This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
File: 5c15IB7rS9nw73ZW5zJfVxZffqA.mft (raw, json)
Hash identifier: dqbhfkBbNH2IObPpcyY2NI9iy/QOXc7OXgA7oVggoUs=
Subject key identifier: 67:31:C7:46:BE:50:65:C3:AF:50:C9:A3:95:E4:4E:51:8E:0F:C0:0E
Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
Certificate issuer: /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Certificate serial: 082A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
Manifest number: 081B
Signing time: Sat 06 Dec 2025 20:01:59 +0000
Manifest this update: Sat 06 Dec 2025 20:01:58 +0000
Manifest next update: Sat 13 Dec 2025 20:01:58 +0000
Files and hashes: 1: 5c15IB7rS9nw73ZW5zJfVxZffqA.crl (hash: qmFnVz63cTItXk8jttbZPcaUf+6UqVwD7ZYLjyKP9rY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl
rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2090 (0x82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911218D, serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Validity
Not Before: Dec 6 20:01:58 2025 GMT
Not After : Dec 13 20:01:58 2025 GMT
Subject: CN=69348bb7-2395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:3a:47:30:45:e4:5a:22:47:9b:c7:23:98:
98:9f:e6:18:7a:78:db:ad:ea:4c:3d:48:cd:6a:a1:
b9:44:39:48:b7:2d:fe:4c:17:8b:f1:77:cd:a3:dd:
15:18:c0:c9:e5:50:a2:b5:d2:53:40:30:9f:8d:77:
e8:bc:c5:d8:1b:3b:ea:dd:a2:b5:c9:4d:35:f1:fc:
12:1d:5a:9c:b5:bd:ae:c5:8a:6e:88:02:d3:19:d5:
cb:f6:ec:0c:ec:59:83:1a:ef:27:2e:df:a0:79:c1:
57:bc:41:ef:3d:91:ab:84:08:88:75:a4:0f:01:d5:
f3:17:4f:5b:e3:7b:c8:47:81:2e:3c:0f:83:26:fd:
68:d6:b9:05:e6:da:2a:a4:e5:b4:8f:88:ed:10:f9:
0b:e7:6a:a5:bb:a6:6a:b1:d5:27:3a:67:a4:23:d1:
98:a6:d7:c6:0d:f7:0b:2e:80:df:bc:56:cf:2c:ec:
ac:e0:2e:f9:fa:08:a2:70:3a:da:1e:41:f3:16:c2:
ac:1f:4f:43:98:24:36:53:1d:b9:3b:dc:f3:4a:8c:
fc:d3:e2:67:83:7d:34:97:2a:8d:e6:d5:82:9e:5c:
db:86:1e:46:98:74:6c:08:c6:cd:82:68:6b:b2:2b:
ef:42:2f:0a:8f:d3:48:90:b3:ee:a7:cc:7b:cf:8b:
31:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:31:C7:46:BE:50:65:C3:AF:50:C9:A3:95:E4:4E:51:8E:0F:C0:0E
X509v3 Authority Key Identifier:
keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:80:d1:6d:88:a0:b7:77:d0:65:9e:e3:02:d5:68:81:1c:6c:
1c:81:a0:67:b2:f5:25:68:f4:79:67:c5:82:d3:ab:c6:24:1f:
e2:a3:88:4a:b3:68:fa:00:81:06:a2:5c:76:7b:99:cb:64:46:
76:2e:1c:6e:cb:c7:64:92:6e:35:cb:76:2d:26:55:6c:68:9b:
d7:e8:30:4e:e7:c1:1f:a5:eb:17:80:c5:f6:73:d1:8b:d6:7d:
c5:8e:55:13:2c:67:2e:1c:e6:59:52:eb:7c:02:b0:95:f6:09:
ac:64:56:a3:c8:e0:df:3a:0b:8a:d8:d0:b4:1e:a7:e3:86:98:
84:cf:8d:87:13:bd:fa:98:77:c6:55:4f:d4:1d:44:19:d1:03:
5b:ff:5d:07:7f:09:21:5c:e3:b6:a2:f9:7f:ba:cf:48:66:47:
10:18:8a:85:d8:03:37:15:eb:ed:d0:f8:b5:c2:bf:22:8f:60:
b1:d5:4b:09:19:ea:b0:ba:d5:9c:86:16:00:70:90:6a:c6:bd:
f9:46:29:59:43:2d:aa:3a:80:07:ac:1c:2a:14:36:31:0c:9a:
78:62:3c:4c:88:73:52:a9:c3:35:b5:f8:d0:4f:72:60:22:af:
e2:2a:5d:ae:a9:69:d9:ef:f2:42:dd:78:5b:9e:b5:c2:a7:a3:
46:27:2a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:16:28 2025 by rpki-client