This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
File: 5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json)
Hash identifier: tOCFVYD649umqGzwUcHy5Qgy+uo3hRZF+YjfzQuq3gM=
Subject key identifier: F9:E4:0C:65:04:B1:C2:67:E6:C7:E8:D3:F1:D9:10:2A:89:24:76:33
Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94
Certificate issuer: /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
Certificate serial: 0E36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
Manifest number: 0E2D
Signing time: Sat 06 Dec 2025 17:15:03 +0000
Manifest this update: Sat 06 Dec 2025 17:15:02 +0000
Manifest next update: Sat 13 Dec 2025 17:15:02 +0000
Files and hashes: 1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: WWVHgoOU0tnUBrn/Q2R+iJCpAEsJ8/Zdt9DL+NvfQE0=)
2: 1801797EB79211E986129837C4F9AE02.roa (hash: I7CEbkBg9Av7yOv0PNqj77FDrgxZjjIl1US16C5a7sQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl
rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3638 (0xe36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
Validity
Not Before: Dec 6 17:15:02 2025 GMT
Not After : Dec 13 17:15:02 2025 GMT
Subject: CN=69346496-8368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:46:95:81:d3:98:36:5c:44:8a:21:84:e2:
1c:7a:d6:53:72:46:b0:7f:86:ff:c5:5f:c8:c8:0a:
cf:89:b7:7d:58:09:ac:dc:ea:d9:e8:8a:75:b1:f1:
f0:13:e5:25:8d:f2:4d:b3:51:32:5f:11:f8:d5:9a:
04:cf:e5:91:34:79:41:6c:cb:bf:85:0c:f2:42:d3:
c2:94:4c:14:96:c0:74:1a:72:b1:14:b4:bd:c4:62:
68:af:0d:01:c5:82:a3:ee:70:06:1c:8e:78:fb:4f:
c2:c2:41:c2:0d:67:45:6b:68:b7:ea:aa:a3:70:96:
4f:d8:b6:70:1f:81:7f:91:db:32:5c:55:6e:50:df:
0d:e2:a8:e8:76:05:e4:75:bf:c9:fe:e2:ca:3f:3e:
86:2e:90:cd:c7:ed:d0:dd:48:00:fc:10:50:99:b6:
ea:18:d1:ac:3e:49:31:ba:78:73:b2:49:13:b4:39:
bf:05:7d:bb:57:25:d2:c4:11:c9:7b:ba:ac:86:3c:
1c:81:1f:3e:bd:59:a8:8f:69:80:64:59:63:28:82:
1c:12:2c:0e:00:a4:2f:3a:b8:eb:2f:d6:39:6e:57:
0f:88:63:18:78:c7:e5:d6:a4:78:1e:c4:33:87:98:
30:ed:4f:58:73:17:9b:f2:57:67:be:b2:09:a6:62:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E4:0C:65:04:B1:C2:67:E6:C7:E8:D3:F1:D9:10:2A:89:24:76:33
X509v3 Authority Key Identifier:
keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:fb:a7:19:8a:30:1d:4e:c6:d9:ae:a1:0f:c9:83:18:ed:83:
ea:62:21:9b:37:8e:40:ff:10:42:5c:f2:cc:46:4f:94:10:e2:
f8:d2:65:e7:46:a3:24:b5:6f:2a:88:8d:a6:4b:38:8b:1a:8b:
97:63:88:3b:99:e9:cb:65:48:14:3d:1e:b5:f5:fc:7d:aa:85:
d5:3b:06:3b:b7:0f:ee:67:3f:2f:41:7d:4b:51:a7:98:5c:9e:
11:ce:83:2e:8c:da:3b:35:24:cd:f2:7f:ab:ff:ae:d5:8c:41:
7c:9f:c5:c1:90:8f:09:0d:33:03:ac:23:ab:38:ce:5b:3a:d5:
60:6a:6a:62:8c:33:47:49:b8:94:d3:de:d0:f7:43:06:2d:42:
d6:0f:76:5b:aa:da:ac:22:a4:67:ec:dc:57:2c:81:2a:66:8c:
89:8e:5e:86:08:73:7b:52:e8:8a:85:6b:7b:7a:84:68:e8:89:
92:a5:6e:a3:ff:46:71:96:a1:15:fc:4f:9d:03:74:a1:b2:c3:
e2:d0:d8:a8:7d:10:ab:32:a3:6d:11:0c:4c:e4:58:08:24:c8:
27:37:f1:c9:8c:54:df:b4:0c:28:fc:f7:dc:04:7d:87:ea:8e:
68:9e:83:09:01:da:7f:0c:ea:1a:f7:84:92:76:82:8b:54:9c:
21:49:1a:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM0RDcxMTAvBgNVBAUTKEU2Rjg4NUI4QzFFNjM0QUUzOTlFQ0FCODE3M0EwM0RC
OEU0QzEyOTQwHhcNMjUxMjA2MTcxNTAyWhcNMjUxMjEzMTcxNTAyWjAYMRYwFAYD
VQQDEw02OTM0NjQ5Ni04MzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvt9GlYHTmDZcRIohhOIcetZTckawf4b/xV/IyArPibd9WAms3OrZ6Ip1sfHw
E+UljfJNs1EyXxH41ZoEz+WRNHlBbMu/hQzyQtPClEwUlsB0GnKxFLS9xGJorw0B
xYKj7nAGHI54+0/CwkHCDWdFa2i36qqjcJZP2LZwH4F/kdsyXFVuUN8N4qjodgXk
db/J/uLKPz6GLpDNx+3Q3UgA/BBQmbbqGNGsPkkxunhzskkTtDm/BX27VyXSxBHJ
e7qshjwcgR8+vVmoj2mAZFljKIIcEiwOAKQvOrjrL9Y5blcPiGMYeMfl1qR4HsQz
h5gw7U9Ycxeb8ldnvrIJpmKhLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnkDGUE
scJn5sfo0/HZECqJJHYzMB8GA1UdIwQYMBaAFOb4hbjB5jSuOZ7KuBc6A9uOTBKU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRENy85OUQ5MTUzQUI3
OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5LNDVuc3E0RnpvRDI0NU1F
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV2aUZ1TUhtTks0NW5zcTRGem9EMjQ1TUVwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzRENy85OUQ5MTUzQUI3OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5L
NDVuc3E0RnpvRDI0NU1FcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC5+6cZijAdTsbZrqEPyYMY7YPqYiGbN45A/xBCXPLMRk+UEOL40mXn
RqMktW8qiI2mSziLGouXY4g7menLZUgUPR619fx9qoXVOwY7tw/uZz8vQX1LUaeY
XJ4RzoMujNo7NSTN8n+r/67VjEF8n8XBkI8JDTMDrCOrOM5bOtVgampijDNHSbiU
097Q90MGLULWD3ZbqtqsIqRn7NxXLIEqZoyJjl6GCHN7UuiKhWt7eoRo6ImSpW6j
/0ZxlqEV/E+dA3ShssPi0NiofRCrMqNtEQxM5FgIJMgnN/HJjFTftAwo/PfcBH2H
6o5onoMJAdp/DOoa94SSdoKLVJwhSRqV
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:15 2025 by rpki-client