This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
File: W71m6GM06ZgX4sbVvOt9rQIPyoo.mft (raw, json)
Hash identifier: 1gmwwF3vg4jhCkR/OLeCxGx7Yq70OxTWNDertRE+YXA=
Subject key identifier: 1B:FC:29:E2:64:EF:95:C6:9B:A7:07:6E:4A:FA:BB:D2:F6:EE:13:05
Authority key identifier: 5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
Certificate issuer: /CN=A918E80E/serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
Certificate serial: 0944
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
Manifest number: 0937
Signing time: Thu 18 Dec 2025 19:45:50 +0000
Manifest this update: Thu 18 Dec 2025 19:45:49 +0000
Manifest next update: Thu 25 Dec 2025 19:45:49 +0000
Files and hashes: 1: W71m6GM06ZgX4sbVvOt9rQIPyoo.crl (hash: EETqvdM+kTDu7WZuowXa5IgCivH2jajZv8T4QUUuOzk=)
2: 15C562A2B1CD11EA9A31DA7DC4F9AE02.roa (hash: NkR/nF+Vmt/Gcc86ZcEETph8N4g/HWKaL5fwvV3ReJM=)
3: 16745A82B1CD11EA9A31DA7DC4F9AE02.roa (hash: glSctB67kcgRNgcA0b3/jW6A3plk8SZgtFK9qI9gKIo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2372 (0x944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E80E, serialNumber=5BBD66E86334E99817E2C6D5BCEB7DAD020FCA8A
Validity
Not Before: Dec 18 19:45:49 2025 GMT
Not After : Dec 25 19:45:49 2025 GMT
Subject: CN=694459ee-11c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:6a:ad:35:86:d1:2b:9b:cc:90:d9:f1:0a:
04:07:cd:22:e1:1a:4a:65:a0:9d:5f:30:70:9e:f7:
67:a1:99:88:a2:c9:12:fe:f4:a0:3e:46:00:dd:31:
c8:31:d3:b3:2c:3a:5f:05:00:9a:c8:3e:ec:2d:89:
be:18:d0:92:b5:10:10:93:1e:c3:e9:98:db:35:cd:
03:9e:3c:7c:39:1a:6d:2f:72:df:7e:7a:80:ef:00:
a0:58:03:63:ad:09:6a:73:3e:08:e9:98:8d:84:9a:
c4:c6:2f:5c:ea:66:6f:86:93:ff:c7:7b:34:90:21:
ba:aa:4e:41:b3:a7:ed:32:a6:50:9a:19:30:6f:0d:
05:d2:fa:82:a2:96:4d:de:1b:73:4e:dd:b0:7e:e8:
1c:00:a9:5e:bf:1a:c2:5c:17:f6:28:4f:27:0e:35:
4d:1f:5f:2a:da:47:b9:8b:d5:3c:64:28:b7:b3:8c:
e1:30:55:88:0b:10:c4:08:3b:6f:3c:40:33:cc:34:
b0:6c:46:8b:e4:45:71:46:3f:78:b1:f5:49:0b:5d:
c7:f5:9f:c2:7e:72:27:89:37:42:4a:31:65:8a:fd:
82:ae:bf:3c:f9:3d:26:9a:b2:59:87:a2:2a:9d:15:
f6:eb:9e:a0:88:04:9b:7f:4c:a5:73:6f:05:e4:22:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FC:29:E2:64:EF:95:C6:9B:A7:07:6E:4A:FA:BB:D2:F6:EE:13:05
X509v3 Authority Key Identifier:
keyid:5B:BD:66:E8:63:34:E9:98:17:E2:C6:D5:BC:EB:7D:AD:02:0F:CA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W71m6GM06ZgX4sbVvOt9rQIPyoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E80E/00E92504B1CC11EAA6A3CD7CC4F9AE02/W71m6GM06ZgX4sbVvOt9rQIPyoo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:46:5e:0f:aa:6b:56:06:3f:07:4e:1b:cc:8d:8b:90:97:de:
96:59:9d:2b:7c:3d:52:7e:5a:66:07:1c:7a:9e:7b:37:05:1f:
94:82:23:8e:0b:75:ba:02:eb:2a:3b:ae:5d:4b:84:ad:d6:50:
e4:38:e0:0b:8e:43:ec:f3:6f:fa:be:f7:c4:3c:3c:16:f0:6e:
51:37:a1:41:b9:67:02:91:a7:15:13:4a:32:45:1a:7c:49:f8:
75:7d:11:63:e7:d9:71:e1:5e:cb:03:cd:a2:32:c0:41:85:f6:
b4:75:7d:2a:e9:68:54:43:87:ba:46:9e:7a:b9:39:ed:f7:8c:
27:6e:53:92:13:0b:fd:95:21:ac:11:fc:53:51:6d:f4:14:24:
2c:26:bd:75:12:2f:89:29:3e:77:1b:7d:25:f0:b5:7b:05:49:
02:c5:f0:db:a4:db:c6:e0:be:5f:fe:51:35:ed:85:73:06:8b:
ed:c4:40:3f:3a:bb:e3:21:b3:07:9e:74:7d:83:cd:b9:3f:71:
81:1e:5e:d0:b3:81:ae:a3:84:fe:4c:94:8d:1e:37:d2:e7:ca:
b7:c8:e3:5e:76:22:e3:54:b8:34:6c:de:09:99:2f:47:20:5d:
c6:5e:d4:66:d1:81:f9:b2:2c:c4:07:44:cb:f0:57:d7:5f:d6:
6c:5f:54:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU4MEUxMTAvBgNVBAUTKDVCQkQ2NkU4NjMzNEU5OTgxN0UyQzZENUJDRUI3REFE
MDIwRkNBOEEwHhcNMjUxMjE4MTk0NTQ5WhcNMjUxMjI1MTk0NTQ5WjAYMRYwFAYD
VQQDDA02OTQ0NTllZS0xMWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuH9qrTWG0SubzJDZ8QoEB80i4RpKZaCdXzBwnvdnoZmIoskS/vSgPkYA3THI
MdOzLDpfBQCayD7sLYm+GNCStRAQkx7D6ZjbNc0Dnjx8ORptL3LffnqA7wCgWANj
rQlqcz4I6ZiNhJrExi9c6mZvhpP/x3s0kCG6qk5Bs6ftMqZQmhkwbw0F0vqCopZN
3htzTt2wfugcAKlevxrCXBf2KE8nDjVNH18q2ke5i9U8ZCi3s4zhMFWICxDECDtv
PEAzzDSwbEaL5EVxRj94sfVJC13H9Z/CfnIniTdCSjFliv2Crr88+T0mmrJZh6Iq
nRX2656giASbf0ylc28F5CK/swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBv8KeJk
75XGm6cHbkr6u9L27hMFMB8GA1UdIwQYMBaAFFu9ZuhjNOmYF+LG1bzrfa0CD8qK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTgwRS8wMEU5MjUwNEIx
Q0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZaZ1g0c2JWdk90OXJRSVB5
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c3MW02R00wNlpnWDRzYlZ2T3Q5clFJUHlvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTgwRS8wMEU5MjUwNEIxQ0MxMUVBQTZBM0NEN0NDNEY5QUUwMi9XNzFtNkdNMDZa
Z1g0c2JWdk90OXJRSVB5b28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsRl4PqmtWBj8HThvMjYuQl96WWZ0rfD1SflpmBxx6nns3BR+UgiOO
C3W6AusqO65dS4St1lDkOOALjkPs82/6vvfEPDwW8G5RN6FBuWcCkacVE0oyRRp8
Sfh1fRFj59lx4V7LA82iMsBBhfa0dX0q6WhUQ4e6Rp56uTnt94wnblOSEwv9lSGs
EfxTUW30FCQsJr11Ei+JKT53G30l8LV7BUkCxfDbpNvG4L5f/lE17YVzBovtxEA/
OrvjIbMHnnR9g825P3GBHl7Qs4Guo4T+TJSNHjfS58q3yONediLjVLg0bN4JmS9H
IF3GXtRm0YH5sizEB0TL8FfXX9ZsX1TD
-----END CERTIFICATE-----
Generated at Fri Dec 19 12:40:21 2025 by rpki-client