This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json)
Hash identifier: XWMa56i8VadFXoMLok/cAkq6F0IyTywBXI99TLEaAm4=
Subject key identifier: FA:D2:5F:51:0F:C2:83:31:CF:8D:9A:AF:68:2B:CC:2B:9C:EA:C5:36
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial: 0BAA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
Manifest number: 0B93
Signing time: Mon 22 Dec 2025 18:33:23 +0000
Manifest this update: Mon 22 Dec 2025 18:33:23 +0000
Manifest next update: Mon 29 Dec 2025 18:33:23 +0000
Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: iJP5JMHHDX7zn9pIhQuka+Vu5aumWWbUni2Eokjlzrc=)
2: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: 1JlSj0jibLQBYUZDl8FfRdFm1NJZVGdp1slha+X5ouk=)
3: E324E2F6F40611EAA5B2244FC4F9AE02.roa (hash: JjlHcRfhosfD6kjrFJUxOquQczoFwZ+SbHdvTDfS9h8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2986 (0xbaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Validity
Not Before: Dec 22 18:33:23 2025 GMT
Not After : Dec 29 18:33:23 2025 GMT
Subject: CN=69498ef3-c3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:10:3d:81:1d:ae:b5:2f:0b:ba:02:b5:df:cb:
52:43:d4:1e:db:b5:a3:bd:5d:ab:6e:7a:52:c6:df:
b9:6f:0a:11:10:26:03:5c:57:88:44:b5:fe:36:bf:
03:46:52:96:a7:66:7f:bc:81:22:88:49:60:6e:65:
8b:62:d6:9c:73:06:ac:57:87:d8:b8:c8:8c:e3:bb:
80:9b:58:26:20:b1:ae:70:b7:30:78:96:61:76:fe:
c2:3b:73:27:81:8b:4c:a2:52:b6:60:1f:f8:5b:6c:
a8:bf:7a:bd:2a:d3:3a:89:de:0e:a5:81:0e:1b:c1:
3e:70:23:cb:60:91:59:ab:42:0d:9f:b4:ba:d2:6e:
7f:e4:cf:75:05:7c:06:75:81:45:d8:3a:cb:10:a7:
04:ee:b8:6f:d8:fc:ba:10:51:76:30:ff:3b:74:c2:
db:cc:cc:0c:ca:fb:87:1f:78:45:bf:b8:f3:dd:dc:
32:e8:13:34:2e:80:68:d7:0e:e9:73:6e:c1:67:d9:
3a:6f:1a:c1:aa:6a:b5:4c:1d:58:6d:4c:e8:37:74:
11:4c:21:1d:a6:c3:33:5e:32:72:16:63:99:b5:88:
2d:b0:d8:e9:98:1a:1a:5c:a4:e8:e8:f4:f0:e1:40:
fb:b1:13:46:f7:63:6a:37:09:40:7e:0c:2e:4d:88:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D2:5F:51:0F:C2:83:31:CF:8D:9A:AF:68:2B:CC:2B:9C:EA:C5:36
X509v3 Authority Key Identifier:
keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:76:7b:6c:7d:5b:55:68:81:b3:71:7d:b9:4e:6c:ce:a1:90:
64:e5:ce:76:af:45:05:c0:93:c3:85:8f:18:1e:2f:ac:45:88:
ec:8d:0e:65:b1:57:9a:13:40:2f:85:e3:71:d1:37:b9:14:a7:
0f:a0:3b:27:97:27:0e:11:63:dc:48:09:47:30:ed:75:cf:3a:
01:77:5c:78:44:a5:e0:21:5f:3b:26:b7:40:5e:72:cd:a7:54:
f2:27:3a:e8:5a:0d:67:fe:85:67:a8:01:bd:c1:44:92:a7:ec:
0b:2a:44:99:56:8d:c3:ce:4a:93:50:cd:9b:20:6b:99:5d:ca:
04:a5:8a:7f:86:c9:8f:78:1c:4f:5a:71:f4:02:1a:eb:33:54:
9a:76:83:df:18:d0:3f:ed:9d:9f:a6:f4:e2:b7:df:93:4f:95:
53:1c:61:45:88:0f:cb:1c:28:8e:42:6c:bd:0f:86:48:05:43:
97:87:14:e4:1f:76:ff:aa:c5:31:ef:89:30:f2:0d:b7:6e:66:
bb:08:5b:30:e6:a2:df:7b:39:c3:6f:90:02:80:c7:2d:1f:11:
1f:b9:9e:fd:76:c3:f2:0a:aa:b3:27:02:34:38:b2:54:08:90:
30:35:33:43:31:ab:60:97:19:33:94:a9:ee:b7:e2:f4:dd:d5:
41:58:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 03:50:36 2025 by rpki-client