This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
File: C5sr_BxrLAlndq91fTrxRUfkPnI.mft (raw, json)
Hash identifier: ehBd2+YUSOZmsB69EB26djoZchnqXNRDrparNvk9GXw=
Subject key identifier: 09:10:87:BE:B8:35:77:15:24:F4:08:21:82:BA:52:DC:18:D7:7F:5A
Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Certificate serial: 122E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
Manifest number: 1219
Signing time: Thu 04 Dec 2025 16:46:49 +0000
Manifest this update: Thu 04 Dec 2025 16:46:49 +0000
Manifest next update: Thu 11 Dec 2025 16:46:49 +0000
Files and hashes: 1: C5sr_BxrLAlndq91fTrxRUfkPnI.crl (hash: UDMIPQL81AYWgof1xxrnikOBxO5AAFYtMbkK02wwxY0=)
2: 60FCDED2F48F11E89651151FC4F9AE02.roa (hash: TiqURCOWDtFV1lphAi7QXXgszXNq/kYQUGQ1WC3OpiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4654 (0x122e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F646, serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72
Validity
Not Before: Dec 4 16:46:49 2025 GMT
Not After : Dec 11 16:46:49 2025 GMT
Subject: CN=6931baf9-4ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:f9:51:9d:2a:b3:f7:ab:4e:d6:21:34:ae:
27:b2:de:98:c6:45:c4:0c:b1:f7:8c:95:d2:07:8a:
48:5d:bc:d9:28:2a:e8:cc:15:73:ef:fc:84:88:a8:
6c:94:88:21:fc:1b:e9:f9:5d:00:4e:cc:91:d1:0a:
01:6a:e7:87:6e:26:c2:9b:61:74:95:7a:a8:ce:f1:
12:d6:cd:f9:bb:6a:d2:24:35:5d:45:29:d7:3a:85:
3d:6a:8a:b9:4f:5f:bc:c2:59:02:8c:37:03:26:1d:
1b:37:e8:a2:f2:e2:58:e6:1c:44:3d:e3:de:87:ee:
30:47:8e:3b:9d:e0:2b:95:6f:3b:7a:78:c7:1a:da:
ef:85:3a:b1:a8:32:4f:34:1e:28:2d:40:fa:32:87:
64:32:3a:5b:27:32:2b:65:40:5b:d7:30:f6:b9:25:
90:27:ad:a2:ce:9e:b2:2c:14:65:80:04:04:f8:1c:
a9:22:32:08:18:7b:56:4d:87:49:b8:5b:1c:b9:e0:
76:28:51:a9:86:21:d7:d8:c6:18:54:5f:c2:82:c6:
d1:a9:45:19:6b:77:18:33:7d:c3:ab:c8:fd:f2:fa:
e2:bc:e0:e2:d7:13:51:c1:74:64:d1:93:2e:58:a0:
91:56:32:c5:8d:f1:b7:eb:7d:2a:76:0d:ad:19:5f:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:10:87:BE:B8:35:77:15:24:F4:08:21:82:BA:52:DC:18:D7:7F:5A
X509v3 Authority Key Identifier:
keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:a6:79:57:aa:89:a2:cd:7f:98:76:36:5c:17:af:d5:ba:0d:
57:77:ce:ac:5c:21:cd:d1:1c:80:67:bd:6d:21:82:5f:62:90:
71:ea:8f:97:05:a2:87:77:10:1a:14:ca:43:69:e8:b1:d3:aa:
7a:51:44:1c:93:b2:1d:b0:5c:b0:f3:0d:4a:6f:00:70:27:ed:
d2:48:ca:49:c3:e8:8d:19:c9:08:7c:5e:de:e6:ba:76:14:45:
b4:29:d1:35:cd:71:83:7a:42:31:36:bd:9a:42:b3:37:de:cb:
67:ae:45:bf:9e:d9:73:0d:c3:8c:f6:9d:1b:73:6f:a8:0f:da:
b0:65:6b:12:92:6c:8d:d0:19:64:9f:42:af:50:02:29:9b:0c:
df:94:34:9c:c3:38:dc:53:df:5a:46:57:0f:fa:a4:2b:c0:38:
23:7d:4b:2e:ad:d2:45:a1:02:18:bb:7d:4b:78:10:ef:02:56:
16:7e:51:d0:d9:0f:0c:39:04:fc:7e:27:4b:13:8e:da:c1:cd:
ec:d4:9c:76:b9:c7:f0:08:d6:6e:c8:fc:a3:1d:2d:fb:4f:e8:
e1:85:d5:0c:43:34:56:d1:9c:51:c2:46:35:59:43:32:9f:ba:
10:a8:71:63:4f:c4:86:d8:cf:ee:f7:16:87:a4:9c:64:29:ad:
73:ae:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:56:39 2025 by rpki-client