This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
File: 5vEsD995brDfK2AuWsQsy4OyLhg.mft (raw, json)
Hash identifier: wHleY0vvJT4sfrizsumXzpOAmzczEwZ6YaBRUTpyXoo=
Subject key identifier: 14:3D:B7:C4:8D:DF:09:94:FA:1B:99:E4:47:7E:C9:DC:75:33:B9:27
Authority key identifier: E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
Certificate issuer: /CN=A914E3B7/serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Certificate serial: 34E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
Manifest number: 34E2
Signing time: Sat 06 Dec 2025 15:00:49 +0000
Manifest this update: Sat 06 Dec 2025 15:00:48 +0000
Manifest next update: Sat 13 Dec 2025 15:00:48 +0000
Files and hashes: 1: 5vEsD995brDfK2AuWsQsy4OyLhg.crl (hash: eiZq/14gcZirCK2EJyckD3JUv/U9TUQzNzDv9mmIGQA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl
rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13541 (0x34e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E3B7, serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Validity
Not Before: Dec 6 15:00:48 2025 GMT
Not After : Dec 13 15:00:48 2025 GMT
Subject: CN=69344520-45a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:e3:bd:16:d7:c2:91:01:69:1f:68:cd:09:
5f:11:24:68:4e:ee:d3:a5:fa:4a:60:99:03:86:26:
f7:5f:19:91:e4:6c:7f:8d:05:04:ab:1b:15:aa:c0:
e8:70:fc:41:c3:db:ff:2b:6d:38:4c:f5:20:6f:2d:
0c:0e:fc:5f:d6:fb:b7:50:84:62:e0:36:c0:d2:15:
82:3a:9b:1d:02:cd:ec:44:24:9b:9b:99:aa:9a:83:
a1:8e:80:54:32:cf:37:82:d5:7c:2b:b4:9d:8f:99:
37:db:f9:ca:ee:6f:b5:89:57:71:25:14:0f:56:fd:
9a:66:79:9c:bf:04:5d:64:1f:67:f0:b4:f5:26:f9:
7b:d6:0c:62:da:ae:71:61:b3:63:75:95:ef:de:ae:
9b:fc:d0:20:e8:b4:2f:2b:8b:77:13:1e:e6:89:55:
dc:57:24:dd:f8:cc:c2:31:77:21:e5:00:40:a6:92:
45:be:a4:92:19:a3:a7:4f:f4:46:68:96:f4:55:63:
e7:0e:25:97:1f:61:92:17:4c:bc:32:58:ac:94:dc:
0e:8c:5b:fb:04:90:b6:fd:b6:87:c9:1b:29:50:d1:
64:6c:1a:20:b6:09:08:7b:e6:8b:ea:fa:9f:94:87:
a8:13:3c:27:37:4b:c3:dc:86:eb:9d:50:06:f7:46:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3D:B7:C4:8D:DF:09:94:FA:1B:99:E4:47:7E:C9:DC:75:33:B9:27
X509v3 Authority Key Identifier:
keyid:E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:99:11:5d:06:5d:c7:6d:ef:ab:0e:c3:02:57:b1:1b:c4:9f:
71:5b:6f:46:a4:65:03:48:9e:d6:bd:6e:89:94:06:fb:73:75:
4b:da:ca:a8:32:a4:38:11:9c:c7:e6:e0:03:30:6e:9c:2b:e5:
ba:13:27:f1:16:5c:85:5f:ae:88:df:65:96:bd:70:b9:a6:49:
0e:50:c3:e3:26:a2:53:a1:5e:e8:b1:05:94:01:53:85:07:c4:
14:0d:db:17:27:47:54:14:25:d1:11:ee:ae:60:a9:23:b6:dc:
8e:8f:26:6f:c5:9a:11:1e:b5:76:de:5c:d4:23:6c:f4:27:cb:
e6:d8:b4:55:00:97:37:c6:59:94:50:f0:e2:6e:0f:1e:b6:b4:
fd:23:97:d4:64:e6:be:fa:10:7c:8b:8d:72:1f:64:7d:76:09:
2d:b9:d2:f8:22:8f:b5:7f:7b:57:09:b0:2d:80:77:29:52:6a:
b1:d5:a4:ae:25:4e:4f:a2:10:3a:b3:09:06:8b:1f:2f:3c:fe:
70:5f:ae:58:ee:bc:29:22:3f:a4:76:80:13:06:66:e7:7a:8a:
c0:fd:ab:aa:e8:af:07:f8:7c:f0:13:6f:54:f4:aa:c4:a0:00:
42:07:5c:a2:9e:f9:c0:af:dd:22:59:dd:3f:34:b4:24:46:4d:
ef:90:cd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:05:23 2025 by rpki-client