This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
File: wS8PVy2jONITRB7wfKUR0anIm20.mft (raw, json)
Hash identifier: KfVsFPNnfRFxfMXWNk6vG0HXvtH5FrMDFHIHcplr71U=
Subject key identifier: 69:5C:7F:84:1A:1E:AF:61:A3:66:89:A6:AA:71:50:31:0D:10:ED:D3
Authority key identifier: C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
Certificate issuer: /CN=A916CA70/serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Certificate serial: 0810
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
Manifest number: 080A
Signing time: Thu 18 Dec 2025 20:28:33 +0000
Manifest this update: Thu 18 Dec 2025 20:28:33 +0000
Manifest next update: Thu 25 Dec 2025 20:28:33 +0000
Files and hashes: 1: wS8PVy2jONITRB7wfKUR0anIm20.crl (hash: uuza+kIo7Yz/pzyUf9T1PGaq/EcckMQ5TGpVEno0zao=)
2: 1E4394CC03AC11EBBA025F2BC4F9AE02.roa (hash: hCxFygIxGBaZzO8/d0Vcf9NqUsTf/UZgA3mXuGpyT3g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:28:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CA70, serialNumber=C12F0F572DA338D213441EF07CA511D1A9C89B6D
Validity
Not Before: Dec 18 20:28:33 2025 GMT
Not After : Dec 25 20:28:33 2025 GMT
Subject: CN=694463f1-ae18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:9c:7e:25:4a:07:14:68:be:5b:0b:fe:27:
e3:a3:21:8b:ea:5c:52:c1:94:cb:12:84:a3:d3:e3:
d3:de:69:a0:56:0a:1b:91:7d:8d:31:62:57:c3:4f:
d3:3c:1c:74:39:a2:97:31:bf:9a:d1:b7:65:48:3d:
dd:f1:ef:61:a6:a4:00:22:8e:50:23:07:02:62:a6:
ab:92:63:3f:94:91:48:7f:99:d4:ce:89:d6:d4:2e:
2a:6e:c6:bb:a9:93:a8:ea:ea:f8:83:54:ab:2a:80:
54:b6:73:50:c6:86:40:e8:f8:89:fd:dc:05:81:13:
25:86:1d:0e:ca:f7:ec:6b:0e:67:18:54:0b:7a:ec:
9b:62:6f:93:7d:97:b9:c5:a6:5c:e7:1c:3f:06:ff:
b5:fd:7a:91:81:35:16:4a:35:e6:f2:9d:d2:51:2e:
cc:14:bc:15:ad:13:84:cd:9c:6d:13:af:d6:16:66:
51:78:fa:93:58:58:ba:2c:e7:3d:1d:9a:14:8b:9d:
90:5c:e1:a2:7e:d8:d3:8d:14:6e:e3:9f:16:e6:4e:
aa:98:cc:a9:29:e6:85:f8:3b:0a:5f:12:78:56:fd:
76:25:30:1c:e4:22:1d:e0:b0:0e:b1:04:b4:f0:23:
a3:cd:1c:f6:8a:22:d9:67:a6:20:95:b3:50:32:ae:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5C:7F:84:1A:1E:AF:61:A3:66:89:A6:AA:71:50:31:0D:10:ED:D3
X509v3 Authority Key Identifier:
keyid:C1:2F:0F:57:2D:A3:38:D2:13:44:1E:F0:7C:A5:11:D1:A9:C8:9B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wS8PVy2jONITRB7wfKUR0anIm20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA70/A7125D7603AA11EB8C158229C4F9AE02/wS8PVy2jONITRB7wfKUR0anIm20.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9d:30:3e:07:38:df:2d:8a:d0:b8:11:ad:e6:ec:36:7e:59:
af:f6:90:b0:95:d2:a9:81:2f:55:79:fc:f2:fb:56:de:b6:13:
46:d7:d6:c9:6e:7c:e4:ab:08:98:ab:26:c1:6f:18:cd:d0:f9:
2f:56:5c:2b:d1:bc:de:14:7e:ad:66:07:6c:63:42:9c:14:2a:
86:0a:a7:a8:67:98:16:f8:1b:dd:83:8a:21:e8:c0:be:88:90:
fe:e8:fc:eb:e3:9b:41:71:cf:1f:d6:da:66:4a:a2:f5:72:fc:
c9:8c:9f:e2:5a:c1:10:cd:d2:06:f6:7d:fd:b9:56:b7:35:9e:
59:8e:74:65:3b:f9:97:99:71:8d:d0:e4:fa:05:98:8e:be:e4:
33:19:21:9d:51:01:83:86:07:f3:f7:e3:0d:61:da:8b:d8:3a:
47:10:b4:cc:42:5c:ba:83:8a:79:4b:39:5f:f7:7e:27:5f:ef:
42:af:2a:9f:49:f3:0d:eb:a4:ed:d0:db:f0:4b:aa:5d:00:34:
10:8b:be:47:ab:7a:c7:37:69:7f:97:34:99:ba:17:2f:08:e2:
46:94:b5:08:7c:05:ff:77:fe:82:e7:12:7b:7e:11:fb:69:d3:
f6:8a:6b:c1:c0:55:53:9a:f9:16:df:86:eb:a8:c5:81:4a:16:
ef:06:19:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkNBNzAxMTAvBgNVBAUTKEMxMkYwRjU3MkRBMzM4RDIxMzQ0MUVGMDdDQTUxMUQx
QTlDODlCNkQwHhcNMjUxMjE4MjAyODMzWhcNMjUxMjI1MjAyODMzWjAYMRYwFAYD
VQQDDA02OTQ0NjNmMS1hZTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwDucfiVKBxRovlsL/ifjoyGL6lxSwZTLEoSj0+PT3mmgVgobkX2NMWJXw0/T
PBx0OaKXMb+a0bdlSD3d8e9hpqQAIo5QIwcCYqarkmM/lJFIf5nUzonW1C4qbsa7
qZOo6ur4g1SrKoBUtnNQxoZA6PiJ/dwFgRMlhh0Oyvfsaw5nGFQLeuybYm+TfZe5
xaZc5xw/Bv+1/XqRgTUWSjXm8p3SUS7MFLwVrROEzZxtE6/WFmZRePqTWFi6LOc9
HZoUi52QXOGiftjTjRRu458W5k6qmMypKeaF+DsKXxJ4Vv12JTAc5CId4LAOsQS0
8COjzRz2iiLZZ6YglbNQMq7zqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlcf4Qa
Hq9ho2aJpqpxUDENEO3TMB8GA1UdIwQYMBaAFMEvD1ctozjSE0Qe8HylEdGpyJtt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0E3MC9BNzEyNUQ3NjAz
QUExMUVCOEMxNTgyMjlDNEY5QUUwMi93UzhQVnkyak9OSVRSQjd3ZktVUjBhbklt
MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dTOFBWeTJqT05JVFJCN3dmS1VSMGFuSW0yMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0E3MC9BNzEyNUQ3NjAzQUExMUVCOEMxNTgyMjlDNEY5QUUwMi93UzhQVnkyak9O
SVRSQjd3ZktVUjBhbkltMjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQArnTA+BzjfLYrQuBGt5uw2flmv9pCwldKpgS9Vefzy+1bethNG19bJ
bnzkqwiYqybBbxjN0PkvVlwr0bzeFH6tZgdsY0KcFCqGCqeoZ5gW+Bvdg4oh6MC+
iJD+6Pzr45tBcc8f1tpmSqL1cvzJjJ/iWsEQzdIG9n39uVa3NZ5ZjnRlO/mXmXGN
0OT6BZiOvuQzGSGdUQGDhgfz9+MNYdqL2DpHELTMQly6g4p5Szlf934nX+9Cryqf
SfMN66Tt0NvwS6pdADQQi75Hq3rHN2l/lzSZuhcvCOJGlLUIfAX/d/6C5xJ7fhH7
adP2imvBwFVTmvkW34brqMWBShbvBhkc
-----END CERTIFICATE-----
Generated at Sat Dec 20 18:27:33 2025 by rpki-client