This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json)
Hash identifier: BUjc6Uz/DWMfmgrKCQcocC1txP+6GS1INKSxGik4UJY=
Subject key identifier: 98:D3:F7:C3:B6:28:DE:98:B6:8A:E1:81:60:53:77:3A:11:1D:61:DF
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial: 95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
Manifest number: 94
Signing time: Tue 23 Dec 2025 05:22:27 +0000
Manifest this update: Tue 23 Dec 2025 05:22:27 +0000
Manifest next update: Tue 30 Dec 2025 05:22:27 +0000
Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: n04TyIP+6EhRsPgLc0vQoHIURzhSQ1/SA/S2pGNS1vY=)
2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: FptmFY6XaETE0B5U8dohhb5+IR8DEmGWZVTlRovACOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:22:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149 (0x95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Validity
Not Before: Dec 23 05:22:27 2025 GMT
Not After : Dec 30 05:22:27 2025 GMT
Subject: CN=694a2713-8d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:14:e9:e5:29:46:07:64:ae:47:ba:3a:ba:
93:69:f0:32:2d:8a:f5:86:8b:10:e7:32:5d:dc:13:
b4:74:71:0a:ea:cb:a8:ac:57:75:e0:9f:5b:e0:07:
25:d2:2b:5f:87:33:da:99:7a:9e:8b:2d:38:c4:2d:
e3:8c:e3:88:e4:44:8a:e2:b4:fd:7c:80:b7:46:35:
59:c2:31:f8:8b:b3:ac:2a:d3:20:9f:f6:db:5d:75:
29:9c:40:f8:4c:e4:f1:94:f8:36:e4:4b:c5:71:6f:
63:93:f0:ab:b3:52:38:39:81:03:a5:1f:53:43:da:
7d:21:ed:3f:f6:c6:8f:98:07:ae:a3:7e:a6:6b:85:
2f:fe:13:ac:15:08:dc:e2:08:72:33:62:fe:6a:bf:
ad:87:e5:0d:b8:c2:2b:cb:e9:07:cf:4c:4b:29:66:
b5:5b:5b:e6:4c:df:f2:b8:cf:2b:44:7e:a7:f1:b7:
38:ce:86:bc:ea:89:37:cc:3c:a8:5e:7a:dc:da:40:
a0:81:a9:39:7f:20:2e:a5:9d:46:56:97:3d:59:b5:
fd:29:6a:a4:93:92:90:ba:63:d4:ee:6d:de:52:64:
1d:e9:16:19:f1:8c:4e:d7:26:c4:2a:2d:e2:ad:08:
af:a7:c7:bf:84:04:3e:22:ae:45:fa:40:40:da:0f:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D3:F7:C3:B6:28:DE:98:B6:8A:E1:81:60:53:77:3A:11:1D:61:DF
X509v3 Authority Key Identifier:
keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:05:03:b5:93:1c:da:f7:1f:79:3c:8f:08:c7:43:53:65:86:
de:db:e3:82:62:20:59:1c:87:7e:fd:2b:9d:dd:25:11:c9:97:
67:2e:c9:35:61:18:34:8b:4c:ae:93:4b:56:46:14:2b:8f:fe:
14:91:95:c7:9f:fe:5c:25:56:92:b7:fa:62:29:83:91:e0:53:
97:85:f2:0e:b8:49:5e:5e:bd:a4:b8:e4:29:dd:c3:d9:0b:57:
db:d7:d9:34:aa:47:35:54:a1:b1:e3:48:b7:b5:dd:79:c2:d1:
ee:fb:49:0b:10:ce:05:89:23:90:3d:51:0b:c7:77:e8:2c:20:
d0:43:ea:d7:4b:70:68:b7:e5:8f:43:89:62:2c:3e:79:f1:98:
65:f1:06:e6:03:96:21:08:f7:7a:5a:a2:f3:71:25:6c:3f:85:
e7:1e:6a:ce:95:32:10:de:65:24:57:21:54:e4:eb:da:22:e5:
98:bf:cf:0f:91:73:17:a2:1f:98:a7:b9:16:18:fe:5e:b4:12:
88:9f:a5:8e:81:9f:f3:ca:11:9f:42:93:65:df:a6:1b:3c:c6:
58:f1:44:ca:ff:a5:c4:f1:74:19:3c:60:dd:cf:cd:8c:b8:a1:
a4:75:31:89:64:c7:2a:fc:60:d5:e6:69:4b:c8:29:a2:05:72:
4f:4d:53:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEY5NjExMTAvBgNVBAUTKDRCRUVDNzRGNDc2RkIxNzFEQzhFREFGOTQ5MUQ2Q0My
N0JGODBFMkYwHhcNMjUxMjIzMDUyMjI3WhcNMjUxMjMwMDUyMjI3WjAYMRYwFAYD
VQQDDA02OTRhMjcxMy04ZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAydIU6eUpRgdkrke6OrqTafAyLYr1hosQ5zJd3BO0dHEK6suorFd14J9b4Acl
0itfhzPamXqeiy04xC3jjOOI5ESK4rT9fIC3RjVZwjH4i7OsKtMgn/bbXXUpnED4
TOTxlPg25EvFcW9jk/Crs1I4OYEDpR9TQ9p9Ie0/9saPmAeuo36ma4Uv/hOsFQjc
4ghyM2L+ar+th+UNuMIry+kHz0xLKWa1W1vmTN/yuM8rRH6n8bc4zoa86ok3zDyo
Xnrc2kCggak5fyAupZ1GVpc9WbX9KWqkk5KQumPU7m3eUmQd6RYZ8YxO1ybEKi3i
rQivp8e/hAQ+Iq5F+kBA2g8uUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjT98O2
KN6YtorhgWBTdzoRHWHfMB8GA1UdIwQYMBaAFEvux09Hb7Fx3I7a+UkdbMJ7+A4v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjk2MS8wNUIyMUIxMEZC
MEQxMUVGQjI0NjQzMjdDNEY5QUUwMi9TLTdIVDBkdnNYSGNqdHI1U1Ixc3dudjRE
aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1MtN0hUMGR2c1hIY2p0cjVTUjFzd252NERpOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Rjk2MS8wNUIyMUIxMEZCMEQxMUVGQjI0NjQzMjdDNEY5QUUwMi9TLTdIVDBkdnNY
SGNqdHI1U1Ixc3dudjREaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMBQO1kxza9x95PI8Ix0NTZYbe2+OCYiBZHId+/Sud3SURyZdnLsk1
YRg0i0yuk0tWRhQrj/4UkZXHn/5cJVaSt/piKYOR4FOXhfIOuEleXr2kuOQp3cPZ
C1fb19k0qkc1VKGx40i3td15wtHu+0kLEM4FiSOQPVELx3foLCDQQ+rXS3Bot+WP
Q4liLD558Zhl8QbmA5YhCPd6WqLzcSVsP4XnHmrOlTIQ3mUkVyFU5OvaIuWYv88P
kXMXoh+Yp7kWGP5etBKIn6WOgZ/zyhGfQpNl36YbPMZY8UTK/6XE8XQZPGDdz82M
uKGkdTGJZMcq/GDV5mlLyCmiBXJPTVPY
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:54 2025 by rpki-client