This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
File: rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json)
Hash identifier: hpQKiWHMxSs0txhwjZGIYEbS9AWhBgGc/xGHZ4L5pww=
Subject key identifier: BC:9A:E0:13:5B:78:FC:75:5F:C7:1C:99:D0:B7:67:61:F0:9F:0D:59
Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
Certificate issuer: /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Certificate serial: 025E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
Manifest number: 0259
Signing time: Tue 23 Dec 2025 00:41:02 +0000
Manifest this update: Tue 23 Dec 2025 00:41:02 +0000
Manifest next update: Tue 30 Dec 2025 00:41:02 +0000
Files and hashes: 1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: CiQO208MuoPfJpYF8C6G1MOmqtYylsR8UpPynVNOJ7s=)
2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: ct9JRtk3Ka50ZvbEYcBL6mLhkKvm7y5g0JZUChw/aVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 00:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 606 (0x25e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918CD53, serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Validity
Not Before: Dec 23 00:41:02 2025 GMT
Not After : Dec 30 00:41:02 2025 GMT
Subject: CN=6949e51e-0f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:8d:e5:5c:8d:31:15:e8:80:bf:50:30:96:
a4:32:31:45:f7:44:1d:eb:31:16:7d:c5:24:3b:2a:
d9:3d:6c:42:d8:47:e7:74:8b:fe:b5:bf:eb:88:6b:
f1:fb:da:f8:57:97:80:63:05:e6:89:a8:57:ff:47:
de:ea:27:95:ba:37:6e:94:e6:5f:b7:4f:07:a9:7b:
6d:61:6c:95:f8:33:46:c0:7a:e3:22:db:a1:1b:50:
20:44:7c:bc:9f:d6:6c:0f:75:85:c9:7e:19:4b:ce:
79:74:6a:1f:ff:8e:f7:6f:39:e7:a1:83:60:cd:a0:
74:e2:e3:c3:ed:6f:43:76:6c:af:b7:24:77:3b:a7:
ca:c3:27:7c:2e:78:7e:c3:bf:d2:3d:93:37:5f:be:
d1:61:14:c4:a8:df:31:8a:94:da:03:59:84:6c:15:
7f:c7:dd:75:6a:2d:23:67:47:95:e4:9f:2a:88:47:
3a:5f:c2:1a:0f:a9:cb:27:d2:a6:6c:ec:d3:06:0f:
c2:67:02:52:21:35:3a:99:56:03:2c:ed:dd:29:d8:
77:16:81:b8:c7:bf:af:06:63:f6:01:a6:9e:89:06:
f2:6d:bd:77:69:e3:c9:c2:9d:78:a1:e0:39:4c:d5:
62:5c:03:64:af:b7:c9:59:a6:8e:89:30:9f:92:33:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:E0:13:5B:78:FC:75:5F:C7:1C:99:D0:B7:67:61:F0:9F:0D:59
X509v3 Authority Key Identifier:
keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:cf:36:11:ea:72:c5:fb:29:59:7f:c6:e6:30:2d:82:26:fd:
59:57:bc:60:72:6d:28:ae:68:32:89:ee:3c:e8:80:a6:e5:05:
b9:22:91:75:5c:6e:03:d9:e4:33:d0:c3:2e:ee:b3:53:31:b8:
8b:87:2f:21:94:52:f0:fa:c8:95:4c:49:df:da:0c:6e:48:56:
79:3d:88:36:5e:fa:fc:d3:e1:d6:5c:c5:61:67:c6:44:8b:81:
b6:08:99:43:80:48:2e:cc:5f:5e:b0:85:86:85:71:8e:94:36:
8c:ba:44:0b:4b:b2:9e:64:bd:0f:03:de:05:36:c2:b1:0e:06:
41:a6:9f:53:fb:95:61:f6:f4:7b:19:96:0b:8c:35:37:f2:65:
14:1f:be:4f:07:1e:b4:fa:f1:97:9c:66:40:be:d3:2a:3c:8b:
d7:a8:2d:35:7d:61:1c:d3:de:06:4a:8e:f4:99:74:5c:35:2a:
59:a2:23:b0:ec:34:5e:8f:78:e4:a2:3c:82:59:b5:20:14:b5:
2e:82:2c:d9:68:85:9e:97:c1:19:d6:bd:4e:d6:1f:ca:41:d1:
f9:85:4d:b5:0b:e6:6a:39:a6:77:1b:bb:03:c1:a3:6e:ca:7a:
64:f7:a1:cd:10:b0:89:54:30:56:f5:30:1a:46:3c:1f:5d:7c:
93:8c:a3:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENENTMxMTAvBgNVBAUTKEFENkQ0N0I3NTg1M0I2OEUyRjE0QUY3NEM2NUE3NjRF
RTREMUQ5OUMwHhcNMjUxMjIzMDA0MTAyWhcNMjUxMjMwMDA0MTAyWjAYMRYwFAYD
VQQDDA02OTQ5ZTUxZS0wZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVKN5VyNMRXogL9QMJakMjFF90Qd6zEWfcUkOyrZPWxC2EfndIv+tb/riGvx
+9r4V5eAYwXmiahX/0fe6ieVujdulOZft08HqXttYWyV+DNGwHrjItuhG1AgRHy8
n9ZsD3WFyX4ZS855dGof/473bznnoYNgzaB04uPD7W9DdmyvtyR3O6fKwyd8Lnh+
w7/SPZM3X77RYRTEqN8xipTaA1mEbBV/x911ai0jZ0eV5J8qiEc6X8IaD6nLJ9Km
bOzTBg/CZwJSITU6mVYDLO3dKdh3FoG4x7+vBmP2AaaeiQbybb13aePJwp14oeA5
TNViXANkr7fJWaaOiTCfkjOlpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLya4BNb
ePx1X8ccmdC3Z2Hwnw1ZMB8GA1UdIwQYMBaAFK1tR7dYU7aOLxSvdMZadk7k0dmc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0Q1My9DMTE1Mzc5ODRB
MUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRvNHZGSzkweGxwMlR1VFIy
WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JXMUh0MWhUdG80dkZLOTB4bHAyVHVUUjJady5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Q0Q1My9DMTE1Mzc5ODRBMUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRv
NHZGSzkweGxwMlR1VFIyWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAizzYR6nLF+ylZf8bmMC2CJv1ZV7xgcm0ormgyie486ICm5QW5IpF1
XG4D2eQz0MMu7rNTMbiLhy8hlFLw+siVTEnf2gxuSFZ5PYg2Xvr80+HWXMVhZ8ZE
i4G2CJlDgEguzF9esIWGhXGOlDaMukQLS7KeZL0PA94FNsKxDgZBpp9T+5Vh9vR7
GZYLjDU38mUUH75PBx60+vGXnGZAvtMqPIvXqC01fWEc094GSo70mXRcNSpZoiOw
7DRej3jkojyCWbUgFLUugizZaIWel8EZ1r1O1h/KQdH5hU21C+ZqOaZ3G7sDwaNu
ynpk96HNELCJVDBW9TAaRjwfXXyTjKN9
-----END CERTIFICATE-----
Generated at Wed Dec 24 16:01:10 2025 by rpki-client