This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
File: mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json)
Hash identifier: y83wKQz45lIssIFDMdsIbecft/zLg3YINUZ+k/RklNE=
Subject key identifier: 0D:B4:1E:AC:B3:87:A8:FD:74:0D:E7:5B:6C:43:5C:EE:3E:DC:24:C3
Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48
Certificate issuer: /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
Certificate serial: 01A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
Manifest number: 019E
Signing time: Sun 07 Dec 2025 01:47:24 +0000
Manifest this update: Sun 07 Dec 2025 01:47:23 +0000
Manifest next update: Sun 14 Dec 2025 01:47:23 +0000
Files and hashes: 1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: l3kVNPYd3+YXglnRSpXlBF4EHEoPQtbD7TdSzTJqB7I=)
2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: lw98bEtKYAV3W3eLzVIhHAUrtXOXdYQymX4EcxFqPzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl
rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 01:47:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
Validity
Not Before: Dec 7 01:47:23 2025 GMT
Not After : Dec 14 01:47:23 2025 GMT
Subject: CN=6934dcab-3aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:15:65:45:f9:09:b0:3e:37:93:13:14:5e:
1f:f6:97:b4:55:96:1e:20:91:e3:f7:ee:31:9e:92:
40:94:42:2b:45:9f:33:29:f7:1d:66:37:92:76:86:
04:93:8a:07:0f:69:c4:e3:20:44:d5:f2:ab:d9:9c:
65:60:18:f6:c8:98:a7:16:12:00:08:1c:14:22:a2:
56:88:d5:18:15:d8:70:1e:0b:cb:97:77:16:3e:24:
f4:b8:61:15:50:04:3e:99:5e:06:5c:e6:ca:24:7a:
9e:3d:35:8e:12:2c:26:71:bc:6f:61:43:3f:d8:ee:
95:d7:a0:7e:48:6d:3e:4a:e7:92:46:86:ca:00:40:
8b:85:7b:41:0a:dc:8a:50:29:cd:c8:59:cd:de:27:
5e:fe:a4:be:5e:9f:4f:63:38:42:86:3a:08:04:5c:
9f:53:4c:63:6b:78:8d:68:93:32:57:c3:92:8d:9e:
69:82:6c:75:2a:ae:05:d1:e8:a3:3e:c2:17:e3:dc:
f5:5b:43:54:bf:fc:29:da:76:0d:ea:14:59:e6:67:
b7:ce:ba:20:76:a6:19:65:c3:58:52:8e:0e:a1:de:
a2:ca:84:72:39:c3:7b:33:e1:9f:44:88:6b:be:49:
dc:30:41:e3:ea:76:d7:d1:61:96:0e:8d:31:65:e8:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:1E:AC:B3:87:A8:FD:74:0D:E7:5B:6C:43:5C:EE:3E:DC:24:C3
X509v3 Authority Key Identifier:
keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:07:64:da:8a:b3:d5:c3:a6:9e:fe:db:9f:7d:13:f9:63:63:
11:fa:42:50:a2:69:34:d0:fa:aa:5d:a5:d5:30:0b:f1:8c:1c:
76:6b:40:0c:1d:e8:6a:1d:35:ad:ea:55:3f:82:37:58:ca:04:
42:08:b9:a6:92:02:59:1f:38:37:94:25:56:23:c9:9f:30:f4:
4d:63:83:2f:4b:64:7b:71:bd:37:75:58:98:cb:19:71:0a:19:
27:8a:31:06:cd:3e:e3:61:db:bb:8a:d2:10:29:7b:21:b1:23:
c5:6c:4a:1c:2d:99:f4:f1:4c:d1:22:d9:20:e0:a8:fb:41:04:
c7:4c:f0:00:a4:74:c8:a7:dc:c8:96:51:db:34:21:40:70:7f:
f7:fc:22:01:5f:90:d7:70:c9:9c:bf:62:f6:aa:8d:04:de:c5:
0b:a1:4c:12:19:56:1e:b6:e3:4e:94:fa:bc:c0:9c:06:8e:c6:
4c:3c:b4:0c:d1:cc:9a:55:78:d6:86:24:c0:8b:dc:ed:69:a4:
36:d4:f9:fc:dc:0b:6a:c6:36:fb:d6:30:45:97:cb:b0:a8:1d:
cf:70:51:e7:e4:26:ad:62:7c:5c:d8:6f:d8:84:af:83:38:13:
c2:86:c3:ca:1d:79:25:86:af:9e:ba:90:a7:65:c3:03:2f:52:
98:5e:71:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:31:35 2025 by rpki-client