This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json)
Hash identifier: pBFYxR8qB8Mux8GRWXhDXiSd7ytJTNhVdDM6usWKL8w=
Subject key identifier: C4:DA:6F:E1:CE:7C:11:00:86:EF:16:81:CA:3B:9A:68:FF:35:EA:DB
Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Certificate serial: 34E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
Manifest number: 34E4
Signing time: Thu 04 Dec 2025 14:37:43 +0000
Manifest this update: Thu 04 Dec 2025 14:37:43 +0000
Manifest next update: Thu 11 Dec 2025 14:37:43 +0000
Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: CKGDJdXkUAUrjkovzuj3vOVsAH8OxyORVTdFnZ1Aw68=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 14:37:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13540 (0x34e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Validity
Not Before: Dec 4 14:37:43 2025 GMT
Not After : Dec 11 14:37:43 2025 GMT
Subject: CN=69319cb7-d9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:af:52:91:7c:59:67:84:3e:2a:62:2a:aa:d6:
a3:0e:74:b9:14:69:0d:5e:7f:bd:dc:fe:6d:a3:6e:
f0:4e:5c:a3:91:f8:54:24:6c:cc:79:67:e0:23:41:
68:5a:82:5d:46:0b:20:07:34:16:30:bd:6b:e3:c3:
6c:e1:23:22:86:d3:c9:0b:4e:1d:60:9a:f1:41:27:
f3:64:4f:f5:22:7a:16:e4:15:0c:f9:4b:08:1a:3e:
c2:9c:53:fe:a4:3b:40:3c:d5:64:ee:7c:0f:e7:b8:
97:3c:36:6b:e2:f2:36:73:0d:19:7c:75:05:90:99:
25:f7:23:b8:f4:68:36:a8:58:1f:d2:9a:5c:b0:56:
17:c6:8f:c4:fb:49:f4:31:f9:00:8c:7c:c6:66:ee:
96:94:68:c3:9c:05:86:47:38:a7:1c:e5:fc:4d:c1:
9b:b0:12:44:0d:9c:60:b9:11:2a:94:a1:75:8b:ec:
d8:ac:64:a6:7a:dc:52:26:f7:f5:d5:11:18:c1:37:
39:bb:2e:5b:5e:7d:db:2f:83:e7:7c:00:f0:84:07:
59:11:da:fb:a6:40:07:dc:9a:70:b9:43:90:64:6f:
8a:6c:60:92:6c:df:ff:48:b8:df:43:1b:b7:fd:a5:
08:26:aa:48:b8:08:21:b3:8a:4e:28:2b:64:f2:41:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DA:6F:E1:CE:7C:11:00:86:EF:16:81:CA:3B:9A:68:FF:35:EA:DB
X509v3 Authority Key Identifier:
keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:1c:09:9f:c3:8d:ce:7e:dd:24:d8:be:01:81:be:66:42:0d:
db:0b:b0:70:a4:95:49:63:08:bf:dd:e9:1f:23:b6:92:12:19:
a8:7e:74:7d:03:f5:42:41:a1:61:fb:75:e0:31:34:c4:75:c9:
b3:72:4c:03:2c:20:46:bb:45:a6:95:40:8c:10:11:8e:b2:92:
97:ab:13:e0:6b:f2:dc:60:a9:69:b8:bc:47:82:2e:e0:ca:db:
8e:32:17:a9:fb:eb:89:fd:ad:2b:60:59:5e:78:1e:94:eb:8c:
6d:2f:cc:a4:b5:84:70:69:32:b6:28:c8:29:bd:ec:49:e3:b0:
73:4b:32:89:c1:0f:b3:40:8c:9b:ed:72:ef:5d:17:96:d4:0e:
f3:5a:83:27:ae:c9:4e:43:d9:01:ea:4e:f6:6c:87:f1:b2:59:
3d:06:8d:98:44:c8:01:9b:2f:5d:87:e4:d7:3e:5a:3f:8a:5c:
26:65:80:9c:35:12:1d:e0:58:2b:34:83:5c:29:70:b9:ea:f5:
ac:bf:c9:b6:5a:0b:1c:92:f7:8c:d2:c2:3d:27:2b:b3:b7:5b:
45:a9:29:b8:97:4f:03:67:60:c2:ff:0b:bb:db:70:a3:b0:14:
db:af:50:3f:a6:2d:be:84:48:bb:b0:0e:42:3d:90:c5:ee:d4:
05:11:58:13
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdBMDMyQkVGQUVB
RDUzNzI3RDMwHhcNMjUxMjA0MTQzNzQzWhcNMjUxMjExMTQzNzQzWjAYMRYwFAYD
VQQDEw02OTMxOWNiNy1kOWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxK9SkXxZZ4Q+KmIqqtajDnS5FGkNXn+93P5to27wTlyjkfhUJGzMeWfgI0Fo
WoJdRgsgBzQWML1r48Ns4SMihtPJC04dYJrxQSfzZE/1InoW5BUM+UsIGj7CnFP+
pDtAPNVk7nwP57iXPDZr4vI2cw0ZfHUFkJkl9yO49Gg2qFgf0ppcsFYXxo/E+0n0
MfkAjHzGZu6WlGjDnAWGRzinHOX8TcGbsBJEDZxguREqlKF1i+zYrGSmetxSJvf1
1REYwTc5uy5bXn3bL4PnfADwhAdZEdr7pkAH3JpwuUOQZG+KbGCSbN//SLjfQxu3
/aUIJqpIuAghs4pOKCtk8kErFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTab+HO
fBEAhu8Wgco7mmj/NerbMB8GA1UdIwQYMBaAFOSzrj7SMXoj4ZvXoDK++urVNyfT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThFMC9EQzFFRkI0QTFE
OTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVpUGhtOWVnTXI3NjZ0VTNK
OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVMT3VQdEl4ZWlQaG05ZWdNcjc2NnRVM0o5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVp
UGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUHAmfw43Oft0k2L4Bgb5mQg3bC7BwpJVJYwi/3ekfI7aSEhmofnR9
A/VCQaFh+3XgMTTEdcmzckwDLCBGu0WmlUCMEBGOspKXqxPga/LcYKlpuLxHgi7g
ytuOMhep++uJ/a0rYFleeB6U64xtL8yktYRwaTK2KMgpvexJ47BzSzKJwQ+zQIyb
7XLvXReW1A7zWoMnrslOQ9kB6k72bIfxslk9Bo2YRMgBmy9dh+TXPlo/ilwmZYCc
NRId4FgrNINcKXC56vWsv8m2WgsckveM0sI9Jyuzt1tFqSm4l08DZ2DC/wu723Cj
sBTbr1A/pi2+hEi7sA5CPZDF7tQFEVgT
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:09 2025 by rpki-client