This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
File: 5rsDqligwnDrZrPq6yQI__q6Xsc.mft (raw, json)
Hash identifier: IRgPumWW70KB9gdT4CjXxpjoU7HL06/mZGUCQEAjnb0=
Subject key identifier: AF:16:7A:89:F8:09:A9:60:9C:43:03:8C:3E:75:C8:AE:3C:61:CD:48
Authority key identifier: E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
Certificate issuer: /CN=A914D2BF/serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
Manifest number: 01F9
Signing time: Fri 05 Dec 2025 00:49:57 +0000
Manifest this update: Fri 05 Dec 2025 00:49:56 +0000
Manifest next update: Fri 12 Dec 2025 00:49:56 +0000
Files and hashes: 1: 5rsDqligwnDrZrPq6yQI__q6Xsc.crl (hash: KbFe83L4IYsR55G3z+RM+LfIPU4wQoYsZ5YPEcFcPKI=)
2: AEF266ECD34811EDAD96D95DC4F9AE02.roa (hash: KXSCbuQLHG9xWL+hihrwdJUS/R0sgZW/C4dlIANzg14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D2BF, serialNumber=E6BB03AA58A0C270EB66B3EAEB2408FFFABA5EC7
Validity
Not Before: Dec 5 00:49:56 2025 GMT
Not After : Dec 12 00:49:56 2025 GMT
Subject: CN=69322c34-e1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:3f:f1:93:bf:fe:b2:a6:3f:77:53:b8:e6:
17:26:59:75:5e:fd:a7:2b:9a:47:63:91:57:37:f5:
e3:4b:aa:2a:08:fb:02:c9:b7:da:a9:ef:7b:95:26:
f8:04:68:54:85:f4:06:6a:e8:0c:60:79:5e:04:fe:
96:b6:93:f0:ac:dc:cf:95:ea:4e:0c:c1:95:41:32:
40:e3:f9:09:09:dc:1c:36:7c:37:e1:93:25:75:1d:
d5:9d:db:0c:f1:4c:d5:d0:a5:28:63:02:76:c2:11:
92:ca:3d:a7:d7:d1:75:e9:4f:9f:65:07:39:b5:64:
e8:f5:86:ec:b8:70:26:72:84:67:e0:1b:14:9a:44:
06:15:36:16:e2:85:b4:71:5e:b5:92:70:fb:90:40:
cd:8f:62:3f:0d:57:e8:48:d0:b0:82:f0:cc:f7:d9:
e5:16:ef:4f:27:b4:e0:29:b7:6e:63:40:04:98:8e:
12:ce:8a:ed:ff:0d:f3:01:7e:29:e7:55:88:72:0a:
8e:1b:11:0a:85:4d:7b:52:08:14:ac:86:0b:20:41:
98:57:39:b0:18:e2:f2:d5:56:c3:f2:bb:60:4f:3d:
41:56:0a:2a:d1:f7:79:d2:75:1a:64:f4:7d:18:5c:
55:cb:98:fe:49:f5:a8:6d:d2:75:59:5e:ad:2c:90:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:16:7A:89:F8:09:A9:60:9C:43:03:8C:3E:75:C8:AE:3C:61:CD:48
X509v3 Authority Key Identifier:
keyid:E6:BB:03:AA:58:A0:C2:70:EB:66:B3:EA:EB:24:08:FF:FA:BA:5E:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rsDqligwnDrZrPq6yQI__q6Xsc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D2BF/2A71E6BCD34411ED8E2C5464C4F9AE02/5rsDqligwnDrZrPq6yQI__q6Xsc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:27:6c:0a:3e:91:3b:be:45:47:28:46:e4:7b:ee:e7:5c:db:
32:cd:27:c2:bf:1a:b5:29:8f:07:27:60:37:a8:34:a0:97:dd:
1a:2d:c5:fe:14:7a:db:aa:d5:4e:69:95:b8:32:b6:af:d7:9a:
a7:8f:55:02:29:8d:68:10:c3:e9:bb:f3:22:04:cf:70:4c:da:
63:d3:52:7a:95:28:c5:ea:f5:a2:b5:7f:99:45:06:ed:35:b5:
64:40:98:99:3f:08:e8:2a:cd:49:62:36:e0:36:27:a1:20:22:
39:33:dd:89:e2:ad:24:4d:96:34:01:d2:1a:e5:bb:8d:df:68:
cc:74:e9:d0:da:29:44:f0:f3:c0:e4:2a:c3:95:cc:1c:b8:e2:
b8:de:0b:2d:a7:8a:a5:7f:48:8d:1e:b3:f4:ba:94:43:6c:42:
e7:a4:66:40:67:0d:eb:ad:6e:57:a2:c8:7d:6f:5f:2a:83:0a:
aa:f1:4d:52:9e:7d:60:59:4b:2e:ee:83:5e:07:ac:66:9e:bb:
4c:26:db:59:e4:59:90:31:22:47:fb:ce:db:84:8b:96:0c:9a:
1f:d5:31:ae:68:ca:6f:12:a2:d6:4a:c1:d9:bf:04:fe:6b:f4:
9d:18:f0:28:c0:49:ca:c6:5e:a4:fb:d6:c3:a4:ab:c4:44:52:
20:e8:42:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:10:19 2025 by rpki-client