This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
File: IL0_f5mO1D1fxPhindDBiOx92uA.mft (raw, json)
Hash identifier: uEErDIL/2tWA0fYIuVYFeUVVtvJu5i1YyCLjPSpU0Ic=
Subject key identifier: C7:57:25:DA:45:F6:ED:91:D3:26:47:2A:2C:CA:50:5B:C5:CA:5F:92
Authority key identifier: 20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
Certificate issuer: /CN=A918E9A4/serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Certificate serial: 0195
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
Manifest number: 0192
Signing time: Fri 19 Dec 2025 02:39:54 +0000
Manifest this update: Fri 19 Dec 2025 02:39:54 +0000
Manifest next update: Fri 26 Dec 2025 02:39:54 +0000
Files and hashes: 1: IL0_f5mO1D1fxPhindDBiOx92uA.crl (hash: NjlpSi4iGHF+6tZnewcE572B8qDBC+E3xMeTtG+loaI=)
2: 10EB474C730311EE9ADB6C46C4F9AE02.roa (hash: NL2B/4GQlU6898TW3L7nz1mTW3uITWFr+ho/KHtzb/0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:39:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 405 (0x195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E9A4, serialNumber=20BD3F7F998ED43D5FC4F8629DD0C188EC7DDAE0
Validity
Not Before: Dec 19 02:39:54 2025 GMT
Not After : Dec 26 02:39:54 2025 GMT
Subject: CN=6944bafa-93ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:fe:eb:25:33:d6:7e:be:9e:1f:7f:4b:f0:
08:0f:be:29:56:2b:83:29:24:04:8c:8e:5b:d7:e4:
7a:19:0d:bf:70:cb:b9:db:dc:b8:59:72:d6:69:35:
3b:0c:9e:b8:64:0f:9b:3b:9a:19:7b:b7:ed:a6:af:
32:5a:55:85:03:7d:9a:36:43:55:79:de:b7:29:f5:
c6:57:f0:8c:6c:43:6d:fa:84:f5:db:0d:08:b8:63:
b4:fb:d0:30:ed:e0:3f:ec:b4:30:61:6f:cf:34:d2:
52:70:c7:6e:45:52:72:3b:ec:0e:1d:46:81:ac:1f:
4c:d7:47:e8:e8:c5:a0:58:f6:d6:9b:2e:c3:01:af:
33:32:f8:6c:bf:84:b7:95:bd:d5:7f:f0:8b:ee:21:
92:95:c6:eb:cb:28:a1:c4:79:a3:3e:2e:8c:33:21:
ea:95:64:f8:ec:e5:e4:64:ac:a5:57:04:c6:c1:27:
c7:05:23:78:37:72:89:e1:7b:bf:72:4b:c4:46:cc:
7b:2c:1a:83:98:a0:99:2c:48:fb:9b:fc:a3:f7:fd:
32:1e:a9:15:7f:21:92:2f:e5:de:b3:e7:01:00:4d:
c8:06:f8:32:d2:11:99:cc:8b:c4:3b:43:4e:5a:6b:
ab:56:c6:ba:f3:2c:9b:cd:8c:13:48:24:ef:e2:84:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:57:25:DA:45:F6:ED:91:D3:26:47:2A:2C:CA:50:5B:C5:CA:5F:92
X509v3 Authority Key Identifier:
keyid:20:BD:3F:7F:99:8E:D4:3D:5F:C4:F8:62:9D:D0:C1:88:EC:7D:DA:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IL0_f5mO1D1fxPhindDBiOx92uA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E9A4/0D5DC524730211EEB5CCC244C4F9AE02/IL0_f5mO1D1fxPhindDBiOx92uA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:df:ed:00:a5:5c:f6:bd:2b:d8:9f:9c:95:3c:55:34:da:28:
53:a8:b3:40:71:ea:35:cd:9e:38:4c:52:12:1f:09:57:42:5f:
af:7a:7b:c3:b6:cb:a9:26:8a:67:e8:47:72:09:51:10:2f:db:
38:f7:4a:5e:e5:0e:60:d8:78:95:ed:c5:79:a4:52:b1:b4:62:
88:61:05:bc:12:60:5f:ff:8d:15:15:83:7c:bf:e1:26:7a:1a:
ed:1b:b1:ea:19:2c:1e:2f:f0:63:5b:6e:f7:6d:fe:cc:58:a8:
23:12:6f:40:73:56:3b:5c:af:81:58:bd:13:8b:b9:e5:8a:f8:
98:ce:ed:e3:58:29:30:64:f7:18:d9:69:d6:0b:79:f5:f5:c1:
ec:9c:bf:69:d9:75:53:82:97:3b:9f:38:c3:87:c5:4d:7e:da:
0a:22:10:c1:f1:93:84:ed:eb:a8:d5:fb:ab:b2:e7:33:6d:b5:
4e:6c:36:ef:a4:f4:64:05:5a:31:62:95:e7:10:64:22:e4:91:
da:02:4e:f1:a0:77:6e:77:86:7a:44:68:3b:81:12:b9:f0:b1:
0f:30:bf:08:ce:75:21:28:89:d3:f2:ab:8e:c6:a6:8d:30:ec:
e5:42:09:60:65:45:ac:6a:74:7c:2b:84:2c:3a:da:fb:82:f5:
66:d7:16:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 04:51:21 2025 by rpki-client