This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
File: 5G6s3CFDhcFCA0Z05Gxo57vilSU.mft (raw, json)
Hash identifier: 4YGCeqYG4cdc5Hdb0uxU+LjzOmr3hq5CMMVAdiwdgG0=
Subject key identifier: F8:9D:FB:28:C9:AC:3B:63:42:14:66:1C:60:A5:CB:02:61:AF:FE:A1
Authority key identifier: E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25
Certificate issuer: /CN=A91372E6/serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
Certificate serial: 0138
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
Manifest number: 0134
Signing time: Sun 07 Dec 2025 02:53:20 +0000
Manifest this update: Sun 07 Dec 2025 02:53:20 +0000
Manifest next update: Sun 14 Dec 2025 02:53:20 +0000
Files and hashes: 1: 5G6s3CFDhcFCA0Z05Gxo57vilSU.crl (hash: 0HYxubeOaEstgxz+MCx3fGmIGNkvbho9dV4dwVrsIuo=)
2: 44B42A0EFDE511EEAD5A6432C4F9AE02.roa (hash: N/lCfyLCfQ6pGJZnFWlWQxmi4U70D1DfmNioR3drqK8=)
3: 8C3FF9AEC8A811F08595E263C4F9AE02.roa (hash: JQn/WEVXli5+7O2NyEEFRxRf0sjn39WeQsrq6fJCIUk=)
4: 0009532CC8A811F0BA23CF62C4F9AE02.roa (hash: yj3+9Or3fJ55ijczJSobCY4PjRqCSpaINl/up2BYiy4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl
rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 02:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 312 (0x138)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91372E6, serialNumber=E46EACDC214385C142034674E46C68E7BBE29525
Validity
Not Before: Dec 7 02:53:20 2025 GMT
Not After : Dec 14 02:53:20 2025 GMT
Subject: CN=6934ec20-3a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:9f:c1:81:40:31:f6:e7:df:60:7d:1d:d2:
31:bc:09:e6:a4:ac:ba:00:22:93:79:e6:bc:55:d4:
11:24:11:a4:ef:b0:4d:ab:5c:bf:28:c4:31:f0:bc:
69:57:dc:aa:82:37:fd:c9:67:f4:a6:be:28:33:a8:
2c:42:cd:c0:e5:96:85:12:88:24:bd:f4:35:3d:aa:
04:a0:07:eb:fe:6c:41:01:ef:5c:4e:85:51:17:29:
da:94:28:a1:a2:32:c7:17:11:08:de:3b:b3:5d:f8:
88:57:c6:55:de:13:65:7b:ba:a6:56:49:e1:07:52:
ae:6c:89:53:dc:45:fe:20:98:b5:bf:fe:e9:89:b6:
db:72:87:99:6a:9d:cf:c4:4b:7c:b1:e7:bb:fa:c4:
2b:0a:f9:0e:37:f1:5f:6c:4e:1c:16:4b:50:5d:64:
68:5d:45:f8:82:1c:61:30:cd:a7:c7:7e:50:9f:f9:
04:7f:4c:d2:ec:b1:55:30:50:b7:b4:56:2d:fd:fd:
db:8d:2a:24:79:16:93:da:76:7c:1f:9e:dc:db:9f:
cb:2b:f9:66:66:9d:87:95:98:5c:9b:07:da:ca:cb:
6a:07:69:b4:ba:8e:c3:41:fc:c1:b5:e0:49:84:d9:
96:05:9e:13:f9:06:7b:03:b1:45:c0:0a:cd:de:3b:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9D:FB:28:C9:AC:3B:63:42:14:66:1C:60:A5:CB:02:61:AF:FE:A1
X509v3 Authority Key Identifier:
keyid:E4:6E:AC:DC:21:43:85:C1:42:03:46:74:E4:6C:68:E7:BB:E2:95:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5G6s3CFDhcFCA0Z05Gxo57vilSU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91372E6/F3590824FDE311EEAA777D11C4F9AE02/5G6s3CFDhcFCA0Z05Gxo57vilSU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:e6:74:15:cd:17:d5:25:a4:b0:18:a4:e4:49:57:2a:1f:80:
af:bc:a1:0a:4b:04:4f:10:ab:cd:28:51:c7:cd:ce:46:79:61:
1e:4d:e3:a8:02:94:85:20:f4:ef:df:8e:0d:20:e4:bb:db:63:
42:91:0c:d0:ea:8c:d3:c1:d9:91:35:a0:08:5f:e7:c7:04:b0:
f1:d0:6e:01:90:ee:ae:13:9a:a6:39:54:92:97:bb:ff:53:e0:
ac:e1:0d:7a:66:db:75:78:89:a6:6a:22:33:85:5e:5c:08:0a:
20:6e:0a:30:16:2b:1b:14:88:d3:38:d0:f3:89:d9:4c:be:6f:
19:bd:8a:07:25:ba:ce:45:75:94:cb:ee:99:a3:0c:1a:89:b4:
4b:85:94:0e:42:52:26:4e:12:1d:71:ed:32:2b:99:12:a8:4b:
95:b8:56:33:b9:e7:62:80:a1:67:50:73:5f:30:2d:eb:3a:6c:
14:b5:cb:c1:ce:24:4b:40:bf:99:74:f8:bd:82:25:da:78:67:
90:b1:98:dc:16:67:24:51:5b:f9:ef:3b:42:45:38:cd:c8:5d:
43:2b:16:0b:36:e5:cd:5c:a1:b5:6b:37:41:38:13:82:26:23:
02:7c:4d:dc:f3:60:57:6b:89:79:3c:4c:7a:5b:83:2f:1e:05:
91:5d:23:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzcyRTYxMTAvBgNVBAUTKEU0NkVBQ0RDMjE0Mzg1QzE0MjAzNDY3NEU0NkM2OEU3
QkJFMjk1MjUwHhcNMjUxMjA3MDI1MzIwWhcNMjUxMjE0MDI1MzIwWjAYMRYwFAYD
VQQDEw02OTM0ZWMyMC0zYTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoymfwYFAMfbn32B9HdIxvAnmpKy6ACKTeea8VdQRJBGk77BNq1y/KMQx8Lxp
V9yqgjf9yWf0pr4oM6gsQs3A5ZaFEogkvfQ1PaoEoAfr/mxBAe9cToVRFynalCih
ojLHFxEI3juzXfiIV8ZV3hNle7qmVknhB1KubIlT3EX+IJi1v/7pibbbcoeZap3P
xEt8see7+sQrCvkON/FfbE4cFktQXWRoXUX4ghxhMM2nx35Qn/kEf0zS7LFVMFC3
tFYt/f3bjSokeRaT2nZ8H57c25/LK/lmZp2HlZhcmwfaystqB2m0uo7DQfzBteBJ
hNmWBZ4T+QZ7A7FFwArN3jtAnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPid+yjJ
rDtjQhRmHGClywJhr/6hMB8GA1UdIwQYMBaAFORurNwhQ4XBQgNGdORsaOe74pUl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzJFNi9GMzU5MDgyNEZE
RTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhjRkNBMFowNUd4bzU3dmls
U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVHNnMzQ0ZEaGNGQ0EwWjA1R3hvNTd2aWxTVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NzJFNi9GMzU5MDgyNEZERTMxMUVFQUE3NzdEMTFDNEY5QUUwMi81RzZzM0NGRGhj
RkNBMFowNUd4bzU3dmlsU1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBH5nQVzRfVJaSwGKTkSVcqH4CvvKEKSwRPEKvNKFHHzc5GeWEeTeOo
ApSFIPTv344NIOS722NCkQzQ6ozTwdmRNaAIX+fHBLDx0G4BkO6uE5qmOVSSl7v/
U+Cs4Q16Ztt1eImmaiIzhV5cCAogbgowFisbFIjTONDzidlMvm8ZvYoHJbrORXWU
y+6ZowwaibRLhZQOQlImThIdce0yK5kSqEuVuFYzuedigKFnUHNfMC3rOmwUtcvB
ziRLQL+ZdPi9giXaeGeQsZjcFmckUVv57ztCRTjNyF1DKxYLNuXNXKG1azdBOBOC
JiMCfE3c82BXa4l5PEx6W4MvHgWRXSN4
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:25:51 2025 by rpki-client