This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
File: 5LMs8qYR9wLf0JE-PqULT9YexXU.mft (raw, json)
Hash identifier: Jd2DBQbM4EyNJb21Eg+rvG4qlpO+iz0U8qcimL5mbY0=
Subject key identifier: 39:08:F9:7F:47:04:73:0A:33:3A:B9:27:C4:7F:36:2A:26:65:13:94
Authority key identifier: E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
Certificate issuer: /CN=A914450B/serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
Certificate serial: 07E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
Manifest number: 07DA
Signing time: Sat 06 Dec 2025 20:15:41 +0000
Manifest this update: Sat 06 Dec 2025 20:15:40 +0000
Manifest next update: Sat 13 Dec 2025 20:15:40 +0000
Files and hashes: 1: 5LMs8qYR9wLf0JE-PqULT9YexXU.crl (hash: kJlkDx7YClIUJ6kaPWZ/c/3oUjzXsNXxnLtHPGh7a6U=)
2: 5B9B8A1213F311EBA7343351C4F9AE02.roa (hash: 2BrCNtIG6V0aTeNF5hAlLJ5D7nd2opyw1DNok89bW0k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl
rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:15:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2016 (0x7e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914450B, serialNumber=E4B32CF2A611F702DFD0913E3EA50B4FD61EC575
Validity
Not Before: Dec 6 20:15:40 2025 GMT
Not After : Dec 13 20:15:40 2025 GMT
Subject: CN=69348eed-b858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:b8:e2:f2:fc:6c:37:f5:16:18:d8:db:a0:
ca:4d:a0:84:b4:99:15:cf:0b:8c:91:9e:74:bc:00:
ad:af:e0:38:06:fe:43:eb:c1:6d:21:d7:a3:0f:ba:
f5:04:77:f7:43:ed:09:2d:8b:1b:44:cf:48:e1:72:
b3:fd:c3:9b:21:e6:90:d0:41:5a:1a:5b:5e:91:a1:
19:41:79:a1:5d:03:08:ce:45:c4:41:f5:70:f7:fd:
5b:60:bd:fa:1a:22:d6:cf:d4:e6:49:a2:49:91:7a:
a9:45:55:80:9e:df:df:a2:bc:02:48:f5:f6:05:85:
5d:f2:70:b9:48:18:fa:72:08:78:24:5d:87:c9:83:
fd:48:8b:50:32:cd:c6:78:84:18:c9:f9:f6:30:08:
7c:3b:d3:19:af:40:f2:17:83:bd:59:78:3b:ba:c3:
cb:f6:53:e2:92:5f:72:3d:f9:3d:63:10:52:26:ac:
74:a8:16:a5:cb:cc:10:92:14:1c:e2:ce:e0:74:0a:
66:95:30:97:5b:e7:9d:38:3e:63:6c:28:f8:db:bb:
d7:f2:74:19:1e:1a:74:1a:ed:1b:43:0a:ad:7e:85:
2f:41:94:23:ac:44:eb:90:98:e4:42:0d:59:0e:75:
a6:1d:67:f8:94:78:7f:31:4e:44:f5:67:67:fb:07:
18:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:08:F9:7F:47:04:73:0A:33:3A:B9:27:C4:7F:36:2A:26:65:13:94
X509v3 Authority Key Identifier:
keyid:E4:B3:2C:F2:A6:11:F7:02:DF:D0:91:3E:3E:A5:0B:4F:D6:1E:C5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LMs8qYR9wLf0JE-PqULT9YexXU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914450B/F7B9E30A13F111EBB8123950C4F9AE02/5LMs8qYR9wLf0JE-PqULT9YexXU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:5d:17:9c:59:16:d8:93:16:a8:c7:a1:fc:37:06:48:22:3f:
e0:d9:39:fb:d3:da:63:9b:ee:8c:fd:ae:6c:e4:de:67:39:b9:
b5:de:15:b8:b4:e1:89:ac:17:a2:02:09:cf:fa:42:04:da:08:
5f:a2:c8:06:b1:c4:3e:0d:7c:cf:db:e3:27:a4:da:1e:f9:e9:
8c:57:fa:ee:7b:68:d3:f7:04:0c:29:ae:d2:9d:7d:f7:cb:4f:
d4:d0:89:83:c6:36:d8:44:ad:1c:b5:13:e6:f7:71:f2:5c:0c:
f7:12:62:a0:d2:74:39:e4:68:06:16:2b:34:3c:65:3d:c4:23:
62:6a:e5:4e:bf:93:12:dd:e1:6a:89:f9:11:3d:9a:37:4d:48:
c6:b5:21:7f:46:b0:4a:e6:d1:13:76:b1:5c:59:60:b7:e1:3d:
91:96:38:5f:d3:3f:fd:5d:b1:56:cb:08:e3:50:1f:7f:12:44:
ed:e5:b2:9a:6c:aa:3b:21:84:33:77:6d:8d:e0:6f:0a:63:df:
57:6d:12:d3:e7:5b:6e:a1:b1:30:d2:96:81:03:b1:6c:91:fe:
4b:49:25:00:b8:17:95:2c:60:75:58:f4:3a:c4:ea:39:9c:1e:
74:19:48:aa:a8:bd:87:eb:69:6b:07:8c:a2:47:9a:3c:3d:c6:
57:85:e4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:32:31 2025 by rpki-client