This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
File: 5x94KlPaFtsf0wxsDSYVQnUipt4.mft (raw, json)
Hash identifier: XnJacwSbyKiE64RO2uIBDz2V+bRh8Nk7KhGgEafsGBs=
Subject key identifier: AD:C0:E2:EC:2B:53:66:BE:37:68:2F:DC:C7:22:96:DB:42:16:CC:2F
Authority key identifier: E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
Certificate issuer: /CN=A918ADBA/serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
Manifest number: 12
Signing time: Tue 23 Dec 2025 06:49:05 +0000
Manifest this update: Tue 23 Dec 2025 06:49:04 +0000
Manifest next update: Tue 30 Dec 2025 06:49:04 +0000
Files and hashes: 1: 5x94KlPaFtsf0wxsDSYVQnUipt4.crl (hash: KY2yrBiobnIn2jkadeXjukCHMTevnzwx2h4uIUEHWos=)
2: 95C751AAC99F11F098604B44C4F9AE02.roa (hash: NmpEc8D8qa0q1zd5A3YpqQoZSHsGMDweaQM/Ibr7UC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ADBA, serialNumber=E71F782A53DA16DB1FD30C6C0D2615427522A6DE
Validity
Not Before: Dec 23 06:49:04 2025 GMT
Not After : Dec 30 06:49:04 2025 GMT
Subject: CN=694a3b60-cafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:86:63:ac:b0:6a:0a:c2:a3:0c:8a:fb:75:
2a:8d:48:14:50:ef:9b:8a:4e:2c:0d:82:0c:42:e6:
8d:12:39:90:ef:79:58:5d:24:27:e5:55:f2:3b:3b:
1d:7c:48:31:c2:3e:6a:8c:98:16:d5:63:13:08:74:
a2:a6:9e:e2:ca:0b:f3:ba:30:98:33:87:fc:49:f2:
2e:c5:0d:37:44:2a:3f:38:58:ca:05:52:10:6e:ae:
f5:56:90:0b:8c:57:6f:43:91:c0:aa:c7:78:de:5a:
94:54:81:77:60:97:44:4f:03:6f:6b:2b:3a:87:33:
99:8d:b5:94:ee:05:28:6d:47:41:9d:4a:35:b6:4d:
96:c4:94:b9:2f:e8:96:2a:66:fa:6c:aa:18:f9:01:
df:91:41:31:2d:2a:6d:17:a3:c7:10:7b:4d:5d:b9:
9e:7f:c9:78:4f:60:04:5a:0d:b2:38:a2:39:58:23:
92:d2:07:f5:08:be:36:2b:dd:3d:75:b1:e2:21:80:
f2:a0:00:59:f1:52:d7:fa:ed:7e:4b:a5:62:fd:9a:
ca:51:41:ee:93:7f:a3:08:7d:5b:f0:5e:9c:85:7e:
ae:87:bd:47:fe:22:4b:40:8a:94:04:65:0b:ee:ce:
9f:3a:df:c1:d9:71:a1:58:9c:77:cf:aa:9f:43:0c:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C0:E2:EC:2B:53:66:BE:37:68:2F:DC:C7:22:96:DB:42:16:CC:2F
X509v3 Authority Key Identifier:
keyid:E7:1F:78:2A:53:DA:16:DB:1F:D3:0C:6C:0D:26:15:42:75:22:A6:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5x94KlPaFtsf0wxsDSYVQnUipt4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ADBA/03F87BF0C99F11F09105A442C4F9AE02/5x94KlPaFtsf0wxsDSYVQnUipt4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:55:81:1c:82:7f:e1:4a:2f:c1:fd:7b:90:86:66:81:cf:a2:
96:80:5d:11:ee:8c:34:22:26:4c:87:92:ec:72:5f:dd:fb:27:
e3:9b:3e:bf:5c:7e:54:74:19:d6:f4:89:65:0f:58:dd:f3:43:
65:d8:a1:60:5e:35:77:77:0d:28:c1:02:0e:01:2a:67:60:d2:
9b:7e:90:0f:92:cf:0c:df:30:bf:02:c6:b4:a4:54:42:7c:5e:
f4:a5:a9:2f:db:b0:62:01:41:ae:44:5a:89:37:d1:d7:8c:f6:
2a:9c:90:a0:83:cc:c5:1b:76:5e:d0:8c:73:de:bb:27:d5:d2:
c7:cf:db:0c:4d:d3:51:f6:bc:65:be:12:11:d4:53:ab:1d:66:
a3:f0:ee:9c:93:95:4b:80:ff:a5:01:ac:b5:20:48:3b:5f:30:
f0:7d:13:5e:87:33:6b:66:b5:c9:de:7c:9c:8e:00:58:25:cf:
dd:b7:86:32:4c:74:5c:7e:4d:ec:01:04:3c:fb:62:85:3e:6b:
a1:7b:ea:07:9a:a1:89:6e:0d:8f:f2:e0:51:e2:95:53:c1:8e:
f6:c6:9c:c2:83:75:c9:55:6f:f4:1a:82:3b:a9:b0:b9:d0:5f:
f5:20:f5:b3:1f:07:9e:c2:0f:0f:20:75:cc:c1:6a:a5:db:31:
c4:34:1d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:05:07 2025 by rpki-client