This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
File: _5APJL-aiYLZX4RHqnubtPesRjk.mft (raw, json)
Hash identifier: ASoc/aoAPe+7lTl/Ddsb4bho1TbFLlFzQQEhMUfEoBE=
Subject key identifier: 80:55:02:41:49:F2:9A:00:7B:47:F2:59:AD:5F:BA:C5:35:12:32:A9
Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Certificate serial: 0A17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
Manifest number: 0A07
Signing time: Thu 04 Dec 2025 19:07:08 +0000
Manifest this update: Thu 04 Dec 2025 19:07:08 +0000
Manifest next update: Thu 11 Dec 2025 19:07:08 +0000
Files and hashes: 1: _5APJL-aiYLZX4RHqnubtPesRjk.crl (hash: fNCyj22xZTUZZjMHHDMAGd/krH530O7uTmWwMmPTZJ8=)
2: D3037D06738E11ED8283FF53C4F9AE02.roa (hash: oKxH1slQnBcxxB/Xh/Duy/VUqwWP+wlSdyJOsRinTcw=)
3: D1A6B6D0738E11ED8283FF53C4F9AE02.roa (hash: oEOFUnEt8M3b87Re+i1Xzb3Xnn+XVIaIOLo4ivZ01FI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2583 (0xa17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91221EF, serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Validity
Not Before: Dec 4 19:07:08 2025 GMT
Not After : Dec 11 19:07:08 2025 GMT
Subject: CN=6931dbdc-4a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:58:3d:36:c0:4f:56:2c:5a:f7:eb:ea:6c:
38:07:92:86:29:ba:ae:24:cb:b5:41:c8:06:ac:1f:
43:0e:d9:80:ed:b9:0a:a8:75:d7:33:52:51:ec:9d:
27:cc:48:75:60:3a:ec:21:a7:90:9c:25:ac:15:a2:
54:47:29:8f:c1:24:65:69:67:91:fb:b3:24:a1:55:
b0:07:6c:47:75:49:4e:e0:6e:59:33:52:0f:6b:e8:
64:a8:70:ed:6e:41:23:9b:4b:1f:c8:10:ec:e9:a5:
f7:2f:15:2f:03:c3:7a:30:88:4d:45:ae:c9:e5:63:
b0:53:2f:20:40:72:3b:0f:93:cc:a8:ef:2a:a7:b3:
c2:63:12:31:55:f5:bd:63:89:4e:92:0c:59:18:cf:
62:d1:4c:ca:96:37:d5:a0:f8:7b:28:77:61:b4:64:
e7:33:bd:4d:d7:37:34:d1:86:8d:cc:76:76:59:13:
39:9f:ff:2e:85:1e:20:6e:9f:44:cc:72:00:21:b8:
9c:1c:c0:57:af:eb:17:f5:f7:a6:e2:55:62:c2:db:
ef:97:fb:07:fe:73:dc:d7:e1:2d:dd:01:0e:9f:9f:
06:45:93:ea:7d:7a:5a:a3:23:a7:90:23:50:a7:aa:
b6:fb:ef:52:c5:90:e3:78:1a:af:b5:71:77:37:6e:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:55:02:41:49:F2:9A:00:7B:47:F2:59:AD:5F:BA:C5:35:12:32:A9
X509v3 Authority Key Identifier:
keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:9c:12:f0:5d:57:a7:22:60:f4:c1:e9:ad:ec:ba:d9:95:1b:
c2:8a:3d:a1:3f:72:bb:0a:4a:69:c3:94:d3:f9:a7:85:12:78:
fe:5f:12:b7:83:4a:f1:56:09:fa:5b:d2:90:17:c5:d3:63:c9:
ad:bc:a8:7e:0f:6b:62:31:3a:93:3f:90:1b:3f:c3:d8:71:24:
54:27:b3:18:e8:e8:01:32:4e:fa:64:e9:5c:bf:42:c6:68:6c:
41:86:ac:4d:20:72:8d:83:db:41:5c:09:02:87:91:86:80:5d:
43:4c:95:a2:41:49:c3:ee:a4:23:f0:2a:3d:d4:08:c0:9b:26:
22:43:89:6d:49:43:9a:68:9f:16:16:02:31:0c:27:f3:c9:9c:
07:87:a6:1a:ed:dd:0b:9d:7c:27:32:c5:5f:c7:48:6d:e2:88:
dc:8e:0a:dc:24:f7:60:2c:41:d9:2b:24:99:54:5f:89:8d:45:
48:73:14:f0:6d:2e:ab:98:27:43:87:6b:8d:21:ed:48:b2:b5:
56:cc:57:eb:74:77:f6:0d:66:88:85:99:b0:0b:47:90:76:56:
46:e1:e3:d3:80:07:56:a0:17:5f:cd:94:d3:b8:8b:a4:1c:5f:
84:14:17:85:39:46:05:a4:0d:4f:b4:df:33:1f:78:bc:e5:97:
cd:2a:9a:4f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICChcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0
RjdBQzQ2MzkwHhcNMjUxMjA0MTkwNzA4WhcNMjUxMjExMTkwNzA4WjAYMRYwFAYD
VQQDEw02OTMxZGJkYy00YTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuFtYPTbAT1YsWvfr6mw4B5KGKbquJMu1QcgGrB9DDtmA7bkKqHXXM1JR7J0n
zEh1YDrsIaeQnCWsFaJURymPwSRlaWeR+7MkoVWwB2xHdUlO4G5ZM1IPa+hkqHDt
bkEjm0sfyBDs6aX3LxUvA8N6MIhNRa7J5WOwUy8gQHI7D5PMqO8qp7PCYxIxVfW9
Y4lOkgxZGM9i0UzKljfVoPh7KHdhtGTnM71N1zc00YaNzHZ2WRM5n/8uhR4gbp9E
zHIAIbicHMBXr+sX9fem4lViwtvvl/sH/nPc1+Et3QEOn58GRZPqfXpaoyOnkCNQ
p6q2++9SxZDjeBqvtXF3N25VWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBVAkFJ
8poAe0fyWa1fusU1EjKpMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5
MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MjFFRi82RjJGRUJENjg5MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZ
TFpYNFJIcW51YnRQZXNSamsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2nBLwXVenImD0wemt7LrZlRvCij2hP3K7Ckppw5TT+aeFEnj+XxK3
g0rxVgn6W9KQF8XTY8mtvKh+D2tiMTqTP5AbP8PYcSRUJ7MY6OgBMk76ZOlcv0LG
aGxBhqxNIHKNg9tBXAkCh5GGgF1DTJWiQUnD7qQj8Co91AjAmyYiQ4ltSUOaaJ8W
FgIxDCfzyZwHh6Ya7d0LnXwnMsVfx0ht4ojcjgrcJPdgLEHZKySZVF+JjUVIcxTw
bS6rmCdDh2uNIe1IsrVWzFfrdHf2DWaIhZmwC0eQdlZG4ePTgAdWoBdfzZTTuIuk
HF+EFBeFOUYFpA1PtN8zH3i85ZfNKppP
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:33 2025 by rpki-client