This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
File: KmvwVK0j6tLbOVMbZGcmypRaxJI.mft (raw, json)
Hash identifier: ODY5aKEbhmNY747+07q83FybR94Th0F9HBz4esayspc=
Subject key identifier: 1E:A4:27:B8:F3:4E:F1:6C:5D:CC:19:EF:F0:8C:6E:78:55:7E:26:40
Authority key identifier: 2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92
Certificate issuer: /CN=A918AB7E/serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
Certificate serial: 8D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
Manifest number: 8C
Signing time: Tue 23 Dec 2025 05:29:30 +0000
Manifest this update: Tue 23 Dec 2025 05:29:29 +0000
Manifest next update: Tue 30 Dec 2025 05:29:29 +0000
Files and hashes: 1: KmvwVK0j6tLbOVMbZGcmypRaxJI.crl (hash: vxdFCKnsWDqQAM2rImgfgfgSPQwBR1YX/VnWCOreebc=)
2: 3CF5A86C088211F0BB90C23EC4F9AE02.roa (hash: WjhNkxKHghzjWbpSoIkFccSDxcFZFh5y2Re0ypkmeM8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl
rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AB7E, serialNumber=2A6BF054AD23EAD2DB39531B646726CA945AC492
Validity
Not Before: Dec 23 05:29:29 2025 GMT
Not After : Dec 30 05:29:29 2025 GMT
Subject: CN=694a28ba-7e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:84:70:2c:2c:04:c5:bf:a9:e5:c0:ee:39:
ea:2a:7f:29:11:c9:bf:e3:23:59:e7:ba:b9:73:c3:
22:23:4d:36:a2:b1:4e:fc:5d:9b:95:6b:9b:89:25:
62:8f:48:09:36:2c:a8:6d:72:6e:0a:c1:f5:e8:d9:
4e:27:50:fd:fb:59:86:7d:80:d1:25:3d:34:8d:f9:
f5:58:e7:93:0d:c7:41:5c:b9:ef:30:33:cb:69:34:
b9:90:67:2e:2a:71:6d:e7:e7:db:54:57:dd:d8:38:
99:38:c3:dc:1e:b2:95:8e:7a:c6:f7:7c:60:6e:93:
75:a7:01:9b:12:50:8e:04:c5:ff:29:5a:93:af:9f:
a0:53:2a:d9:8f:cd:33:c1:d6:98:83:8d:e7:25:61:
00:ba:4a:31:68:d8:b7:d9:e4:0d:42:03:aa:2d:21:
ab:eb:3c:ba:1c:da:e4:84:76:56:22:56:cb:93:49:
99:e1:3f:23:9e:39:8e:9f:c8:78:b8:5a:d9:45:19:
5f:83:a8:68:f6:4c:32:d2:95:b9:a8:e6:f0:78:67:
59:de:b7:e7:3a:20:26:a4:be:aa:ad:5c:4b:07:3f:
c2:b1:65:6b:6d:7f:36:6a:43:bf:51:05:20:68:33:
37:95:6e:5d:90:0b:36:a5:83:6b:33:2a:53:44:88:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:A4:27:B8:F3:4E:F1:6C:5D:CC:19:EF:F0:8C:6E:78:55:7E:26:40
X509v3 Authority Key Identifier:
keyid:2A:6B:F0:54:AD:23:EA:D2:DB:39:53:1B:64:67:26:CA:94:5A:C4:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KmvwVK0j6tLbOVMbZGcmypRaxJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AB7E/F759796E088111F0BAC3413EC4F9AE02/KmvwVK0j6tLbOVMbZGcmypRaxJI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:49:82:a6:76:cb:2e:e2:50:3e:3e:2b:d2:50:13:f9:af:cd:
7a:7a:fa:99:a9:ef:fd:8c:5b:b0:23:29:72:44:34:fe:45:3a:
1d:b3:d8:94:7a:ce:b1:f9:53:c2:57:60:42:4e:aa:90:b2:08:
51:20:f4:32:a5:9a:50:5e:9e:e6:2c:bd:39:f4:f8:6a:67:d0:
78:bd:e9:c0:ff:2b:8d:fb:32:d7:f9:be:ad:b9:4b:a5:c7:ce:
60:19:7a:f9:f8:0e:a8:90:e4:88:2e:0b:06:ad:89:73:82:13:
30:44:b9:eb:6e:95:85:94:52:59:ab:69:d5:dc:e8:f5:42:0e:
61:72:fe:0c:c4:2d:0d:f4:77:99:60:12:27:d5:d8:a3:29:f6:
78:24:52:84:27:df:f2:8c:98:6a:6b:b2:f7:25:b3:23:50:ae:
86:63:09:4e:44:ad:c4:9d:17:73:10:b5:82:8b:9d:e9:8e:8b:
f3:93:a7:e3:90:82:6d:e8:48:17:1a:e3:3d:cc:3d:42:c4:1b:
23:44:54:73:53:2b:53:d6:33:0d:fb:e0:3d:81:d1:39:dd:a5:
76:a1:6a:d9:8c:7d:26:5f:83:be:d6:1a:90:0a:e8:5c:b9:07:
d5:00:73:c0:f1:be:31:5c:2e:2a:11:62:60:c4:f9:8d:55:2e:
77:6e:24:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 03:58:40 2025 by rpki-client