This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
File: AtoTJ_UsQCOjghrIeFDJF9joNSc.mft (raw, json)
Hash identifier: QCMeZpQ2ylbFng4uHY3QapaHZHXIg6katEKx2CfkDpE=
Subject key identifier: 74:B6:BF:74:44:14:B2:EF:7B:11:CF:E7:01:2C:E2:FE:F5:94:54:D7
Authority key identifier: 02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
Certificate issuer: /CN=A918DB7E/serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
Certificate serial: F7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
Manifest number: F5
Signing time: Wed 17 Dec 2025 04:47:15 +0000
Manifest this update: Wed 17 Dec 2025 04:47:14 +0000
Manifest next update: Wed 24 Dec 2025 04:47:14 +0000
Files and hashes: 1: AtoTJ_UsQCOjghrIeFDJF9joNSc.crl (hash: uUmxT9lZVsirAcGal0kB8DR3IYbPHkpbx6OJDTWiATQ=)
2: CE1E14AE64DC11EFBE5A023AC4F9AE02.roa (hash: 54Ea1mTVG8VfmRw/L9YxXLSKvOdr6tHDGBcwWayi7ek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl
rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 03:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 247 (0xf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DB7E, serialNumber=02DA1327F52C4023A3821AC87850C917D8E83527
Validity
Not Before: Dec 17 04:47:14 2025 GMT
Not After : Dec 24 04:47:14 2025 GMT
Subject: CN=694235d3-8f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:44:38:3f:38:27:da:70:9d:54:0b:5e:5e:
94:cf:7b:b5:ee:c7:02:d1:05:0e:4a:c6:c6:23:93:
7a:dd:c6:fd:2e:f2:3d:ce:69:f7:5c:c3:1c:7a:37:
b2:b3:97:88:54:bb:fc:cc:b7:0c:af:31:cc:d0:f1:
6d:d7:ee:40:b3:94:b0:cb:20:20:93:d6:0c:69:5b:
ca:ed:ce:f2:21:b8:35:8a:99:0b:33:17:47:e8:e1:
fe:d8:9d:e2:10:be:c7:e2:e5:02:f1:f8:b8:be:a3:
26:18:85:3c:ef:08:8a:f9:00:88:d6:18:7b:66:52:
60:ac:bc:e5:56:82:76:a6:0b:c8:55:85:94:6e:e8:
30:27:27:5c:02:45:66:a7:dc:a1:1c:64:06:4e:72:
ca:2e:97:eb:1c:b1:cc:23:1e:b8:91:07:a2:bb:48:
25:7b:7d:8f:34:bd:06:0d:a6:12:72:14:30:9f:63:
85:c5:d8:55:03:96:bd:c0:3f:28:6e:08:68:f0:db:
0e:47:ee:c8:24:82:34:68:14:9b:99:4a:5c:b1:7d:
25:40:2f:cc:7a:f1:3e:b1:5d:ef:84:05:38:ec:87:
9c:e6:92:4d:85:f2:19:81:2c:00:ff:72:83:0c:fb:
98:f8:83:bb:13:10:07:28:3e:64:d5:68:1d:eb:9d:
70:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B6:BF:74:44:14:B2:EF:7B:11:CF:E7:01:2C:E2:FE:F5:94:54:D7
X509v3 Authority Key Identifier:
keyid:02:DA:13:27:F5:2C:40:23:A3:82:1A:C8:78:50:C9:17:D8:E8:35:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AtoTJ_UsQCOjghrIeFDJF9joNSc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB7E/9C3FECDC64DC11EFB31EA839C4F9AE02/AtoTJ_UsQCOjghrIeFDJF9joNSc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:09:a5:af:7e:3a:14:14:18:49:e7:20:ec:84:e5:3b:3f:17:
39:f4:e6:0f:00:78:d0:eb:2f:a2:0a:d5:e1:a2:d4:e3:d7:75:
da:62:6d:ac:9e:a6:31:a2:22:22:06:5b:dd:65:a4:10:6a:05:
e8:19:a6:9d:e3:cb:dd:1e:51:ba:a9:81:42:b9:21:b4:32:e5:
1c:90:80:d8:80:0d:b3:20:1d:a9:21:3e:14:a1:4c:82:27:ef:
5d:20:0e:40:4b:9e:89:d2:37:17:52:ee:f6:d2:9b:a9:56:88:
8d:d2:05:af:2c:b2:d1:54:2e:cc:57:81:44:d9:89:2d:10:8b:
f0:5e:8f:52:fa:d7:53:b6:91:59:34:de:8d:00:7c:45:59:b6:
28:36:58:2b:d1:6f:a7:dc:aa:ae:c3:6d:2a:7a:e2:48:1c:8a:
06:07:95:15:ce:bc:6b:7e:24:bc:26:95:43:81:a8:1a:73:cb:
1a:6f:17:f8:76:c9:13:27:be:d3:47:e8:44:35:f1:5f:27:25:
09:84:50:c6:cb:67:d2:70:7d:22:70:1b:a3:fd:6c:18:1c:5d:
8c:eb:ed:ec:72:22:14:a5:41:73:66:d4:09:b4:6d:01:0f:ba:
0d:40:2a:57:b3:e3:5d:72:f3:0a:fc:78:dc:20:97:5f:8d:77:
28:6d:57:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OERCN0UxMTAvBgNVBAUTKDAyREExMzI3RjUyQzQwMjNBMzgyMUFDODc4NTBDOTE3
RDhFODM1MjcwHhcNMjUxMjE3MDQ0NzE0WhcNMjUxMjI0MDQ0NzE0WjAYMRYwFAYD
VQQDDA02OTQyMzVkMy04ZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxjREOD84J9pwnVQLXl6Uz3u17scC0QUOSsbGI5N63cb9LvI9zmn3XMMcejey
s5eIVLv8zLcMrzHM0PFt1+5As5SwyyAgk9YMaVvK7c7yIbg1ipkLMxdH6OH+2J3i
EL7H4uUC8fi4vqMmGIU87wiK+QCI1hh7ZlJgrLzlVoJ2pgvIVYWUbugwJydcAkVm
p9yhHGQGTnLKLpfrHLHMIx64kQeiu0gle32PNL0GDaYSchQwn2OFxdhVA5a9wD8o
bgho8NsOR+7IJII0aBSbmUpcsX0lQC/MevE+sV3vhAU47Iec5pJNhfIZgSwA/3KD
DPuY+IO7ExAHKD5k1Wgd651wcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHS2v3RE
FLLvexHP5wEs4v71lFTXMB8GA1UdIwQYMBaAFALaEyf1LEAjo4IayHhQyRfY6DUn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI3RS85QzNGRUNEQzY0
REMxMUVGQjMxRUE4MzlDNEY5QUUwMi9BdG9USl9Vc1FDT2pnaHJJZUZESkY5am9O
U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0F0b1RKX1VzUUNPamdockllRkRKRjlqb05TYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
REI3RS85QzNGRUNEQzY0REMxMUVGQjMxRUE4MzlDNEY5QUUwMi9BdG9USl9Vc1FD
T2pnaHJJZUZESkY5am9OU2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCiCaWvfjoUFBhJ5yDshOU7Pxc59OYPAHjQ6y+iCtXhotTj13XaYm2s
nqYxoiIiBlvdZaQQagXoGaad48vdHlG6qYFCuSG0MuUckIDYgA2zIB2pIT4UoUyC
J+9dIA5AS56J0jcXUu720pupVoiN0gWvLLLRVC7MV4FE2YktEIvwXo9S+tdTtpFZ
NN6NAHxFWbYoNlgr0W+n3Kquw20qeuJIHIoGB5UVzrxrfiS8JpVDgagac8sabxf4
dskTJ77TR+hENfFfJyUJhFDGy2fScH0icBuj/WwYHF2M6+3sciIUpUFzZtQJtG0B
D7oNQCpXs+NdcvMK/HjcIJdfjXcobVdf
-----END CERTIFICATE-----
Generated at Wed Dec 17 06:15:03 2025 by rpki-client