This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
File: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft (raw, json)
Hash identifier: +4zRTtu52teNnURA5y2g54xyf6nGFSyrGgHLsQe3JFw=
Subject key identifier: A4:9B:05:A4:70:EA:76:00:44:EC:48:6A:6D:6B:ED:4B:D5:CD:63:05
Authority key identifier: 16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5
Certificate issuer: /CN=A918259F/serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
Certificate serial: 08AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
Manifest number: 08A4
Signing time: Sun 14 Dec 2025 19:57:02 +0000
Manifest this update: Sun 14 Dec 2025 19:57:01 +0000
Manifest next update: Sun 21 Dec 2025 19:57:01 +0000
Files and hashes: 1: FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl (hash: C6ScNewAugPpWUNj4krN1BUorJElZIGPP/YLRQpFN6Y=)
2: 760B9414D50911EB81567986C4F9AE02.roa (hash: QPsDfSV6so0OjIlOy/DIgPY7VNOYY4wsn5e2KkaKPCI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl
rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 19:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918259F, serialNumber=1675DBD9EC39CEED81BBBBDE42CC78CF7A1627C5
Validity
Not Before: Dec 14 19:57:01 2025 GMT
Not After : Dec 21 19:57:01 2025 GMT
Subject: CN=693f168d-af8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:7c:54:52:66:ff:83:a6:c4:1b:af:0d:09:
8f:1d:37:96:2d:0e:bd:72:b5:bb:5d:f3:e8:63:7b:
43:b7:27:86:d0:ab:64:9f:08:12:80:d5:e7:93:d2:
67:59:63:ef:db:d6:e3:56:ad:6d:42:d8:d9:bc:cf:
51:04:dc:80:50:c3:11:c9:97:9d:b8:e8:ad:c3:91:
b7:d3:78:d1:2e:18:c9:69:a4:72:71:04:22:fe:35:
d2:85:2b:56:96:a2:17:9b:8b:0b:89:c4:5c:72:f8:
bc:78:46:dc:6a:65:38:d2:04:77:4d:89:56:ed:47:
aa:55:2b:28:2c:ba:f9:41:05:b5:51:8d:00:d1:d9:
2d:60:8f:59:a2:49:ff:f9:72:ff:5f:e0:31:9d:60:
f2:1f:c8:79:ec:73:08:17:f4:00:09:49:07:dd:9a:
bd:f8:d4:c8:28:b7:0a:6e:1f:f1:5e:61:0f:30:ee:
50:fb:38:7d:7a:e9:1a:80:12:fe:7e:7e:c8:61:72:
62:0a:1c:de:48:90:62:9a:ad:12:98:01:37:4e:be:
a6:d3:be:f4:50:a2:42:ae:bf:db:0b:71:4b:38:28:
eb:c9:df:23:7d:cc:df:79:15:99:51:83:8f:f7:72:
96:7c:bb:08:02:24:91:f9:71:bb:99:95:05:47:a8:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9B:05:A4:70:EA:76:00:44:EC:48:6A:6D:6B:ED:4B:D5:CD:63:05
X509v3 Authority Key Identifier:
keyid:16:75:DB:D9:EC:39:CE:ED:81:BB:BB:DE:42:CC:78:CF:7A:16:27:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918259F/0F8B5910CDAB11EA8837520CC4F9AE02/FnXb2ew5zu2Bu7veQsx4z3oWJ8U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:f4:83:37:44:90:d8:40:e6:23:c5:ed:bc:a1:46:fb:cd:56:
60:b4:a7:82:2d:44:aa:a8:4c:2c:19:44:89:7d:3f:4b:db:7a:
8c:4d:a2:6f:15:f6:64:37:12:3a:45:ea:54:59:34:5b:ad:76:
bc:e0:f0:17:1e:52:a2:6a:3c:ce:05:63:cc:b0:d4:51:ce:50:
94:60:70:42:0f:3b:7d:b5:36:2f:6a:5d:71:f6:f7:46:61:e1:
1c:17:7c:c3:68:01:92:c6:c5:a3:0d:e9:82:6c:0d:21:5c:46:
78:1c:6b:99:c2:2f:b6:bd:33:f4:ba:d6:43:b7:c1:a6:ec:41:
f0:d5:0e:49:73:ef:05:9f:f4:02:35:b4:4e:5c:f6:6a:8c:b9:
77:d5:57:39:70:fa:04:0e:e4:56:e3:b6:61:0e:4b:e4:ce:44:
67:3d:77:3d:93:b2:af:9d:3f:67:12:de:e3:51:cb:77:ec:71:
a2:35:97:d5:e8:dc:c1:bc:ee:16:7a:92:02:3a:9a:25:91:1d:
1c:b6:1c:21:f1:2d:8b:19:d0:98:f8:29:3c:80:93:27:7d:70:
11:27:bb:93:4d:ea:8a:8c:57:87:ed:c2:55:65:61:87:8b:81:
8d:65:e6:cc:39:4f:ee:15:7d:3e:3e:62:0e:7d:f8:68:c0:4d:
02:97:25:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 14 22:20:08 2025 by rpki-client