This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
File: aNpOhaeYSz_RCu80x9HQDxtGRTE.mft (raw, json)
Hash identifier: EnWC3GT7r2f4wxOM1o7FZ3sf4Z9PZBcPSC8tNqNgMWc=
Subject key identifier: 8E:DA:31:C6:4C:9B:DB:EE:BF:7D:2C:2B:5E:BF:8A:06:EB:93:81:7F
Authority key identifier: 68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
Certificate issuer: /CN=A918D931/serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Certificate serial: 0809
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
Manifest number: 0802
Signing time: Mon 22 Dec 2025 20:21:59 +0000
Manifest this update: Mon 22 Dec 2025 20:21:58 +0000
Manifest next update: Mon 29 Dec 2025 20:21:58 +0000
Files and hashes: 1: aNpOhaeYSz_RCu80x9HQDxtGRTE.crl (hash: BFiP1yb9P52WJA3V0cELqFEE36HDo6CtA6Z0IohwOW8=)
2: F575D65A085A11EBA6864D71C4F9AE02.roa (hash: OzhrEAQM423OnNsjFX/pRulyswUafC9dzCD/mgitV0s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057 (0x809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D931, serialNumber=68DA4E85A7984B3FD10AEF34C7D1D00F1B464531
Validity
Not Before: Dec 22 20:21:58 2025 GMT
Not After : Dec 29 20:21:58 2025 GMT
Subject: CN=6949a867-6b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:48:d8:69:75:29:66:b5:85:c8:86:86:78:
35:dc:56:d8:a7:ff:b5:d2:89:7c:22:58:9b:ba:43:
da:15:21:be:68:69:b4:90:0a:a2:b4:8d:e4:bb:ca:
18:06:fb:cc:67:97:0c:dd:7f:2c:b5:c5:77:ad:70:
62:fe:b7:42:95:f3:c2:f3:ff:e6:34:e3:36:90:56:
dd:ff:2a:4e:96:f7:90:51:d2:85:aa:f4:18:d6:ac:
e4:0e:25:ba:41:d6:69:f3:cb:99:ce:be:94:40:10:
e8:cd:90:51:9f:12:4c:47:59:dd:82:14:1e:b8:23:
66:90:2c:60:d1:66:68:e9:0b:1c:75:97:d9:ca:82:
d7:09:ed:35:6b:e7:87:44:1d:9b:d2:1e:30:aa:54:
4a:d0:3e:a6:c6:d1:fe:3b:23:b9:d4:8a:93:28:2c:
53:d7:fd:66:d1:49:6e:84:99:95:03:5f:79:c6:e7:
62:c7:7f:63:3d:fe:b1:fd:5b:3e:77:8f:8d:bf:84:
5d:2c:3e:4b:d3:0f:a5:97:26:42:ef:e8:8d:15:82:
9b:2a:d8:95:e4:87:f4:91:d0:2e:1d:0c:b1:8e:b9:
2e:a4:44:93:c4:3c:ea:b5:79:7e:f7:e5:71:e3:3c:
a7:0f:35:2b:9e:66:87:b2:e3:32:61:4d:9a:fe:cd:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DA:31:C6:4C:9B:DB:EE:BF:7D:2C:2B:5E:BF:8A:06:EB:93:81:7F
X509v3 Authority Key Identifier:
keyid:68:DA:4E:85:A7:98:4B:3F:D1:0A:EF:34:C7:D1:D0:0F:1B:46:45:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aNpOhaeYSz_RCu80x9HQDxtGRTE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D931/FB5A5084085811EB93B7A66BC4F9AE02/aNpOhaeYSz_RCu80x9HQDxtGRTE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:f8:23:d4:14:6a:cf:b5:77:8c:ed:b6:5f:19:33:77:ac:c1:
3b:83:33:54:97:5f:46:71:3f:27:aa:1c:64:54:74:23:47:4f:
c3:13:64:81:d8:5b:1f:72:4c:f9:4a:fa:60:9b:40:51:93:5e:
b7:c0:5c:1c:95:a1:f2:df:0a:a5:42:30:1d:d2:e4:df:13:8d:
30:1f:e3:e3:ee:04:3c:33:78:45:fc:45:c5:83:7b:e7:c4:39:
e5:6d:2c:1a:8c:c8:72:45:16:c4:06:d2:60:88:7d:3e:7e:df:
bd:0d:13:20:c6:16:3d:8d:2e:5e:7d:7f:62:2e:23:2f:ba:05:
3c:be:61:00:f4:0b:e2:ce:2b:9d:5d:ff:bb:55:01:07:2b:96:
0d:44:0c:60:d7:05:3c:cf:67:66:5e:11:4a:d8:3d:6b:e2:93:
bc:31:93:62:8a:57:a4:8b:70:0a:3a:a7:0d:8f:a8:b5:6d:a6:
f7:95:0b:8e:fd:bd:c1:34:2e:72:d0:bb:e3:a1:69:12:f9:a9:
9b:3f:41:e7:50:4a:a7:6f:f9:58:98:97:a4:46:be:26:84:2f:
2a:50:07:c8:4c:86:83:34:7f:36:f9:67:78:5d:a6:d8:83:98:
14:54:a7:1e:f6:94:da:16:ae:d1:36:31:09:c1:64:16:0e:2f:
df:52:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:31 2025 by rpki-client