This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
File: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft (raw, json)
Hash identifier: R5Sw1gwhnjAIW9/aCKCNScTNnkaHzu35nwpv1X7Ln3w=
Subject key identifier: 0A:CD:5A:51:02:51:D3:A8:B1:FE:50:1C:97:A7:24:14:A8:1D:DA:37
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Certificate issuer: /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial: 06DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
Manifest number: 06D4
Signing time: Sat 06 Dec 2025 21:02:12 +0000
Manifest this update: Sat 06 Dec 2025 21:02:11 +0000
Manifest next update: Sat 13 Dec 2025 21:02:11 +0000
Files and hashes: 1: 5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl (hash: OH3yEPwpqPU100bhLWDTVkKm0pclxw4yo8C7RdRTlRQ=)
2: CB39C1A0B3B611F0BAAB2960C4F9AE02.roa (hash: ihHUjtZqZJt66QnOXqHfkpUa1k+8R7/9ey9CEIS3+2U=)
3: 54F537EC32CD11EFA6C5320EC4F9AE02.roa (hash: S4JJ7jAyBRSnbNqlDJcNsJ3iSBBNhU/Ff59dfcwJJB4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91801A5, serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Validity
Not Before: Dec 6 21:02:11 2025 GMT
Not After : Dec 13 21:02:11 2025 GMT
Subject: CN=693499d4-75bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:f1:f3:cb:a7:56:ec:5f:ec:2e:81:eb:41:
32:b6:32:d3:c8:f2:46:11:2f:0e:07:10:22:54:29:
34:0a:08:d2:b9:bf:a5:83:7a:92:13:bd:70:ae:fb:
2f:fe:49:60:a7:e9:ea:16:52:8c:b3:66:e2:ab:e5:
f0:c7:0f:fd:68:ae:df:de:a3:b5:c5:f5:07:55:e1:
93:01:1d:2c:a4:76:3b:75:43:26:49:be:a2:9e:f8:
81:c6:66:36:50:82:28:09:e4:8c:2a:0d:77:8a:25:
e1:79:40:e3:91:a8:db:01:49:c9:22:f9:f6:ec:a6:
6a:27:60:a5:a8:70:36:51:cb:c5:74:ee:12:30:f3:
3b:60:51:dc:8e:55:b6:44:1c:be:1d:fa:a6:f2:83:
0a:75:a5:72:97:77:1c:be:46:bf:c7:37:02:6a:c7:
c5:b3:87:65:2e:7e:e3:11:9f:e3:98:53:b6:cc:27:
e1:51:4a:d4:af:39:99:82:8e:c1:88:61:26:c6:f3:
2f:41:d0:99:69:b7:cc:a0:c4:c7:be:fa:27:ab:a3:
1f:ac:d8:47:1f:f3:16:26:1a:16:b3:46:49:24:f9:
f1:d5:6f:9b:33:16:4a:8b:cc:1e:8c:b1:6c:bd:e2:
1a:4f:47:56:fc:c5:5c:05:bb:90:d5:a6:1a:b4:ea:
c3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CD:5A:51:02:51:D3:A8:B1:FE:50:1C:97:A7:24:14:A8:1D:DA:37
X509v3 Authority Key Identifier:
keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:1e:92:b2:cd:5d:b9:c2:4d:dd:ea:3b:1b:d2:87:17:75:62:
73:d9:99:ca:bf:4e:74:68:22:76:ff:1a:d2:23:24:c4:91:7d:
d0:6b:c5:96:8b:52:72:e3:a7:3c:b8:d6:d9:7d:94:7d:2c:95:
de:81:46:54:3f:da:91:f7:8c:8e:fd:05:2b:a2:c8:b9:99:f6:
71:c8:dd:68:b5:53:cf:bc:a6:9a:c2:e3:69:5e:d9:17:b5:70:
f3:b3:23:1f:e3:33:7a:b8:57:06:5b:df:d8:6c:cd:cb:c0:e3:
c0:82:01:66:fa:ef:a2:46:26:cc:cb:cf:fd:f5:a0:8c:46:89:
ec:3c:1b:fa:9f:01:08:c2:d4:ec:76:64:d6:7a:e6:ac:35:1c:
f7:99:ad:19:8d:a9:68:8f:2c:86:bd:83:38:bb:08:c6:21:fd:
f4:45:bb:07:ed:56:93:ee:0b:7b:5a:7a:be:4e:41:b5:7e:a6:
4d:7c:96:1f:99:f9:80:00:e8:71:0d:2b:d4:00:17:90:2e:71:
23:ac:2e:9d:29:e5:d7:9a:16:25:35:cd:97:fa:c5:6d:78:00:
2a:72:e8:6b:62:fd:aa:2a:8e:26:9c:1b:4c:6d:d7:43:f4:45:
27:a9:48:f8:24:d6:ac:a4:6d:0c:ce:0d:3f:a5:09:80:9a:95:
62:5c:32:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:35:09 2025 by rpki-client