This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
File: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft (raw, json)
Hash identifier: sZxI2Drs557wcYlr7NWMCmiDvquPt86TsSynyNl9UEA=
Subject key identifier: 1B:F8:F4:0D:D6:28:C8:D8:C3:28:5F:2F:CA:74:3B:AC:81:E6:68:7D
Authority key identifier: E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73
Certificate issuer: /CN=A913ABFE/serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
Certificate serial: 01DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
Manifest number: 01CF
Signing time: Fri 05 Dec 2025 01:16:09 +0000
Manifest this update: Fri 05 Dec 2025 01:16:08 +0000
Manifest next update: Fri 12 Dec 2025 01:16:08 +0000
Files and hashes: 1: 5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl (hash: 85zQoj58Kn62Dj2po+2kA4AaUXqowfOfllW1DOfhvbc=)
2: F4C13F18066811F0B521BF2FC4F9AE02.roa (hash: 3QKkD65qHOB5c8IaweySFDogSMcVT6Hz9Y4s2qa90So=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl
rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:16:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 477 (0x1dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913ABFE, serialNumber=E588C73E6CB4FDB38B84EE40F8F9B64C50BE4B73
Validity
Not Before: Dec 5 01:16:08 2025 GMT
Not After : Dec 12 01:16:08 2025 GMT
Subject: CN=69323258-73b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e4:e8:fe:d2:9e:76:ff:83:fe:6b:c0:b0:ac:
73:53:ba:5b:56:00:64:73:09:4e:75:bd:c1:97:33:
d3:75:3d:c7:3a:2b:a0:ab:d7:5f:82:07:98:36:73:
02:a8:47:7a:23:b1:31:59:45:65:d9:98:5c:f3:06:
9c:75:90:e4:15:b9:1d:4f:9c:73:31:0a:0b:a3:ee:
54:19:5c:ee:ca:a0:d7:8f:d1:92:49:09:ab:f6:61:
fd:08:e2:1c:a9:c0:65:df:b5:fd:fb:15:a4:bb:c8:
db:22:72:4e:c0:c4:e2:50:c0:21:16:22:79:05:9d:
cc:37:ee:3b:90:b6:9e:4a:cc:38:3a:43:94:be:3f:
f0:c3:3a:e4:0c:00:2f:bd:96:42:e9:b6:ec:88:f8:
49:c9:81:0e:54:49:39:89:f9:ff:14:86:07:d2:a5:
59:72:e3:57:fb:01:72:d6:e7:10:26:a0:3f:a3:71:
58:a5:e5:8a:03:df:3c:94:7e:f3:bc:1e:02:86:6a:
e9:d0:98:bf:ff:b3:3e:dc:8e:d6:da:1d:75:25:bc:
ee:81:5e:15:ba:11:17:df:77:1b:37:4f:ab:01:64:
0d:19:15:f3:92:00:de:e5:3c:7e:55:bb:82:c0:6e:
9b:1b:ad:ab:7f:dc:36:a3:32:6c:9e:f8:5c:8b:62:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F8:F4:0D:D6:28:C8:D8:C3:28:5F:2F:CA:74:3B:AC:81:E6:68:7D
X509v3 Authority Key Identifier:
keyid:E5:88:C7:3E:6C:B4:FD:B3:8B:84:EE:40:F8:F9:B6:4C:50:BE:4B:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913ABFE/F1D5587E25F111EEB7B48058C4F9AE02/5YjHPmy0_bOLhO5A-Pm2TFC-S3M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:b0:b4:07:1a:65:a5:55:d6:20:4e:f4:c3:24:00:a7:b6:0b:
1b:22:84:58:ab:f0:46:ae:f1:86:04:b7:d7:28:13:84:3b:30:
76:0f:14:83:de:ef:66:96:9d:4a:5c:55:15:77:4e:7b:8f:55:
20:0d:04:c9:52:17:ad:b4:3e:d7:dc:4d:b7:93:fa:6f:85:cd:
53:ee:ba:5f:27:c0:b0:c3:20:e1:35:66:01:83:e1:4b:1d:04:
d0:d6:ee:06:bc:8e:26:d6:a1:a1:6d:67:c1:90:d0:e8:08:e2:
85:6c:94:fe:04:03:25:64:69:e8:22:05:2f:06:92:0a:84:8a:
cf:a3:d7:91:51:f6:8d:fd:ad:bb:8b:d1:8d:26:00:77:1c:95:
dd:f4:45:06:15:20:f9:8d:0a:cd:f6:ab:10:a1:1a:a6:30:00:
56:03:32:d5:79:d1:f8:70:fa:c0:00:6a:19:d3:66:22:e1:9e:
b1:1b:11:aa:76:11:0d:58:40:7c:c8:5c:c1:2a:eb:85:b4:f3:
ef:d1:5d:e1:1e:6a:2f:3b:00:b1:48:21:b7:03:24:97:99:6e:
aa:d8:94:e3:99:0e:98:4e:f7:0d:aa:f0:f6:df:0a:a5:ea:7c:
da:63:fa:5f:1d:3e:b0:8d:c4:33:b5:a9:08:a2:b7:6a:35:72:
c8:90:c5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:50 2025 by rpki-client