This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
File: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json)
Hash identifier: mpbfCaLnPeKZaviBHfpoPjc3qHF/8JuNxvBukUZdNkA=
Subject key identifier: 65:F5:8B:37:D4:0A:5E:38:1C:91:C5:5E:02:21:C2:D8:CC:56:F9:F3
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial: 05A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
Manifest number: 0584
Signing time: Thu 04 Dec 2025 22:00:37 +0000
Manifest this update: Thu 04 Dec 2025 22:00:36 +0000
Manifest next update: Thu 11 Dec 2025 22:00:36 +0000
Files and hashes: 1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: xUYpgJ4V0jUEzKTuEy3jZDdjlZ2kmk8deY9GkkBqQIQ=)
2: 2C4993AA271B11EF97731F0BC4F9AE02.roa (hash: qDUJODkwDIIJRA6eE37o52LxfEd01z/xEmopFBMRwmA=)
3: 9CB324BA273111EF9F5B0860C4F9AE02.roa (hash: pTVmfHpB/0A0PCQmTKIL1dACfjcI9Ghchso3ovyJFjM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1449 (0x5a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Validity
Not Before: Dec 4 22:00:36 2025 GMT
Not After : Dec 11 22:00:36 2025 GMT
Subject: CN=69320484-b341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:c1:cb:bb:45:ed:ed:62:ed:e0:d2:6d:57:
48:08:40:7b:57:07:85:6f:67:bd:91:03:58:a8:c7:
57:a0:b9:e6:3d:28:02:a0:f5:d9:6f:86:09:9e:8b:
a9:1f:42:d5:65:27:e5:ba:27:41:a1:be:21:f2:d6:
c9:23:24:01:35:cd:63:c7:80:14:ae:21:df:c6:83:
a7:28:a2:b9:cb:2a:ce:3c:97:d8:d3:9b:12:f0:04:
94:c0:79:d2:47:7f:54:b4:c5:5d:4a:a2:c8:7f:84:
b4:e9:40:a0:c1:69:93:ae:70:5c:59:03:6c:14:dd:
57:55:2b:71:75:4a:dc:db:6d:2a:99:df:fa:fc:ed:
b1:46:6d:22:c0:7b:80:b5:a5:ab:2c:c6:f1:1a:6c:
8e:8b:eb:70:9b:63:c9:14:23:fb:6f:a2:05:24:6f:
69:fa:79:f9:06:b2:59:02:d7:af:8a:e2:63:dc:08:
7c:75:93:64:1d:1b:ae:2c:a7:81:80:cd:52:13:38:
f3:5b:7c:11:de:b4:13:68:35:38:06:d4:8b:70:5b:
b6:dc:11:a3:67:7d:32:0a:ee:86:f1:12:1f:fe:fd:
96:ec:74:cc:0b:b4:03:26:4d:32:a4:78:56:ff:ec:
b0:b0:4c:e5:ef:50:95:83:d7:e5:7b:d5:b3:76:ba:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F5:8B:37:D4:0A:5E:38:1C:91:C5:5E:02:21:C2:D8:CC:56:F9:F3
X509v3 Authority Key Identifier:
keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:75:67:25:0c:55:88:60:13:78:79:fb:d8:db:e3:8d:98:55:
ab:1f:b4:12:d9:bc:32:19:bb:0f:57:60:ca:ce:38:0c:5d:8b:
7c:e3:4e:9a:d0:a2:e7:c0:d1:4d:05:89:a3:b5:77:91:55:43:
ff:01:12:4c:74:fc:db:ac:62:9f:88:cc:c8:98:72:46:a2:d0:
14:f4:6a:8b:99:e7:e4:e8:4e:40:a7:4d:ff:39:b2:1d:23:99:
ca:f6:71:b8:34:5d:ec:05:63:ec:c4:6a:fa:d4:4e:19:ca:72:
9a:50:9b:09:d8:ae:2f:22:ed:1c:3e:b0:aa:cb:a4:e3:5e:18:
f2:ae:f1:db:d3:35:04:0a:29:3e:3b:bf:bb:57:26:06:c3:88:
b1:93:9f:cd:cd:03:e3:b0:44:58:07:49:c6:7e:b2:f2:c5:7f:
3e:a8:e3:df:ac:e9:c5:7e:de:85:50:58:26:0e:a0:95:41:84:
fc:fe:e3:ec:63:85:b5:73:e0:5c:e2:58:88:fa:2c:71:7c:b0:
63:6e:ca:88:df:dc:08:1b:10:70:d6:ff:0c:43:d4:95:f3:15:
88:d0:37:97:f4:5a:1e:8d:a1:24:ee:e7:00:e0:63:a0:d8:7d:
24:e0:74:bc:2e:35:c6:58:f8:e9:ba:89:28:64:1a:88:3e:97:
94:1d:bf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:07:34 2025 by rpki-client