This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
File: V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft (raw, json)
Hash identifier: l/SZe/rYIKpgWMScc0YV+RYq/YWK7y58EJJ+bWMyMGU=
Subject key identifier: 07:FE:9F:FA:91:FD:C9:B4:C6:BE:93:BD:61:AC:24:7F:81:36:0B:A1
Authority key identifier: 57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D
Certificate issuer: /CN=A918036A/serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D
Certificate serial: 10A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
Manifest number: 1089
Signing time: Mon 22 Dec 2025 17:03:44 +0000
Manifest this update: Mon 22 Dec 2025 17:03:44 +0000
Manifest next update: Mon 29 Dec 2025 17:03:44 +0000
Files and hashes: 1: V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl (hash: Pfy6WZ1K6Hk8f0Oakz1O+aiZD2qhTEyVTxMEjdm7SIc=)
2: BFF3C17CD23A11EB8E7BA35DC4F9AE02.roa (hash: 5Fsc41uF0Rk/lmtPY3W1pGuwIZpGYocCqX/4FDCWPmc=)
3: E2846570135E11EB9D58482CC4F9AE02.roa (hash: 8wnbM36mlkXO3KAhn+wvxpP3UwwkDuqXsFM8f7eC1Yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl
rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4263 (0x10a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918036A, serialNumber=57840FB441D2B34C8EE699D264712B4A5E0FED8D
Validity
Not Before: Dec 22 17:03:44 2025 GMT
Not After : Dec 29 17:03:44 2025 GMT
Subject: CN=694979f0-6644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5b:8e:ac:78:9a:de:c6:77:ca:41:4d:ea:53:
25:8a:5a:79:87:43:16:e5:33:44:4a:e2:52:76:fb:
71:b2:c7:dc:39:8a:67:26:21:88:00:74:48:c6:58:
7d:75:fd:96:29:2d:03:0b:25:b1:c7:ab:93:fb:88:
34:c0:0e:93:f9:d2:be:8c:ac:13:a5:c1:49:42:7f:
2e:81:14:c8:f1:df:94:de:6b:59:d8:d7:8c:4a:ca:
6e:61:79:c4:ca:3d:b9:d1:f6:41:93:68:be:4e:56:
79:fa:ee:9f:9c:92:3f:34:a6:1a:9a:f7:d5:1c:27:
8a:eb:2a:e3:74:4b:3d:62:66:f4:aa:bc:30:42:2e:
94:e9:d8:c9:7e:7a:24:2b:3a:e2:71:bb:7e:57:e5:
6a:56:22:24:35:b8:a2:b4:fa:98:14:cc:c9:79:0f:
45:92:dc:3b:eb:7a:4b:d2:86:e0:75:7b:a5:e4:a6:
5d:f1:6d:bb:ad:0d:23:34:27:2e:8b:70:29:56:bf:
85:72:56:99:bc:a5:75:4d:22:89:d8:5a:86:25:fe:
f1:f1:ec:30:18:06:6d:e9:c6:1f:53:dd:5d:5b:ad:
e2:89:ef:18:2d:02:a8:e4:0c:d5:53:eb:07:5a:0d:
59:1f:ed:c9:ed:e5:22:70:17:70:01:21:39:fc:ab:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FE:9F:FA:91:FD:C9:B4:C6:BE:93:BD:61:AC:24:7F:81:36:0B:A1
X509v3 Authority Key Identifier:
keyid:57:84:0F:B4:41:D2:B3:4C:8E:E6:99:D2:64:71:2B:4A:5E:0F:ED:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4QPtEHSs0yO5pnSZHErSl4P7Y0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918036A/433AF78C46C711E9ADE9D424C4F9AE02/V4QPtEHSs0yO5pnSZHErSl4P7Y0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:f1:ce:ba:03:2f:4f:ce:ea:10:2d:20:6c:6a:a2:2c:17:d5:
67:2b:41:65:c0:18:31:23:a6:b8:c2:50:b5:4f:8a:96:59:e4:
9f:68:89:66:9b:ff:1b:d1:68:a2:7a:8f:0b:43:e8:69:59:82:
5d:fe:ae:d1:ed:3a:53:ac:42:35:35:1d:7a:cf:1b:7d:b4:1c:
2f:93:07:b7:0c:ea:93:50:fc:32:33:af:9b:50:bc:86:2f:4a:
cf:da:79:10:25:b7:a0:83:3b:7d:69:b2:30:e8:e9:59:3c:74:
65:34:a2:b2:3d:27:08:a8:e1:40:e2:b4:37:93:e6:6d:9a:07:
02:8e:0a:be:ff:2a:ac:68:4e:a1:0d:1f:77:c5:e8:1d:67:27:
5a:7a:cd:08:e1:a1:3d:70:b8:ee:60:93:a8:1c:e1:3d:66:f9:
05:28:ba:e7:d9:09:04:03:2d:40:d6:9e:7e:6e:67:9d:db:06:
c6:56:c1:a4:f0:29:c5:1d:a3:88:8a:92:e8:c4:b4:df:f7:e6:
ae:ad:08:8c:ba:93:a9:0b:fe:81:4a:5e:18:fb:71:86:1a:41:
d4:49:33:da:1f:2a:64:bb:ab:c3:02:62:ba:32:db:60:60:21:
90:26:bb:52:bb:98:9c:32:01:e8:f8:e3:fc:d2:28:f1:41:e4:
5a:91:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:05 2025 by rpki-client