This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json)
Hash identifier: g2EjqN2in4SqJk1j2astsz8SnOQjUoAW9/RUymDQd9s=
Subject key identifier: B5:EF:70:AA:A2:F5:F3:29:0F:CF:C8:FC:DA:5C:33:F8:37:A3:20:0D
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial: 017A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
Manifest number: 016E
Signing time: Fri 05 Dec 2025 02:11:58 +0000
Manifest this update: Fri 05 Dec 2025 02:11:57 +0000
Manifest next update: Fri 12 Dec 2025 02:11:57 +0000
Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: MzRIcbNgS5Q3PZOvry5k+ve6JuJMxQDM/+1xZLiXC3k=)
2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: 7lH097TnqT2Frr0JL7F0/A/6TnFN0hBEwwqzvbNC3Tc=)
3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: iA4PiBqhCGu6j+QREktQJZZ0YDevgINmDR162rqZIpg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:11:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 378 (0x17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Validity
Not Before: Dec 5 02:11:57 2025 GMT
Not After : Dec 12 02:11:57 2025 GMT
Subject: CN=69323f6e-f675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:bd:f9:35:e5:84:fd:65:ce:b7:80:00:30:
af:38:33:95:a5:fe:13:bb:ed:1b:09:50:92:61:6c:
99:89:ff:75:eb:c9:2f:bc:cd:f2:fd:bb:1c:08:79:
02:ae:19:68:bb:14:fc:d7:e5:93:8e:dd:d2:33:a7:
84:ac:f2:eb:7c:0d:41:11:5b:78:47:42:53:8d:0c:
d8:08:08:37:fa:2d:15:d6:a8:e6:9a:94:b6:dc:53:
21:d2:0c:3e:70:04:f3:c0:20:8c:9c:c4:4a:fb:34:
70:61:45:8b:87:aa:b0:8b:4c:f7:df:98:3c:67:ca:
dd:62:19:4a:a6:d8:ab:d3:98:3a:4c:5f:d3:e0:cf:
e7:69:ef:d6:3a:25:d6:f9:70:68:74:1b:68:18:d8:
e0:26:b3:04:cb:a7:f4:7f:31:0a:90:a3:5a:f0:bb:
84:7c:aa:91:45:70:b8:87:63:8f:98:b4:66:4a:03:
d8:c3:91:76:6c:39:38:d2:90:6a:ca:9c:ba:11:68:
66:5e:27:ec:7c:7c:17:dc:99:d3:8a:85:84:df:00:
91:dc:4c:8e:b6:2c:c0:40:a8:c2:14:9b:8c:2b:65:
bd:a9:0b:16:54:56:83:08:e4:08:46:e1:ff:10:fc:
69:84:95:dd:74:bc:c5:3f:3a:16:dd:4c:97:c5:cf:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EF:70:AA:A2:F5:F3:29:0F:CF:C8:FC:DA:5C:33:F8:37:A3:20:0D
X509v3 Authority Key Identifier:
keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:5f:95:cc:d7:79:8f:2a:d9:75:2d:d8:7d:de:80:f7:ec:ed:
17:c4:2e:cc:b1:fd:a5:cf:c6:47:30:85:14:f2:c5:8f:0d:1e:
46:25:a4:c8:49:91:42:20:92:80:c5:93:2f:aa:98:78:9e:30:
af:98:7c:a3:fe:b9:75:c2:6a:18:4a:c4:dd:06:4a:ff:eb:7a:
18:e3:4d:d9:f7:09:74:16:94:0f:be:2f:4b:25:48:ee:0d:20:
75:50:a9:62:f0:64:ba:a4:cf:f3:c1:83:f0:8f:42:66:5e:51:
9d:a3:b7:1f:bf:35:8a:8a:ef:c4:01:0a:24:56:cb:2a:96:d4:
da:80:8e:f7:b9:94:a5:6f:f0:3f:57:43:12:8c:39:10:f9:50:
53:05:81:78:0b:58:49:ec:52:a7:b0:e1:84:28:4e:d2:f5:ad:
3e:4e:88:17:15:94:c8:40:79:31:b4:ce:79:22:e6:b0:ca:c6:
c2:67:3c:de:40:44:2d:dc:0c:70:09:1f:c1:df:2c:e1:29:8b:
26:dd:30:05:09:60:ab:87:19:1a:fc:63:f2:df:57:b2:25:72:
cd:b3:2e:2b:f2:20:4a:2f:15:9a:bc:d5:58:e1:89:28:f9:0b:
04:d0:31:7d:28:31:74:a5:49:79:94:29:f8:38:be:00:d2:b8:
be:09:cf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:56:38 2025 by rpki-client