This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
File: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft (raw, json)
Hash identifier: uH6bS2Kzipw07eGKmvaP954DutTiwUBXsiYTD6SsJD0=
Subject key identifier: 5C:08:D7:1B:84:44:08:F7:A0:3F:86:85:8F:09:99:A2:FD:82:C0:B0
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Certificate issuer: /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial: 0E52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
Manifest number: 0E3E
Signing time: Thu 04 Dec 2025 17:21:05 +0000
Manifest this update: Thu 04 Dec 2025 17:21:05 +0000
Manifest next update: Thu 11 Dec 2025 17:21:05 +0000
Files and hashes: 1: 5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl (hash: j4VH+peRytOS7eaaWVzSarNCEm8h56FqGBOfXjQYqaQ=)
2: 6B7E8FC670DE11EC8B944928C4F9AE02.roa (hash: SL8FzgT9OVj8sdsnB4xU4ICjAq4jGd5hRYBkcZgW2/Q=)
3: 6A5EC93A70DE11EC8B944928C4F9AE02.roa (hash: zsBzQXlrop3QXwRjd71J0Riqde1kTtjObGNIMhQrjtk=)
4: 9F14D15E70DB11ECACCABD21C4F9AE02.roa (hash: zNtcNtlfhOp5rrdq7IsqZIll5wTiy9EfvtnOMRdZ+PY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3666 (0xe52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Validity
Not Before: Dec 4 17:21:05 2025 GMT
Not After : Dec 11 17:21:05 2025 GMT
Subject: CN=6931c301-6628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:3a:b0:aa:a5:e1:99:24:ce:87:fc:0c:9c:
be:1a:9c:ce:c2:08:ea:fd:f5:67:85:ca:4c:9b:86:
ac:43:34:9a:6e:00:dd:32:a3:97:8b:d5:9b:73:21:
48:35:ac:1c:88:8b:7d:6d:b7:1b:83:f3:12:df:ad:
95:65:b0:bd:6b:30:cb:84:b1:22:d8:a0:d0:45:ba:
c7:87:42:ae:d5:aa:6b:91:10:44:87:81:3f:0c:00:
8b:0e:fd:05:fc:81:ca:cf:66:0b:80:73:02:25:13:
6a:9b:8a:7c:f7:c0:1b:ad:f5:06:16:7b:d5:93:f8:
cc:d8:8c:fe:12:81:55:c9:1b:b4:a3:98:ee:fd:62:
fb:59:2f:bc:92:40:d4:49:d0:ee:68:03:50:00:47:
3a:7f:d6:15:d6:74:ec:36:bf:12:8e:99:b7:3a:ec:
e0:db:b0:f6:eb:05:26:6b:b3:56:9f:df:7d:78:a3:
e6:f1:8b:ac:9b:71:c4:06:36:16:30:c8:6a:cf:5e:
99:f8:7a:8b:0a:49:a3:95:74:7a:6c:ef:60:19:70:
9a:be:22:ae:6f:b3:73:2c:89:72:c9:75:85:ef:d4:
bf:44:42:e3:b0:da:7e:d1:0f:03:e8:6c:b4:f8:b2:
4f:7b:58:a6:84:c6:cb:b2:14:36:70:c9:d6:97:d1:
18:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:08:D7:1B:84:44:08:F7:A0:3F:86:85:8F:09:99:A2:FD:82:C0:B0
X509v3 Authority Key Identifier:
keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:68:29:2f:3a:2f:ed:c8:f7:26:ea:60:93:c8:a5:1c:b3:de:
ce:a4:9b:46:96:5c:7a:e6:15:57:ba:91:b6:a8:f0:91:de:a5:
39:a3:32:4f:ce:cd:11:6c:d1:7e:07:1e:d3:19:c7:3f:09:52:
6a:16:5f:1b:f2:55:24:a1:18:1b:b0:3b:6c:ea:53:a3:62:2a:
10:63:a3:ca:40:3a:05:c5:95:5b:c3:05:13:34:ed:c6:b8:62:
27:e8:76:0d:63:77:1e:bb:3e:52:51:f8:46:33:8d:b1:08:67:
04:04:68:1d:09:04:c2:4e:32:98:2f:e4:8d:8c:cc:33:95:a6:
09:2a:92:44:bc:50:ad:d8:e1:11:42:ef:b7:96:12:27:1f:87:
e7:9c:49:d2:0d:60:5c:59:71:ab:45:02:a6:6e:f6:eb:5b:57:
d3:54:17:50:9e:21:0f:24:b3:7d:17:63:2d:5a:cc:90:33:7b:
03:65:a9:4f:ef:49:98:cd:b9:d6:e5:40:0d:17:d2:98:4e:5d:
6f:ec:c6:77:b6:52:34:ca:ba:9b:ad:92:c2:36:f6:24:58:58:
44:24:da:9e:92:35:2f:6c:fd:c8:e9:8d:3a:a8:84:2b:82:70:
30:fa:8c:ae:66:12:aa:bf:c5:09:64:94:9f:fc:e8:e1:58:66:
4a:98:8a:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODNEQjcxMTAvBgNVBAUTKEU1MThFOTQ4MTVDNDZEN0Q4RTZGRUY0RUJDM0QxOERG
MEUyMUY4MzYwHhcNMjUxMjA0MTcyMTA1WhcNMjUxMjExMTcyMTA1WjAYMRYwFAYD
VQQDEw02OTMxYzMwMS02NjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTo6sKql4Zkkzof8DJy+GpzOwgjq/fVnhcpMm4asQzSabgDdMqOXi9WbcyFI
NawciIt9bbcbg/MS362VZbC9azDLhLEi2KDQRbrHh0Ku1aprkRBEh4E/DACLDv0F
/IHKz2YLgHMCJRNqm4p898AbrfUGFnvVk/jM2Iz+EoFVyRu0o5ju/WL7WS+8kkDU
SdDuaANQAEc6f9YV1nTsNr8Sjpm3Ouzg27D26wUma7NWn999eKPm8Yusm3HEBjYW
MMhqz16Z+HqLCkmjlXR6bO9gGXCaviKub7NzLIlyyXWF79S/RELjsNp+0Q8D6Gy0
+LJPe1imhMbLshQ2cMnWl9EYNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwI1xuE
RAj3oD+GhY8JmaL9gsCwMB8GA1UdIwQYMBaAFOUY6UgVxG19jm/vTrw9GN8OIfg2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0RCNy8wRjM3NTk5RUI1
MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJYMk9iLTlPdkQwWTN3NGgt
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVSanBTQlhFYlgyT2ItOU92RDBZM3c0aC1EWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
M0RCNy8wRjM3NTk5RUI1MjExMUU5OEQ4QkFDNTJDNEY5QUUwMi81UmpwU0JYRWJY
Mk9iLTlPdkQwWTN3NGgtRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeaCkvOi/tyPcm6mCTyKUcs97OpJtGllx65hVXupG2qPCR3qU5ozJP
zs0RbNF+Bx7TGcc/CVJqFl8b8lUkoRgbsDts6lOjYioQY6PKQDoFxZVbwwUTNO3G
uGIn6HYNY3ceuz5SUfhGM42xCGcEBGgdCQTCTjKYL+SNjMwzlaYJKpJEvFCt2OER
Qu+3lhInH4fnnEnSDWBcWXGrRQKmbvbrW1fTVBdQniEPJLN9F2MtWsyQM3sDZalP
70mYzbnW5UANF9KYTl1v7MZ3tlI0yrqbrZLCNvYkWFhEJNqekjUvbP3I6Y06qIQr
gnAw+oyuZhKqv8UJZJSf/OjhWGZKmIrR
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:39:29 2025 by rpki-client