This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft
File: 5EL5lVmsG6h-4TSLL8evCiL_smE.mft (raw, json)
Hash identifier: WA4E3BpZnz3VYXHC9maib2Vrz/iEFlzizo/GOWYNG5s=
Subject key identifier: 24:13:67:08:F1:8D:BA:96:20:4C:40:E6:2A:72:7E:C2:6C:8F:26:BB
Authority key identifier: E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61
Certificate issuer: /CN=A9143336/serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261
Certificate serial: 2B54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft
Manifest number: 2B44
Signing time: Thu 04 Dec 2025 15:20:42 +0000
Manifest this update: Thu 04 Dec 2025 15:20:42 +0000
Manifest next update: Thu 11 Dec 2025 15:20:42 +0000
Files and hashes: 1: 5EL5lVmsG6h-4TSLL8evCiL_smE.crl (hash: DdPb+sNmhyH2ahgpKxSesDxsdsm9q8VT73+x0kUQRFY=)
2: 5452AC309B4911EB9952394CC4F9AE02.roa (hash: 3EBZNTlM2pSnC9HcQ0kJddDB9AhHcVhBduQrWy64qKQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl
rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11092 (0x2b54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143336, serialNumber=E442F99559AC1BA87EE1348B2FC7AF0A22FFB261
Validity
Not Before: Dec 4 15:20:42 2025 GMT
Not After : Dec 11 15:20:42 2025 GMT
Subject: CN=6931a6ca-dba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:8f:4c:6f:2c:60:45:88:95:11:a4:b1:ec:
97:78:85:b2:f5:d8:62:fa:ef:3a:7b:f3:37:54:58:
0e:89:92:7f:7e:80:7b:d5:c3:f6:fb:56:9d:b0:cf:
02:9a:60:20:6b:9b:df:05:af:3b:63:12:0e:8a:57:
05:90:8a:2e:c9:0c:af:3f:48:d1:2c:fa:ce:53:b0:
d8:31:57:9e:9c:97:9f:e4:31:ec:fc:26:5a:ef:08:
24:22:60:0f:24:0a:c7:c0:4b:91:d4:4e:9f:6c:27:
ff:97:78:71:a0:09:a2:3f:09:03:4b:2f:6a:8e:a1:
a8:36:d4:5d:ae:e7:11:d0:25:d7:e3:46:d9:18:7c:
64:0b:90:26:07:1f:88:29:f7:be:1f:ee:5b:7a:88:
ca:4d:67:e0:59:db:d6:7b:79:40:b1:e6:1e:c5:79:
93:aa:42:47:a2:9c:e4:42:48:7e:a9:3f:32:2b:46:
90:ea:66:ea:46:d0:15:36:dc:7c:4e:1b:0d:3a:9b:
3a:a8:94:b3:97:ce:3b:a9:bc:df:aa:1d:d8:ed:93:
98:8c:0d:06:2d:96:4a:1e:9e:32:ea:7d:cb:88:b0:
d5:b5:59:4d:e3:a5:78:66:4a:03:51:c4:a0:7f:e4:
c3:3b:22:8c:09:67:24:4e:2b:00:a9:2c:7c:47:77:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:13:67:08:F1:8D:BA:96:20:4C:40:E6:2A:72:7E:C2:6C:8F:26:BB
X509v3 Authority Key Identifier:
keyid:E4:42:F9:95:59:AC:1B:A8:7E:E1:34:8B:2F:C7:AF:0A:22:FF:B2:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5EL5lVmsG6h-4TSLL8evCiL_smE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143336/8EE7FC1E085311E4B0239E61C4F9AE02/5EL5lVmsG6h-4TSLL8evCiL_smE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:4b:d4:e5:a0:7d:82:82:8f:60:df:de:64:36:58:8c:7e:74:
36:7b:41:1b:ee:b6:86:4c:7d:84:48:23:d4:9d:2f:64:71:bf:
67:d9:fe:92:f0:04:0f:70:17:a6:95:d1:e3:c4:7e:02:72:66:
be:77:66:b4:8b:72:5e:00:c3:26:1b:b9:4b:ca:3f:69:e0:12:
96:41:0e:6b:fd:10:f2:29:eb:c9:88:cb:71:87:0f:f9:41:17:
e1:8c:91:50:81:d0:5e:7f:ca:8d:6e:18:12:49:0e:48:e8:87:
1c:bd:80:2e:ac:2a:54:e3:9f:ff:ca:87:ed:73:e9:63:37:8e:
60:a0:d1:40:ba:40:a2:d7:29:9e:fd:3e:52:85:ba:8c:8b:d3:
60:47:54:c1:51:09:53:1f:a2:18:2c:20:d0:e5:8d:da:35:d6:
34:5c:58:8d:52:3f:60:b6:4e:6b:67:75:f5:b2:04:69:5a:9d:
bc:ed:50:02:e4:49:9c:e5:f2:10:d4:4d:17:e7:94:7e:ce:68:
0c:94:9d:29:06:63:a3:99:e1:f4:6c:e6:0a:8a:7a:41:33:03:
2f:b9:e8:64:48:45:dd:43:41:8d:b6:59:21:11:7e:57:f8:9f:
6d:1b:2c:7d:f1:0e:41:5e:96:e2:fa:63:05:ce:64:40:82:f4:
bb:55:b3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:19:19 2025 by rpki-client