This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json)
Hash identifier: 0Z7lcq2+ahQzN+tbrLbKO3pYZlb7rPHnFMhu46O68ew=
Subject key identifier: 44:0B:AF:B1:3F:6A:5E:87:94:2C:DB:4D:46:9F:31:DE:71:A2:92:62
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial: 03AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
Manifest number: 0398
Signing time: Wed 24 Dec 2025 16:08:42 +0000
Manifest this update: Wed 24 Dec 2025 16:08:42 +0000
Manifest next update: Wed 31 Dec 2025 16:08:42 +0000
Files and hashes: 1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: ba+ZoxY3fzo9Kcl5v5xfmEDqRXjz+97PXSqIhdQe5hE=)
2: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (hash: 03Y5aZgZbiR8AXRbH0v7oX9h0nIRsdQvo8UEKJF+mQs=)
3: 6C330F2C7E3711F0BFE28E3AC4F9AE02.roa (hash: rRV3ULmc3s28UHX3IfHIa+Sp5XP4XAzVw9QLu0Fytsg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 15:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940 (0x3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Validity
Not Before: Dec 24 16:08:42 2025 GMT
Not After : Dec 31 16:08:42 2025 GMT
Subject: CN=694c100a-ce9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:82:bb:f3:fa:ce:02:73:98:00:92:8f:99:00:
23:13:c3:26:8e:27:de:84:74:b8:e9:55:b3:1b:83:
ba:86:1b:79:e9:ad:71:4f:fe:8d:e7:d2:a2:54:ed:
2d:82:ce:19:0f:77:8e:b5:fd:7d:53:b9:13:a1:ea:
8c:9b:9a:92:da:1d:b9:62:bd:c4:48:30:37:a5:7b:
dc:64:c7:14:8a:b7:3e:b6:6e:51:90:ce:9d:dd:dc:
1e:d1:72:af:4b:d9:f2:af:46:07:45:f2:8d:76:17:
ff:a4:cc:7f:34:e8:0f:3a:69:2e:99:86:e3:ce:85:
80:9d:28:39:e4:c5:00:8e:c8:cf:c4:8b:8e:7e:3f:
b8:3b:cd:e5:12:30:04:a1:44:64:39:88:dc:08:86:
a7:16:ce:91:92:b1:90:d2:de:68:cf:ad:9b:e2:dd:
1d:5f:1d:d5:36:8b:45:2c:d0:01:db:32:a5:02:9c:
95:7d:80:80:18:bb:10:56:9a:7a:ac:04:55:b5:ec:
0a:1d:af:f9:5c:56:b9:17:2a:6d:68:69:86:3c:ac:
eb:d4:b6:95:79:67:01:4b:ed:19:41:a8:75:e4:5e:
bb:f2:fa:a8:e0:8f:f6:10:37:35:17:34:bb:58:18:
07:fc:ef:1b:71:b2:63:d3:ef:31:09:10:1c:ae:48:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0B:AF:B1:3F:6A:5E:87:94:2C:DB:4D:46:9F:31:DE:71:A2:92:62
X509v3 Authority Key Identifier:
keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:41:31:b2:c0:bb:b0:b3:f1:61:68:85:cb:b8:fa:ce:8c:03:
3c:93:21:ee:b4:7c:04:47:27:61:63:11:50:ed:e8:55:e4:9f:
b4:6b:eb:a5:e9:10:29:3c:0b:fe:5c:9a:53:69:6b:4d:4f:a5:
56:98:f5:24:32:b9:7e:2c:90:50:90:c3:b3:c5:d1:a2:fb:b7:
4b:f2:3d:cb:51:48:b5:18:d4:78:bd:ae:bd:a7:b0:b5:c9:24:
8d:20:45:e3:5f:c9:e8:cb:21:90:3b:87:ab:81:a2:5b:5c:d4:
40:ed:3f:f6:96:90:d0:0f:2e:cc:17:68:84:6e:da:72:dc:e5:
5f:72:94:d6:ed:77:3a:cb:42:32:55:1a:7a:3d:c1:8b:6a:f9:
38:4c:01:9e:87:36:be:ef:73:9d:a6:d2:a3:17:5b:5d:78:c5:
86:18:bf:05:65:74:ae:15:fe:2a:49:0b:df:3a:ed:37:46:85:
c2:41:8c:42:e4:78:75:05:e7:65:54:14:ee:10:8f:25:cc:3e:
77:19:c4:7e:94:27:f6:35:76:b1:f2:ef:31:64:7c:ac:b4:a8:
5a:04:c7:e9:a2:d6:1f:76:0b:0c:61:98:d0:2f:00:ef:37:a6:
1e:24:e1:af:82:c0:da:3c:79:3b:6e:90:5f:0c:c0:83:23:fe:
91:41:1e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:20:36 2025 by rpki-client