This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json)
Hash identifier: qDce+ug2+563iQShrkKgbcgay48EHhM5TU+iGnjyCHI=
Subject key identifier: CD:DF:F7:35:19:34:C9:83:4E:02:03:99:B5:DC:D6:BD:70:CE:8D:DE
Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA
Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
Manifest number: 0162
Signing time: Fri 05 Dec 2025 02:11:55 +0000
Manifest this update: Fri 05 Dec 2025 02:11:54 +0000
Manifest next update: Fri 12 Dec 2025 02:11:54 +0000
Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: vzWmW+TjajU6I7hWYDCWh/0acDmA/YQ25h0lIZfohw4=)
2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: KaLq/qLC36FBeVUH4PJULMTUIMWcwgut4EvM5q8D+vE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl
rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D, serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA
Validity
Not Before: Dec 5 02:11:54 2025 GMT
Not After : Dec 12 02:11:54 2025 GMT
Subject: CN=69323f6a-6562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:6a:a5:ae:58:02:ca:df:bb:1a:98:c1:55:
b8:84:30:90:fc:26:97:ce:fb:77:45:14:97:f9:f0:
35:f8:7a:ae:42:44:e7:9a:39:ae:69:9a:71:42:a0:
60:93:96:0a:ca:41:9c:bf:35:a4:43:ef:1f:52:a9:
fe:01:f4:ba:ba:97:40:fe:99:db:e5:7f:64:19:2b:
88:1d:26:d6:9a:d2:8b:86:ff:c2:f8:3c:b1:2f:39:
d9:82:e1:f8:52:42:c0:a6:8a:e2:22:9e:82:01:d0:
ad:1d:13:17:92:f7:6f:d0:ed:f0:0a:38:2a:9c:16:
d0:bd:4f:8f:f0:74:ed:06:07:43:7a:48:b0:3a:a8:
c9:36:26:aa:54:1a:c6:5e:09:46:24:70:3f:22:97:
08:98:eb:31:c8:4d:24:b8:3c:a4:96:2e:aa:7d:6c:
f9:97:ab:4e:36:b2:85:b5:bd:07:4a:ce:7d:89:6f:
2f:f5:41:9b:4a:fd:4e:7a:36:58:c2:bb:9c:d5:a9:
da:69:37:b1:dd:fe:27:b2:ee:33:73:7f:64:02:99:
bb:2f:41:fd:2d:96:5f:f0:70:91:c8:fb:4b:e2:38:
7d:f1:25:81:7b:28:8d:d4:8a:30:ab:58:99:a3:58:
4c:3d:18:a9:e9:72:17:ef:1a:e0:46:a3:ed:1a:95:
07:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DF:F7:35:19:34:C9:83:4E:02:03:99:B5:DC:D6:BD:70:CE:8D:DE
X509v3 Authority Key Identifier:
keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:e4:ec:2e:c5:3c:5f:63:bd:73:34:25:ee:55:5b:d5:52:62:
f1:e4:3c:ae:54:9f:53:41:c0:51:43:4b:0b:1c:c6:96:9b:43:
0c:4d:52:2b:85:c6:55:e5:cc:a6:79:50:51:7b:5c:3d:1c:3c:
6a:cb:38:5e:95:7f:12:92:8b:9d:46:09:8d:98:68:5d:b3:18:
24:d1:04:6d:47:19:76:05:c1:0b:6c:aa:4a:e0:1e:fc:70:e0:
3d:be:c6:d3:d9:f2:ec:96:05:7a:43:66:e8:fa:0d:9c:cf:ad:
88:db:a3:27:b9:20:16:f1:9e:34:ff:53:cf:cb:4f:05:1c:e7:
0a:25:7d:91:10:56:47:23:11:66:ed:a7:3c:84:56:3c:82:d9:
39:f7:34:43:9f:07:74:50:6c:41:eb:d4:55:41:ec:42:bc:9f:
f7:58:48:b0:58:dc:7b:b3:31:60:e4:dc:d8:87:c8:ad:91:8f:
0d:84:f3:85:e9:3e:12:f9:8f:c9:97:8b:4d:47:68:ab:2e:3a:
4a:01:8b:a6:35:30:62:72:03:37:95:9b:0e:c4:93:68:95:d9:
6e:d1:e3:30:0f:70:0d:07:af:c6:ad:a2:d4:fa:24:a8:b6:a0:
b2:72:54:2f:69:fa:35:88:ce:97:2b:be:13:62:2c:66:d0:93:
9b:f2:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:41 2025 by rpki-client