This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier: siIftBDjdfMKUUqLMzpSxfl7XBEQcLIeWX6dxn5mp1o=
Subject key identifier: 05:46:7F:98:8A:4B:98:59:82:73:19:7A:B0:71:A9:FF:54:52:E5:64
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 705AEB95744A332F9AC4F60F6A1979B7F430203E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number: 06B8
Signing time: Tue 23 Dec 2025 00:26:25 +0000
Manifest this update: Tue 23 Dec 2025 00:21:25 +0000
Manifest next update: Wed 24 Dec 2025 04:11:25 +0000
Files and hashes: 1: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: iwxixaxpgxbdfhn+v3MuTrdcpIwwRvUj+WDFLzC1FjU=)
2: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
3: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
4: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
5: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: aiTwY7exOIWYXIKbSyXz+xb7jVL186qs815q9Rt7CIg=)
6: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: Y8US0Ocdq6iuACcuu6blfuO/mWF61f4U7kbk1PWrIBw=)
7: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
8: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 04:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:5a:eb:95:74:4a:33:2f:9a:c4:f6:0f:6a:19:79:b7:f4:30:20:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Dec 23 00:21:25 2025 GMT
Not After : Dec 24 04:11:25 2025 GMT
Subject: CN=05467F988A4B98598273197AB071A9FF5452E564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:64:35:8c:a7:38:37:43:35:a0:f2:53:d4:34:
4c:8b:e5:8e:81:91:ae:c6:f5:12:e2:c2:c9:9d:67:
4d:29:68:42:c7:28:5e:a4:c3:f5:1b:21:4c:df:65:
73:a8:a6:3f:50:0b:80:47:5e:7c:6e:ee:c7:31:dd:
f2:71:ff:15:5d:84:e2:5d:5f:b9:18:e3:bd:af:4a:
f1:15:6a:9d:b8:c6:37:6f:b2:c7:84:c5:8f:18:d6:
28:bb:a5:0e:89:c9:35:7d:e7:66:ec:04:a0:d4:af:
55:b9:0a:48:c6:d2:84:56:1e:41:f1:69:3a:00:9b:
c4:54:d3:75:3c:8e:cf:87:6d:f6:90:f1:c2:2f:b7:
ee:1d:47:92:0a:78:9b:a9:f6:0b:de:cb:78:5b:ff:
c0:80:6b:0f:97:c0:ac:0c:9a:2a:24:8c:fc:2a:0a:
ea:01:20:90:b1:e2:0e:c3:e1:9a:11:b2:f7:a0:b3:
f2:5e:9f:d4:6f:f2:e7:af:75:ed:ae:23:39:41:f3:
3b:5d:5c:20:be:51:be:8d:c5:f9:ac:9f:19:a2:10:
03:70:5e:0e:ea:71:e3:22:c9:da:60:02:24:15:91:
f4:f8:88:9c:99:b7:02:44:93:cc:f8:b8:42:3b:02:
53:f1:4b:9a:d6:60:3f:0c:2a:20:ad:e0:66:b4:0e:
0c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:7F:98:8A:4B:98:59:82:73:19:7A:B0:71:A9:FF:54:52:E5:64
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ac:2a:93:3c:f3:58:39:9c:70:38:ad:7c:d7:c7:74:aa:6a:
61:a3:b1:cc:6d:29:31:d9:b7:b4:b3:21:38:af:42:87:a1:52:
8f:62:dd:a5:22:9f:d8:39:d0:04:3e:9e:53:93:02:73:21:dd:
2f:6b:4a:63:a8:a9:98:93:c4:55:b8:b0:1b:ff:1a:17:42:af:
9b:00:45:fb:96:ec:49:44:3f:2d:b9:eb:2f:7c:fe:f0:7b:41:
5b:de:4a:09:fd:a9:d7:f7:6e:2f:29:44:83:47:83:08:71:ac:
67:c8:51:10:45:14:0e:72:4e:c7:8b:d1:3b:f6:91:53:59:82:
11:db:67:22:d6:7f:50:08:5a:f8:05:77:79:5a:5c:5c:79:19:
18:13:dd:84:c9:eb:b7:ad:33:ec:5a:81:ad:84:79:d9:64:a5:
7c:f5:05:24:33:63:e8:5f:4f:85:35:3d:6d:f4:89:88:66:1a:
7a:6a:91:98:de:96:cc:37:5b:d9:be:23:94:60:2a:a9:33:cb:
d3:a3:8a:18:a4:22:be:f5:22:07:1d:25:84:54:04:2a:c7:62:
1e:6d:f8:7d:60:8b:f6:f3:1e:05:9b:d7:5d:39:03:07:c9:01:
ae:9d:ff:e4:15:c7:78:28:76:2a:a3:9f:c7:7c:5a:14:3c:c3:
61:23:51:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:40:59 2025 by rpki-client