a:62:
cc:90:11:8f:c8:2f:f3:a9:3a:ad:19:9d:c7:79:31:52:e5:69:
77:60:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:34:29 2025 by rpki-client