This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier: /v81f4mYTPma2vuqszQvFXtJhVHtnhSnwfDTinYYWc0=
Subject key identifier: 93:FD:AB:F9:5F:13:68:FF:50:40:00:DE:E4:EC:07:1F:F5:F9:F9:90
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial: 0566
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number: 055A
Signing time: Thu 04 Dec 2025 22:01:11 +0000
Manifest this update: Thu 04 Dec 2025 22:01:11 +0000
Manifest next update: Thu 11 Dec 2025 22:01:11 +0000
Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: miWgEXkL5t1FR4WR+aIulW2A5I4NxUAdJbd5Tl9Zh6k=)
2: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: EaQ615UaoSlbYGe5kp9Ft1URPJxHKbUFtgfGcBgBPeU=)
3: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: GLm2AKslZ/503xaJdyFMTW6e2t7uEKz1XmKi3aW5E9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1382 (0x566)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Validity
Not Before: Dec 4 22:01:11 2025 GMT
Not After : Dec 11 22:01:11 2025 GMT
Subject: CN=693204a7-a59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:15:7c:fc:c8:50:02:c1:fa:6d:ec:71:7b:
65:22:ad:86:d1:7e:24:bc:26:33:b1:65:1b:32:08:
f6:06:cc:d6:1c:b8:94:bb:3c:64:70:a5:7d:14:34:
fd:40:82:1e:f0:64:df:b2:4d:cc:71:62:6f:a5:ae:
c9:76:42:ca:d6:8b:6a:2b:f7:b6:66:9e:f7:e0:fb:
a2:bf:8d:e6:13:be:79:03:63:78:48:0e:c8:d7:24:
68:dc:3a:be:5f:48:ff:fe:74:74:4c:c8:0e:e8:68:
e1:46:ee:29:6c:ba:5a:f2:ad:e7:05:1d:d4:4b:ca:
94:30:e1:5e:04:d3:0a:e8:6a:c4:06:85:70:56:5a:
c2:93:fb:47:d9:ce:af:0b:47:39:81:2c:64:f8:be:
c6:83:f6:fa:b9:28:3a:b5:0c:2f:de:5d:9f:43:17:
00:f3:fc:c5:5b:e8:7f:d1:23:74:6f:61:8c:67:b7:
fe:64:23:c7:a0:93:ee:66:58:3f:0a:d2:d1:32:86:
04:8a:65:a3:e6:2f:77:e8:96:bc:e0:c2:a3:71:89:
ae:c3:34:2a:d2:e7:a1:54:4f:76:83:c7:41:ba:30:
31:e6:a8:2a:c0:91:db:c1:56:9f:09:9c:c5:be:57:
17:6f:b0:2e:2c:47:0c:07:65:5a:57:75:17:39:32:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FD:AB:F9:5F:13:68:FF:50:40:00:DE:E4:EC:07:1F:F5:F9:F9:90
X509v3 Authority Key Identifier:
keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:66:6c:6f:1d:b3:ac:3c:fa:4d:b8:c7:2c:74:fe:53:4f:12:
0e:2b:6a:5e:48:df:fc:15:14:af:18:39:b2:a1:9b:7d:68:b6:
7b:96:59:ce:c8:53:68:57:64:ed:87:66:37:e9:87:1a:94:58:
73:55:51:cd:30:a4:e3:9f:d5:f0:44:6e:8e:a5:50:13:31:d2:
7d:b1:6a:4f:3a:d0:23:18:26:33:d9:ba:3e:9c:7d:ba:52:4d:
b9:36:4f:01:b5:62:c7:c9:2c:16:c8:6a:e2:38:1f:2a:48:6e:
15:f0:09:46:c2:5e:56:92:db:b1:a5:3f:f6:99:bd:ee:b9:3c:
58:4d:c8:c7:67:4e:9a:27:01:6f:29:11:1c:2d:1c:91:3d:42:
eb:65:ed:92:17:82:46:57:c4:12:94:92:fd:27:be:82:0c:54:
49:ea:05:d5:2f:7b:13:9d:99:11:23:c3:69:0c:84:c8:b6:ab:
1b:e3:91:75:52:09:f4:22:9e:7b:fc:ed:c8:02:94:ea:8a:99:
c7:b5:4f:93:ee:70:33:2e:33:e7:17:73:f6:96:1c:0a:52:36:
e1:e7:0b:75:3a:4d:3a:ca:49:98:93:6c:7f:fd:d2:02:cc:9a:
66:f6:e5:f6:76:c1:7e:1c:b4:d7:d2:a7:60:2e:2d:b6:7f:67:
89:38:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:51 2025 by rpki-client