This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
File: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json)
Hash identifier: KlK5AMJFxs6/LHH7Wylz+OJ5BL8302ZfP4gvkbf1p3o=
Subject key identifier: AB:D2:EC:5E:07:02:CC:14:B5:27:8C:4B:54:88:78:04:8D:AB:5C:55
Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76
Certificate issuer: /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
Certificate serial: 01AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
Manifest number: 01A8
Signing time: Fri 05 Dec 2025 01:27:40 +0000
Manifest this update: Fri 05 Dec 2025 01:27:40 +0000
Manifest next update: Fri 12 Dec 2025 01:27:40 +0000
Files and hashes: 1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: 4paPlaN4YJJ5XdBqpgWwFP1WtdKa7cXFR5cwiHJBqcc=)
2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: gAXQ6XOA3NODkbVV4z4rY8FPGvcx9W1CdIeenZ4k+xI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl
rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 427 (0x1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
Validity
Not Before: Dec 5 01:27:40 2025 GMT
Not After : Dec 12 01:27:40 2025 GMT
Subject: CN=6932350c-87da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:4e:cb:92:a7:1a:31:e2:a5:5b:fd:b7:25:
2e:2c:3f:0d:94:5d:23:96:06:37:d3:db:7b:d3:38:
6d:25:af:35:44:0a:da:3b:8d:85:69:0e:bc:9c:d6:
34:5a:80:d9:97:59:b6:eb:e3:bc:fb:1d:c9:f1:e1:
2a:c2:1b:06:22:ab:8f:8d:c3:2c:ad:bd:c0:ce:37:
51:37:44:43:01:d4:95:e3:12:34:3e:a2:79:f0:56:
97:4a:d9:1a:d9:5d:76:67:a8:cd:2a:2b:2d:3b:c8:
fb:65:d4:c5:c3:6c:8a:fb:61:9e:bd:11:e6:f9:ac:
91:fc:a5:ed:9d:a1:88:b5:7a:ea:1d:64:ed:ad:b7:
95:14:28:cb:0f:22:91:8b:38:ad:01:54:de:db:19:
d4:b2:6b:44:21:63:e0:d5:84:b7:c6:d4:bf:71:8f:
b6:d0:d0:b5:3d:55:c4:88:d4:75:92:0b:07:0c:af:
e9:fb:3b:49:09:1b:24:af:16:ac:b7:53:9d:ca:00:
c8:4e:d7:eb:ae:04:a5:6e:c9:b4:3a:bb:9d:94:43:
b7:b5:04:f5:3d:53:86:8f:fb:8b:e6:ba:cd:b9:38:
df:2a:e9:ee:21:e7:0f:62:67:26:71:4f:a7:7f:4d:
14:6b:e4:93:57:54:35:f1:72:a1:bd:bc:01:7f:80:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D2:EC:5E:07:02:CC:14:B5:27:8C:4B:54:88:78:04:8D:AB:5C:55
X509v3 Authority Key Identifier:
keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:7e:6f:a3:0d:26:60:31:d9:5c:8c:9b:9e:bb:53:6b:8c:15:
68:60:0f:f4:9b:6c:ac:37:3a:7c:73:76:88:5b:61:a1:ed:05:
e8:9a:83:7f:ca:bc:6a:0f:ac:ec:39:b5:33:79:09:f5:38:97:
ff:46:ee:3e:be:37:29:37:c2:f4:5a:91:69:ed:66:0e:f6:84:
53:79:c8:21:d0:30:90:6f:da:87:d8:06:85:79:a7:c6:74:2c:
04:47:48:1e:6b:bf:0d:17:93:72:57:cb:7a:ac:b2:c1:74:56:
d9:ec:b8:fd:82:5a:44:66:2e:18:fd:c4:3d:e4:e6:98:28:08:
8e:fb:ea:dd:12:81:ae:ad:47:f1:d8:fb:3e:25:80:ee:d8:ec:
1e:c9:32:18:56:e7:10:4b:0c:fd:af:e8:be:96:fd:74:df:c3:
7f:f5:74:8b:58:bb:60:36:77:9f:3f:68:8c:80:3b:7d:c5:c9:
23:7b:4f:30:92:c8:74:8d:7b:9a:0c:75:25:5f:d5:d9:6c:eb:
ef:64:e2:a5:96:4a:45:2e:b7:4a:83:f8:e9:39:0d:e0:36:ec:
1d:75:58:ae:5d:64:64:e3:5c:3e:ea:09:90:c1:67:1f:4b:16:
5d:c1:be:af:ef:11:71:55:74:06:1e:f0:ea:d3:ce:70:5b:f0:
1b:07:98:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:34:43 2025 by rpki-client