This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
File: tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json)
Hash identifier: 4o3gx8QEcsEdpKfVJkmbIuc1XrXhcbnGhF3qHo+YmTI=
Subject key identifier: F4:E0:11:A0:2C:2C:A2:F4:64:C9:4E:F7:0B:07:A0:D6:13:C2:45:6F
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Certificate issuer: /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial: 1565
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
Manifest number: 1531
Signing time: Thu 04 Dec 2025 16:28:43 +0000
Manifest this update: Thu 04 Dec 2025 16:28:42 +0000
Manifest next update: Thu 11 Dec 2025 16:28:42 +0000
Files and hashes: 1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: n1pYa5OfzHDAC4MUpdToY5WclCPt8lRJYT3WAAVP+1U=)
2: E944914AF0F111E999D61615C4F9AE02.roa (hash: XKJY2ruAbdxVwtFmFD8vDTB2DhG2dJOeU2QViXOeUk8=)
3: 0E171AA850D511F0B4943476C4F9AE02.roa (hash: 9AflqGyFKx05qIN4kyuCqzbSR97xKUg46U/Rr1tuz0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5477 (0x1565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Validity
Not Before: Dec 4 16:28:42 2025 GMT
Not After : Dec 11 16:28:42 2025 GMT
Subject: CN=6931b6ba-e5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:17:f5:ab:ae:07:db:ba:90:49:59:77:13:
6d:0a:67:93:6a:f3:63:6b:0d:4c:e0:36:e1:5d:bb:
f5:f7:6f:00:b2:59:42:9a:60:eb:be:b3:ab:86:63:
85:51:43:e5:6a:48:23:54:3d:55:48:aa:0b:6f:2b:
89:9b:f8:a2:c3:d7:19:9b:fe:75:0b:ba:f5:2b:5b:
e7:05:f3:57:b8:bb:9f:ae:ce:31:c3:3f:b4:89:6e:
f3:45:06:56:7b:8f:ba:9f:fd:ab:15:71:e5:20:32:
96:5a:4d:79:02:ba:db:5f:4d:0a:b3:9c:c5:f5:ef:
8f:a0:29:2d:7e:fd:a2:cc:1f:22:e6:ca:df:fa:0f:
3e:9e:03:87:f1:c4:9a:14:b4:fb:f4:7a:e5:d9:9a:
6e:dc:ca:93:4f:b5:9d:72:9b:c2:13:3d:f1:9b:6c:
41:a1:01:6c:43:7e:ae:23:7e:f9:3d:d8:64:30:9c:
a8:67:b4:42:e1:2d:e9:d5:63:56:08:30:34:51:01:
f7:69:69:45:1c:3e:69:19:c2:89:66:5a:93:b4:21:
3a:52:cd:e2:7b:99:5f:a6:13:e4:3a:98:24:d0:02:
2a:f0:a1:c6:43:2c:cc:b4:2c:86:ef:37:f1:19:7a:
8a:7a:5a:56:21:c8:42:df:de:1c:8b:b2:bc:4d:cd:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E0:11:A0:2C:2C:A2:F4:64:C9:4E:F7:0B:07:A0:D6:13:C2:45:6F
X509v3 Authority Key Identifier:
keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:c7:d0:24:bc:77:aa:b0:da:18:d8:bd:08:f1:b1:df:49:f0:
1e:f9:fa:37:ee:95:48:2a:5d:bf:14:0f:fb:a7:da:66:b9:81:
6b:5f:63:34:ae:33:14:40:d5:36:cd:ce:a2:3f:ab:37:4a:e3:
b4:aa:d6:85:1e:da:e0:ff:93:79:e8:d3:62:f2:04:bd:74:13:
31:33:27:8c:36:98:f0:c8:45:72:45:59:22:5c:4e:3a:69:78:
17:a9:1b:a0:64:0e:fa:15:10:ca:cc:c6:fe:53:56:c7:c8:b6:
4d:a0:b4:b9:7d:25:16:24:54:ee:7e:fe:60:91:09:de:52:f2:
a9:ba:30:4d:8c:2f:e0:77:36:55:c9:c2:4f:5f:e9:67:30:5b:
ed:ab:96:a0:15:91:43:5e:4a:f9:98:8a:e8:48:85:aa:e8:de:
e5:6b:7b:ac:2f:59:5a:ca:03:39:5d:c1:1b:d9:6d:a9:12:0e:
bb:69:2a:ad:ac:7b:a9:e8:cc:ba:73:40:75:2a:67:06:42:af:
ba:55:8f:da:63:e1:6d:ce:4d:21:8f:a8:d0:75:4c:9f:ec:52:
d0:6a:af:38:63:28:ac:53:5b:16:01:24:ec:f3:07:ac:87:88:
cf:44:cd:10:93:f5:e8:a3:eb:76:93:4f:9f:4e:aa:47:c6:8a:
5b:e6:f0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:34:37 2025 by rpki-client