This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
File: s2MvNI2Zt8k-43IQ13M9KC8UWko.mft (raw, json)
Hash identifier: aCHm9o52imJRXv5AxjTcBtR4VqYgvXOQs4Ar6AoIliY=
Subject key identifier: 57:B5:7A:2A:95:24:4F:31:19:1F:B5:9F:09:DC:8E:D2:0B:A2:E1:0C
Authority key identifier: B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
Certificate issuer: /CN=A918E74A/serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
Manifest number: 0207
Signing time: Tue 23 Dec 2025 01:22:19 +0000
Manifest this update: Tue 23 Dec 2025 01:22:19 +0000
Manifest next update: Tue 30 Dec 2025 01:22:19 +0000
Files and hashes: 1: s2MvNI2Zt8k-43IQ13M9KC8UWko.crl (hash: fJdumYVFHeGngqWrharZbwHHR/EAh5LwEdb7uPFPOYw=)
2: A0B1EDDCC24011ED80139928C4F9AE02.roa (hash: iHBYWe6ERJgNXTSiQBDXZCN/lwk7Ia+HfQGsPjr80VQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E74A, serialNumber=B3632F348D99B7C93EE37210D7733D282F145A4A
Validity
Not Before: Dec 23 01:22:19 2025 GMT
Not After : Dec 30 01:22:19 2025 GMT
Subject: CN=6949eecb-1d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:52:c6:b5:a0:1f:dd:94:ab:f7:a4:ba:aa:
1c:5a:53:26:56:24:66:5b:87:6e:90:6c:2c:54:c8:
92:9f:0c:1b:9a:40:10:b1:07:bc:f2:33:80:5e:fb:
53:45:9e:e4:84:a3:22:34:d5:e6:1a:fd:54:dd:84:
86:c5:c0:f9:d9:c0:90:9e:cb:f6:6a:4c:34:f1:33:
32:c3:62:16:58:7d:45:ca:f6:f5:81:5a:ee:19:d0:
83:21:31:30:85:f7:fe:fb:45:e2:3e:70:d0:21:59:
1e:1d:68:3a:93:61:df:28:ea:0e:e2:ab:1b:9a:8b:
23:9c:2b:44:39:8f:19:d9:26:6d:4c:af:e5:2b:95:
0a:b0:e0:c0:25:04:43:74:6f:9c:aa:85:44:ba:1c:
0e:6b:00:22:aa:7e:e5:44:9c:81:c8:32:0f:b0:68:
18:e7:68:ef:7d:3e:a1:f2:01:12:52:87:c6:ac:e6:
a3:01:96:df:4d:46:fb:08:98:02:1a:ab:e7:b8:85:
a9:85:dd:f4:ca:2f:4e:04:90:4d:4b:b7:94:e1:fd:
32:68:13:01:d3:1c:eb:e2:74:6f:2b:28:70:ea:b0:
97:d0:ed:0c:86:c2:5c:92:af:2d:ee:df:2f:2c:35:
c1:e8:61:30:f1:2a:98:03:61:9f:86:f8:4d:07:58:
98:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B5:7A:2A:95:24:4F:31:19:1F:B5:9F:09:DC:8E:D2:0B:A2:E1:0C
X509v3 Authority Key Identifier:
keyid:B3:63:2F:34:8D:99:B7:C9:3E:E3:72:10:D7:73:3D:28:2F:14:5A:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2MvNI2Zt8k-43IQ13M9KC8UWko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E74A/B0682EE4C23B11ED91687921C4F9AE02/s2MvNI2Zt8k-43IQ13M9KC8UWko.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f8:40:38:71:93:60:f2:d9:5a:81:e7:de:9c:8d:d9:8d:7e:
4f:58:64:7a:b6:25:d2:de:7b:28:86:56:c3:eb:e3:1a:d4:e3:
c5:7b:fd:82:c6:68:00:0d:f6:f0:d6:92:2c:0e:2c:81:b2:b9:
d0:90:80:8d:82:5c:7c:17:4a:8c:0f:89:86:21:1b:eb:c8:be:
9f:0b:65:3b:42:ab:87:21:9c:06:19:ed:0a:c1:4c:9f:43:50:
e8:a0:48:02:62:0c:54:34:70:f6:07:31:08:0c:49:8d:d9:2b:
ca:f2:fa:29:ba:f6:00:35:47:ca:c2:31:0a:83:8e:12:fb:8d:
7b:e6:55:35:d2:ac:9c:b9:4c:95:01:f6:80:42:73:f9:f3:c3:
5a:2d:06:80:22:1e:0d:fd:a9:ea:82:bf:25:b8:f3:c5:55:c3:
ee:da:68:61:fa:18:a3:39:05:2d:e9:b3:c5:9b:2c:7a:4a:00:
3a:60:aa:c8:3e:0c:d6:bf:8c:de:55:64:94:ff:22:b1:22:ec:
07:8a:5c:2d:15:8a:d7:96:46:f0:48:be:f2:e2:c9:85:f6:19:
a2:f7:c6:65:d6:eb:f5:ee:d9:b7:36:2f:a3:94:15:6a:2e:cd:
45:61:2c:a0:99:2f:e2:8c:ce:6f:f6:7c:10:1f:15:16:d1:57:
13:d6:9a:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU3NEExMTAvBgNVBAUTKEIzNjMyRjM0OEQ5OUI3QzkzRUUzNzIxMEQ3NzMzRDI4
MkYxNDVBNEEwHhcNMjUxMjIzMDEyMjE5WhcNMjUxMjMwMDEyMjE5WjAYMRYwFAYD
VQQDDA02OTQ5ZWVjYi0xZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuF9SxrWgH92Uq/ekuqocWlMmViRmW4dukGwsVMiSnwwbmkAQsQe88jOAXvtT
RZ7khKMiNNXmGv1U3YSGxcD52cCQnsv2akw08TMyw2IWWH1Fyvb1gVruGdCDITEw
hff++0XiPnDQIVkeHWg6k2HfKOoO4qsbmosjnCtEOY8Z2SZtTK/lK5UKsODAJQRD
dG+cqoVEuhwOawAiqn7lRJyByDIPsGgY52jvfT6h8gESUofGrOajAZbfTUb7CJgC
GqvnuIWphd30yi9OBJBNS7eU4f0yaBMB0xzr4nRvKyhw6rCX0O0MhsJckq8t7t8v
LDXB6GEw8SqYA2GfhvhNB1iY9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFe1eiqV
JE8xGR+1nwncjtILouEMMB8GA1UdIwQYMBaAFLNjLzSNmbfJPuNyENdzPSgvFFpK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc0QS9CMDY4MkVFNEMy
M0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4ay00M0lRMTNNOUtDOFVX
a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3MyTXZOSTJadDhrLTQzSVExM005S0M4VVdrby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTc0QS9CMDY4MkVFNEMyM0IxMUVEOTE2ODc5MjFDNEY5QUUwMi9zMk12TkkyWnQ4
ay00M0lRMTNNOUtDOFVXa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBM+EA4cZNg8tlagefenI3ZjX5PWGR6tiXS3nsohlbD6+Ma1OPFe/2C
xmgADfbw1pIsDiyBsrnQkICNglx8F0qMD4mGIRvryL6fC2U7QquHIZwGGe0KwUyf
Q1DooEgCYgxUNHD2BzEIDEmN2SvK8vopuvYANUfKwjEKg44S+4175lU10qycuUyV
AfaAQnP588NaLQaAIh4N/anqgr8luPPFVcPu2mhh+hijOQUt6bPFmyx6SgA6YKrI
PgzWv4zeVWSU/yKxIuwHilwtFYrXlkbwSL7y4smF9hmi98Zl1uv17tm3Ni+jlBVq
Ls1FYSygmS/ijM5v9nwQHxUW0VcT1pqs
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:46 2025 by rpki-client