This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier: 5oLZ2sfCd3bcGvn52gawSGhzO/s2E7XdbNtbvFVIC+w=
Subject key identifier: 41:99:38:6A:B5:F9:E2:D3:96:90:4D:26:DB:DE:1C:D1:C2:D8:CC:06
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer: /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial: 01EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number: 01CF
Signing time: Tue 23 Dec 2025 02:11:51 +0000
Manifest this update: Tue 23 Dec 2025 02:11:51 +0000
Manifest next update: Tue 30 Dec 2025 02:11:51 +0000
Files and hashes: 1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: Z8t0HN5nc/RIbV0nE7qg3nV2RYxG8Hc5gtKLmHN1KlE=)
2: 12B20E54D72811F09A5B6B4F5FD3641D.roa (hash: ZUdbJ6OKuuHZsQSkDbegNWkKad8x7uyo9KKuxVE5YMg=)
3: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: iRxA1ggG5Gg6gMWZuZ8L1lPJN3fft+M4sC43triwT/s=)
4: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: tbP1wHLZXWdBy80smo7nwsfBeTkYD2DmwbznFImHmJs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 492 (0x1ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Validity
Not Before: Dec 23 02:11:51 2025 GMT
Not After : Dec 30 02:11:51 2025 GMT
Subject: CN=6949fa67-68fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:94:44:80:d3:4f:a4:6f:43:c9:6c:9f:2c:
e1:3a:ea:a1:3e:01:b4:eb:de:dd:27:80:ee:71:e5:
ed:51:7d:30:e1:42:ce:b8:14:83:eb:a3:e4:eb:e9:
e9:db:9a:da:15:b9:c4:39:62:f2:cb:aa:c4:7a:43:
d3:e0:65:2d:9c:80:7d:14:34:6f:b7:2a:85:e1:7f:
5b:7d:a3:ab:8b:d4:52:80:3e:75:19:70:ab:d7:eb:
33:e2:a6:fb:d8:6a:ec:d0:a2:01:a8:0b:16:27:4c:
a7:30:70:87:1e:9c:9b:93:4a:a4:9c:4d:9b:5c:81:
87:c8:e8:d3:f8:78:a6:70:af:9c:08:fd:93:e8:fa:
eb:0e:38:40:3e:61:b8:ec:50:2c:7a:26:0b:62:76:
8c:0a:68:54:0d:16:15:8e:f4:8f:02:db:18:ae:98:
cb:17:20:8a:2d:2d:f0:a2:0f:29:bd:d6:2a:b1:7f:
90:3d:80:66:58:23:72:45:bc:2c:2f:8d:db:16:85:
4c:47:b5:a4:5b:5f:f9:e5:f4:5a:d6:6e:40:a5:1c:
36:44:05:0d:2d:aa:e7:dc:2b:f6:4c:8f:b2:5f:45:
86:25:9b:0e:5e:a0:16:30:29:ce:33:09:a3:87:0c:
d9:c3:07:21:08:cd:16:1f:e2:e6:ed:e9:00:19:c4:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:38:6A:B5:F9:E2:D3:96:90:4D:26:DB:DE:1C:D1:C2:D8:CC:06
X509v3 Authority Key Identifier:
keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:6e:2f:9f:64:5c:78:98:4c:13:23:ad:79:a1:88:bc:ec:0a:
a8:e4:26:70:7d:8c:e8:83:65:69:6e:a1:2a:9b:8d:c8:bd:68:
5c:48:48:dc:61:0f:58:54:cc:22:16:0f:8b:4c:14:6b:28:15:
8b:e8:43:84:55:7e:c0:e7:ec:b7:28:07:7c:63:6b:ec:bf:a8:
ca:b1:bf:1e:59:be:ed:1f:b4:1e:fb:87:ad:e0:d7:87:a8:c6:
2d:d3:35:f2:2b:e3:55:42:0b:06:51:06:08:7d:68:e1:b7:2f:
3a:d2:b4:8f:ec:ff:e6:4c:b8:e6:12:91:e6:29:a7:c9:b9:cd:
7b:46:02:5f:7a:43:0f:28:a0:f8:a7:78:63:42:cb:f2:fc:39:
cf:41:72:5f:65:78:61:26:a8:d3:aa:7b:b2:02:6f:76:ef:7d:
f7:7f:90:56:48:af:00:6e:d9:85:15:c8:f8:d9:84:52:f7:4c:
06:16:d4:de:f3:8f:e3:ae:a4:b6:26:a1:c5:aa:2d:ae:ce:75:
8d:07:a5:94:42:98:14:fd:33:0d:ee:16:42:91:36:94:da:b4:
c3:b7:86:ca:95:5c:92:96:f2:e4:ef:c5:87:2d:01:92:76:dc:
86:ba:d0:19:d8:81:78:21:95:95:07:0e:0e:7b:5f:bf:4d:90:
47:46:c9:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEwNUQxMTAvBgNVBAUTKDBGNTQ1RTYyNzNEN0M5N0U5OTk1NDExRjc2RDVDNEYw
MDZCQjUxODYwHhcNMjUxMjIzMDIxMTUxWhcNMjUxMjMwMDIxMTUxWjAYMRYwFAYD
VQQDDA02OTQ5ZmE2Ny02OGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1TyURIDTT6RvQ8lsnyzhOuqhPgG0697dJ4DuceXtUX0w4ULOuBSD66Pk6+np
25raFbnEOWLyy6rEekPT4GUtnIB9FDRvtyqF4X9bfaOri9RSgD51GXCr1+sz4qb7
2Grs0KIBqAsWJ0ynMHCHHpybk0qknE2bXIGHyOjT+HimcK+cCP2T6PrrDjhAPmG4
7FAseiYLYnaMCmhUDRYVjvSPAtsYrpjLFyCKLS3wog8pvdYqsX+QPYBmWCNyRbws
L43bFoVMR7WkW1/55fRa1m5ApRw2RAUNLarn3Cv2TI+yX0WGJZsOXqAWMCnOMwmj
hwzZwwchCM0WH+Lm7ekAGcTkfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGZOGq1
+eLTlpBNJtveHNHC2MwGMB8GA1UdIwQYMBaAFA9UXmJz18l+mZVBH3bVxPAGu1GG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTA1RC9DMUVGQjA4MDRF
MjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlYNlpsVUVmZHRYRThBYTdV
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0QxUmVZblBYeVg2WmxVRWZkdFhFOEFhN1VZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTA1RC9DMUVGQjA4MDRFMjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlY
NlpsVUVmZHRYRThBYTdVWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBHbi+fZFx4mEwTI615oYi87Aqo5CZwfYzog2VpbqEqm43IvWhcSEjc
YQ9YVMwiFg+LTBRrKBWL6EOEVX7A5+y3KAd8Y2vsv6jKsb8eWb7tH7Qe+4et4NeH
qMYt0zXyK+NVQgsGUQYIfWjhty860rSP7P/mTLjmEpHmKafJuc17RgJfekMPKKD4
p3hjQsvy/DnPQXJfZXhhJqjTqnuyAm927333f5BWSK8AbtmFFcj42YRS90wGFtTe
84/jrqS2JqHFqi2uznWNB6WUQpgU/TMN7hZCkTaU2rTDt4bKlVySlvLk78WHLQGS
dtyGutAZ2IF4IZWVBw4Oe1+/TZBHRsnu
-----END CERTIFICATE-----
Generated at Tue Dec 23 07:42:51 2025 by rpki-client