This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
File: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft (raw, json)
Hash identifier: ZYIRb85OEfQD7pCMh5nQp0JIxFi1c0jEd3cuNNtyHXY=
Subject key identifier: AA:FB:3E:AC:86:17:49:56:91:6C:50:85:EC:BE:D8:CF:6E:F7:BB:D1
Authority key identifier: E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
Certificate issuer: /CN=A9177C3F/serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
Manifest number: 43
Signing time: Fri 05 Dec 2025 05:18:30 +0000
Manifest this update: Fri 05 Dec 2025 05:18:30 +0000
Manifest next update: Fri 12 Dec 2025 05:18:30 +0000
Files and hashes: 1: 5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl (hash: H+Xn6P/ZjEp+m5tyQJ2CEHcv8j12/CYqV6QJKau+GuI=)
2: 707ABBBE73F811F0B8A9582CC4F9AE02.roa (hash: aeXdNNQNabgrgBCmkQacK1+L1cNE5fkHv7C0sQiLMEA=)
3: 7013EE7A73F811F0B8A9582CC4F9AE02.roa (hash: gsI9bZIEgenwvA+Pmylv8BqkOrAikmMP6MwW5zxivFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9177C3F, serialNumber=E52107F4C1DE06453EBD6E69B4BF82447316AA1D
Validity
Not Before: Dec 5 05:18:30 2025 GMT
Not After : Dec 12 05:18:30 2025 GMT
Subject: CN=69326b26-0966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e3:77:3e:3b:35:3b:0c:14:60:86:07:6f:60:
01:b3:26:80:e6:c5:fa:f2:dd:57:be:c3:22:75:9f:
13:1f:de:b5:39:4e:fd:8f:93:f2:95:72:db:5f:37:
13:ea:d7:36:9d:76:0e:dd:bb:f4:20:d7:a0:e3:86:
30:89:0c:4c:af:ea:a5:ea:90:1d:0f:b5:c2:5e:c4:
dc:bf:df:ff:b8:b9:99:be:2a:9f:b3:c8:c6:e1:eb:
17:be:e0:4c:6d:3f:de:f0:b1:d4:08:68:39:16:6d:
5f:3b:cc:94:a6:f8:3d:dc:d4:e6:7b:70:53:30:36:
cb:91:23:61:0b:40:c3:39:82:95:0d:88:bb:0f:3c:
38:07:e8:d8:0d:00:8b:71:1c:4d:85:45:cf:2d:5d:
94:72:40:73:ae:9d:f2:85:30:f0:66:23:63:ca:1d:
ad:cc:13:72:c2:c4:c0:67:ad:db:25:60:fc:c2:ee:
be:1a:e2:1d:aa:37:e7:8b:97:c1:f3:c2:1d:56:e0:
03:e9:e9:69:e4:4e:4d:e7:8e:85:f0:36:70:e2:f0:
be:0a:e3:06:70:12:b3:b3:85:34:d5:d6:f3:7b:3c:
8c:34:30:f5:99:3c:60:d5:6c:1a:bd:3e:b2:34:26:
f2:84:6d:33:fa:b4:03:c0:b6:82:42:02:41:e1:c8:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FB:3E:AC:86:17:49:56:91:6C:50:85:EC:BE:D8:CF:6E:F7:BB:D1
X509v3 Authority Key Identifier:
keyid:E5:21:07:F4:C1:DE:06:45:3E:BD:6E:69:B4:BF:82:44:73:16:AA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5SEH9MHeBkU-vW5ptL-CRHMWqh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177C3F/CDB36A3A733311F0839CDC83C4F9AE02/5SEH9MHeBkU-vW5ptL-CRHMWqh0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:7e:30:5c:f3:8d:43:7d:03:e5:bc:95:89:75:37:5f:68:11:
9d:99:39:40:68:bf:c6:9d:9b:9b:7a:ab:38:f3:6c:80:4e:b8:
0e:01:cb:06:50:e6:ea:02:2d:f9:6c:8a:ca:a3:41:b6:c5:de:
8a:4b:0e:97:3b:36:49:ff:6a:1b:bb:64:75:76:4d:1e:e4:2c:
c2:75:68:70:b5:da:58:76:3d:8f:af:85:2b:6c:ad:f6:c3:d4:
86:ce:57:37:5d:78:59:e0:a6:15:e0:5a:c5:e7:7d:77:bc:b9:
34:71:6b:49:b4:95:b6:c5:97:dd:29:7b:96:0d:47:f3:ef:ac:
1e:69:f0:a4:91:9a:c0:cb:05:b0:94:61:e1:6f:a0:68:f6:83:
85:69:67:ec:27:0a:8d:43:56:7e:d3:0a:76:fb:13:48:31:8a:
3c:17:54:f7:88:61:3e:9d:fb:8e:40:41:fa:64:13:e8:08:fb:
69:de:ec:8e:a7:18:f8:5c:0e:27:d7:07:8a:5c:33:88:d0:01:
14:93:38:7c:82:57:7b:04:33:7a:0b:dc:e9:cb:aa:43:5a:bc:
e8:bb:d9:ef:e6:b1:1f:11:eb:0d:9d:e5:bd:a9:06:df:a2:39:
93:fc:94:d1:b5:73:e7:43:03:e5:fd:ac:52:1a:dc:9d:93:11:
15:87:85:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:52:17 2025 by rpki-client