This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
File: b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft (raw, json)
Hash identifier: q9LRX/XWqzbjN+O1vUhwpGuAOXgKJv2xZHX0BJ9nh6w=
Subject key identifier: CA:5B:C4:58:5E:A4:85:F1:73:9F:58:C7:2F:32:51:C0:33:A2:0C:4E
Authority key identifier: 6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
Certificate issuer: /CN=A918D2CA/serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
Manifest number: 69
Signing time: Fri 05 Dec 2025 04:53:24 +0000
Manifest this update: Fri 05 Dec 2025 04:53:23 +0000
Manifest next update: Fri 12 Dec 2025 04:53:23 +0000
Files and hashes: 1: b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl (hash: kMfR3UH1Xd+Di0+WqP+r41fLlLw7qs4EnkxONQ9YyGE=)
2: 8C9E2B18354711F09FCEEE25C4F9AE02.roa (hash: Rm2y9XYNOuLaJLPo5EgOIcrmYm6wYWaPwijgwTBKrVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D2CA, serialNumber=6F91C76A4F74664100DD8DEBD1785142E137802D
Validity
Not Before: Dec 5 04:53:23 2025 GMT
Not After : Dec 12 04:53:23 2025 GMT
Subject: CN=69326544-9971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d1:ea:e1:a5:47:f1:2d:a5:8a:a0:c9:cc:40:
88:e7:a4:89:e5:ec:ec:05:00:10:b0:ff:a8:a9:da:
de:fe:be:18:73:23:bd:ac:c9:da:c9:d8:ab:c8:3b:
ab:fd:82:e9:99:6e:4f:aa:27:cf:16:0c:f9:13:d7:
89:84:1d:6a:c7:43:41:fc:41:e4:72:c3:a7:b8:6d:
3e:bb:92:61:da:c7:5b:2c:a3:5a:79:fd:b6:64:3f:
4b:8f:8b:a2:0b:2c:f1:70:79:ce:6f:da:59:ed:54:
88:c3:01:4d:2e:73:f0:34:a5:d2:7a:ce:2b:10:cc:
81:b0:90:17:17:90:05:f5:70:79:cb:4d:3f:98:8d:
78:5f:f7:f2:5c:83:ac:5f:51:56:9b:f6:72:f7:ad:
fa:2e:68:a8:41:6b:bc:87:f7:c6:a1:b7:62:2e:38:
00:cd:5a:08:aa:8a:ed:cf:16:18:4d:5c:16:31:e7:
4f:ef:7d:93:77:be:9c:46:14:7e:ae:62:19:fe:55:
bd:30:7a:a5:9e:68:9d:69:6e:5a:51:dd:de:85:58:
01:c2:bc:4b:a7:5f:8b:7b:12:a9:e3:ad:0a:75:89:
22:1c:ff:15:82:c3:c2:df:3d:a8:8a:24:2e:3b:9f:
70:80:61:d9:eb:8b:62:53:7f:54:09:b4:98:35:81:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5B:C4:58:5E:A4:85:F1:73:9F:58:C7:2F:32:51:C0:33:A2:0C:4E
X509v3 Authority Key Identifier:
keyid:6F:91:C7:6A:4F:74:66:41:00:DD:8D:EB:D1:78:51:42:E1:37:80:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b5HHak90ZkEA3Y3r0XhRQuE3gC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D2CA/09F74EF6354711F08103BE24C4F9AE02/b5HHak90ZkEA3Y3r0XhRQuE3gC0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c5:31:3d:32:71:c0:50:c4:c9:00:54:fb:c5:87:3c:c2:21:
dd:73:5d:88:77:f2:c5:40:aa:76:71:2a:47:58:12:ed:46:6c:
09:3e:0b:29:a9:88:70:56:1c:d4:c1:f7:80:c4:22:d7:6c:3c:
32:18:16:88:6d:ba:ce:15:1f:6e:c6:e0:2a:a1:84:75:16:ad:
a2:e6:d2:f3:5a:99:92:cf:71:f9:a0:40:f1:d4:1a:c3:28:ab:
0f:b4:aa:88:f5:08:95:0a:69:f6:f8:97:e0:a1:91:39:20:0b:
d7:67:20:7e:19:42:0e:27:27:8e:2e:84:fb:4c:89:68:73:53:
bb:66:5f:73:26:8b:98:8b:cc:2a:19:1f:ae:76:43:c5:ff:9f:
43:cd:6a:a1:d5:51:87:d0:1c:57:ae:11:6a:c2:a4:33:35:f6:
3d:03:10:a3:37:59:15:6f:ba:5e:99:7f:63:b6:95:97:e4:cc:
df:1c:e5:a9:9d:3c:26:7b:50:cc:90:2e:49:55:d6:ed:3e:62:
b6:70:66:49:9b:b4:65:06:df:38:08:c9:c9:2a:4a:a6:8c:bd:
07:5c:76:97:24:ff:3b:72:9c:ec:94:02:af:2f:48:1f:57:3f:
05:14:40:8d:a9:2b:0f:37:e8:84:5a:33:24:3f:0a:a4:8f:f4:
69:d4:48:66
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RDJDQTExMC8GA1UEBRMoNkY5MUM3NkE0Rjc0NjY0MTAwREQ4REVCRDE3ODUxNDJF
MTM3ODAyRDAeFw0yNTEyMDUwNDUzMjNaFw0yNTEyMTIwNDUzMjNaMBgxFjAUBgNV
BAMTDTY5MzI2NTQ0LTk5NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDi0erhpUfxLaWKoMnMQIjnpInl7OwFABCw/6ip2t7+vhhzI72sydrJ2KvIO6v9
gumZbk+qJ88WDPkT14mEHWrHQ0H8QeRyw6e4bT67kmHax1sso1p5/bZkP0uPi6IL
LPFwec5v2lntVIjDAU0uc/A0pdJ6zisQzIGwkBcXkAX1cHnLTT+YjXhf9/Jcg6xf
UVab9nL3rfouaKhBa7yH98aht2IuOADNWgiqiu3PFhhNXBYx50/vfZN3vpxGFH6u
Yhn+Vb0weqWeaJ1pblpR3d6FWAHCvEunX4t7EqnjrQp1iSIc/xWCw8LfPaiKJC47
n3CAYdnri2JTf1QJtJg1gdP/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUylvEWF6k
hfFzn1jHLzJRwDOiDE4wHwYDVR0jBBgwFoAUb5HHak90ZkEA3Y3r0XhRQuE3gC0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEMkNBLzA5Rjc0RUY2MzU0
NzExRjA4MTAzQkUyNEM0RjlBRTAyL2I1SEhhazkwWmtFQTNZM3IwWGhSUXVFM2dD
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvYjVISGFrOTBaa0VBM1kzcjBYaFJRdUUzZ0MwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE
MkNBLzA5Rjc0RUY2MzU0NzExRjA4MTAzQkUyNEM0RjlBRTAyL2I1SEhhazkwWmtF
QTNZM3IwWGhSUXVFM2dDMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKDFMT0yccBQxMkAVPvFhzzCId1zXYh38sVAqnZxKkdYEu1GbAk+Cymp
iHBWHNTB94DEItdsPDIYFohtus4VH27G4CqhhHUWraLm0vNamZLPcfmgQPHUGsMo
qw+0qoj1CJUKafb4l+ChkTkgC9dnIH4ZQg4nJ44uhPtMiWhzU7tmX3Mmi5iLzCoZ
H652Q8X/n0PNaqHVUYfQHFeuEWrCpDM19j0DEKM3WRVvul6Zf2O2lZfkzN8c5amd
PCZ7UMyQLklV1u0+YrZwZkmbtGUG3zgIyckqSqaMvQdcdpck/ztynOyUAq8vSB9X
PwUUQI2pKw836IRaMyQ/CqSP9GnUSGY=
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:54:57 2025 by rpki-client