This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
File: 2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json)
Hash identifier: i6uxs+Lbevd8xBQWQGX3H8Ojr23euupztHRV52Kju28=
Subject key identifier: 30:66:66:89:7E:77:ED:3D:57:4B:9C:48:4B:D8:CA:C2:02:BE:FC:A4
Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
Certificate issuer: /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Certificate serial: 34FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
Manifest number: 34F5
Signing time: Mon 22 Dec 2025 14:49:51 +0000
Manifest this update: Mon 22 Dec 2025 14:49:50 +0000
Manifest next update: Mon 29 Dec 2025 14:49:50 +0000
Files and hashes: 1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: QP1pVFWSt2qsETOWUqJMli7vgfQhJIpkqYgD9xX/Ysc=)
2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: mHUNvL3zJnpmbPqxHDIgKHTL5AEKLo79So94ufeiHA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 14:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13564 (0x34fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Validity
Not Before: Dec 22 14:49:50 2025 GMT
Not After : Dec 29 14:49:50 2025 GMT
Subject: CN=69495a8f-115d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:e8:49:1e:35:0b:ce:3a:4f:b9:90:21:1e:
57:c2:1b:c1:21:57:b4:a8:75:52:87:1b:2b:3d:7b:
46:45:f3:8d:fc:9f:91:f9:85:1e:22:8c:93:72:5b:
71:0f:8c:24:ff:27:83:31:df:16:ca:96:55:c3:a8:
75:2f:1c:9d:87:18:0f:5c:31:e0:c9:ac:7f:79:1b:
60:de:ad:3c:5e:bb:b4:a4:55:db:ea:26:2c:03:f8:
47:8e:1b:e8:00:11:40:f4:80:15:d8:dc:0b:85:c9:
e0:bf:bd:98:21:25:16:44:75:08:d9:58:c6:46:9a:
52:f8:81:00:de:e3:8e:19:fb:6d:2c:44:4a:90:f7:
29:d1:6d:6d:6d:f4:55:65:f1:2e:e1:77:d9:18:bf:
1c:db:04:22:cc:1a:02:23:23:ed:a6:4d:54:84:af:
63:9c:27:ff:86:94:7b:50:3b:ed:64:bd:53:6a:d0:
b6:64:e0:66:34:10:28:49:78:5e:c5:4d:f4:02:26:
94:ed:52:5e:6d:83:70:d1:de:33:8a:fd:ae:b8:72:
28:9b:08:15:2e:62:e2:b4:f9:d4:54:cd:28:1c:79:
4e:8d:7c:46:9a:f9:67:e5:9c:fd:93:d0:25:c3:81:
2f:b7:cb:f1:40:f4:2e:26:fc:7b:3f:dc:a9:c1:fa:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:66:66:89:7E:77:ED:3D:57:4B:9C:48:4B:D8:CA:C2:02:BE:FC:A4
X509v3 Authority Key Identifier:
keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:99:4e:01:a2:34:ba:b8:e7:e0:3d:bf:7b:cf:cf:33:93:92:
c5:70:39:fa:96:f8:69:0d:0e:8b:f4:ba:b5:2c:4e:69:3e:ae:
ef:28:4a:22:1c:e9:80:52:f6:07:b8:79:e4:cf:e8:d0:61:ee:
57:a9:3c:be:da:21:a5:95:51:0e:0f:b4:21:47:83:ed:11:08:
86:3e:79:ca:6f:3a:8a:8c:b6:aa:29:2b:c5:2a:27:17:84:31:
fe:fa:00:12:2e:da:1c:f2:be:73:05:be:3d:d7:90:6f:17:ab:
86:6b:12:25:75:d9:00:93:3a:28:3b:14:85:58:65:e3:72:11:
79:3b:75:26:fc:ea:8b:1a:11:05:5f:55:cf:23:c7:fa:4e:cc:
a5:d0:5e:3a:38:a8:a6:05:3f:bb:15:14:b1:30:8c:c6:6d:bb:
cd:87:61:a6:28:a8:a8:65:ca:bf:c9:66:2f:55:ba:b7:07:ba:
3c:47:85:9d:35:5a:72:59:47:53:0a:98:02:97:54:24:f1:7d:
8b:c6:6e:12:a5:42:ff:88:0f:b8:5e:dc:c2:0f:85:ea:b6:85:
b6:6a:02:a8:ff:b7:45:31:bf:e7:68:aa:51:18:91:6e:b0:e9:
1e:f2:c5:6d:29:9a:98:13:94:6d:6d:0b:29:37:61:ae:3f:ec:
c2:72:c9:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM3NzQxMTAvBgNVBAUTKERCMThBN0NBNDQ2MjFCNTY1M0MyMDA0Mzk0NzZCM0Yy
QTM4MDg1M0UwHhcNMjUxMjIyMTQ0OTUwWhcNMjUxMjI5MTQ0OTUwWjAYMRYwFAYD
VQQDDA02OTQ5NWE4Zi0xMTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuD/oSR41C846T7mQIR5XwhvBIVe0qHVShxsrPXtGRfON/J+R+YUeIoyTcltx
D4wk/yeDMd8WypZVw6h1LxydhxgPXDHgyax/eRtg3q08Xru0pFXb6iYsA/hHjhvo
ABFA9IAV2NwLhcngv72YISUWRHUI2VjGRppS+IEA3uOOGfttLERKkPcp0W1tbfRV
ZfEu4XfZGL8c2wQizBoCIyPtpk1UhK9jnCf/hpR7UDvtZL1TatC2ZOBmNBAoSXhe
xU30AiaU7VJebYNw0d4ziv2uuHIomwgVLmLitPnUVM0oHHlOjXxGmvln5Zz9k9Al
w4Evt8vxQPQuJvx7P9ypwfr27wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBmZol+
d+09V0ucSEvYysICvvykMB8GA1UdIwQYMBaAFNsYp8pEYhtWU8IAQ5R2s/KjgIU+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzc3NC81Nzk4ODdCNjFE
OTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcxWlR3Z0JEbEhhejhxT0Fo
VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ4aW55a1JpRzFaVHdnQkRsSGF6OHFPQWhUNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Qzc3NC81Nzk4ODdCNjFEOTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcx
WlR3Z0JEbEhhejhxT0FoVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqmU4BojS6uOfgPb97z88zk5LFcDn6lvhpDQ6L9Lq1LE5pPq7vKEoi
HOmAUvYHuHnkz+jQYe5XqTy+2iGllVEOD7QhR4PtEQiGPnnKbzqKjLaqKSvFKicX
hDH++gASLtoc8r5zBb4915BvF6uGaxIlddkAkzooOxSFWGXjchF5O3Um/OqLGhEF
X1XPI8f6Tsyl0F46OKimBT+7FRSxMIzGbbvNh2GmKKioZcq/yWYvVbq3B7o8R4Wd
NVpyWUdTCpgCl1Qk8X2Lxm4SpUL/iA+4XtzCD4XqtoW2agKo/7dFMb/naKpRGJFu
sOke8sVtKZqYE5RtbQspN2GuP+zCcslO
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:35 2025 by rpki-client