This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json)
Hash identifier: BM6sVQV+kxGvGy4DS1riMW6V3T8ZEGrReuVEIdhEO4s=
Subject key identifier: 6D:33:AB:97:D8:71:C9:92:AE:A4:AD:C5:ED:77:90:38:A5:06:5E:63
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial: 0241
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
Manifest number: 021D
Signing time: Fri 05 Dec 2025 00:39:19 +0000
Manifest this update: Fri 05 Dec 2025 00:39:18 +0000
Manifest next update: Fri 12 Dec 2025 00:39:18 +0000
Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: L4XoWO8p4x4YOscsenI+qqwoVx/onWMuHkNMRrMjEXQ=)
2: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (hash: feDA48MiXXJctKT3eZvp/d1nnsUlAcYOaj9wGQ7J2ec=)
3: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: qqBFkEJNiWCb2cCDSNMAUnOoY6M5apd24HqIJ4T1rMk=)
4: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: UdSNL+M5bhbjwAkTjKkIwiTAoopRDA15sbVDq+xd/Mo=)
5: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: UYQj695a2OmzGWejM8q0zjVy0UfE2w5YDuGLHHyUkKE=)
6: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: 0osuZSPKtRbkTEe2rjpJx0+V/IP2FJnFJRtn1br7+ws=)
7: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: wWTFLfND3EADAPn3/677/3gOc92RXHanLyJ2ZQO9E5Y=)
8: E98F15362B3811EF926F1555C4F9AE02.roa (hash: huhcBlB6kInuEcW0eyepHJy04Qrnm/zwE5F/lbsIg4U=)
9: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: K7ih6dZEP7tPsDE029yQg9J9G2EoOjYxEh23BSXqdx4=)
10: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: xEdof+9upKEPJ5nZ8zJI+L9OfNurTTcojEoj01Jch2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 577 (0x241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Validity
Not Before: Dec 5 00:39:18 2025 GMT
Not After : Dec 12 00:39:18 2025 GMT
Subject: CN=693229b7-920f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:46:13:4f:14:9d:19:3a:6b:e0:18:d7:77:
22:d2:61:c2:4d:46:c0:da:fd:50:1e:3b:0c:a7:a1:
cc:6a:a7:e9:ba:63:53:cb:f2:1a:fe:62:26:84:45:
c7:e4:3c:c2:d9:8b:2a:b0:bd:c6:99:57:5a:69:48:
d8:4c:87:a9:29:62:0d:33:dd:dd:c8:c6:52:1a:55:
73:b5:99:06:a6:0e:56:33:33:39:a7:eb:0e:17:3e:
3a:4d:72:f7:60:a8:ab:c9:7c:7a:8d:01:c5:b1:fa:
4b:af:67:b8:69:5a:3b:c0:bb:fc:63:b7:24:9e:8c:
0e:54:44:1a:eb:32:1a:d2:b3:32:03:53:07:cb:3f:
17:88:42:0e:04:54:5e:92:c9:ab:45:96:72:26:df:
97:08:e4:37:36:c6:7e:87:14:37:6e:40:1a:3d:b2:
67:da:1b:43:da:c5:29:64:f7:80:62:fe:ef:79:f4:
37:f2:12:1e:2f:d3:2c:24:05:ca:0c:cf:14:3f:e7:
6b:ba:ed:95:f5:09:04:71:d7:2f:56:f6:6a:19:61:
d7:d9:2d:0c:57:9c:09:e4:71:e2:e1:46:83:9d:53:
c4:99:a2:2b:20:f9:ff:04:0d:75:d3:04:7c:89:6b:
ad:4f:9d:28:0a:92:94:ff:2f:66:39:87:3e:f0:5c:
14:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:33:AB:97:D8:71:C9:92:AE:A4:AD:C5:ED:77:90:38:A5:06:5E:63
X509v3 Authority Key Identifier:
keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1b:43:48:a7:1d:79:4b:3f:05:1f:10:c0:17:9e:a8:f0:94:
24:57:20:8c:d3:ef:41:aa:b5:39:ec:06:0b:7b:c3:94:90:93:
e8:f6:f4:df:26:69:2e:16:d3:82:95:14:a4:c4:e7:d6:f3:b2:
6e:14:91:c5:72:6a:59:33:cb:f9:65:2f:ca:33:2f:fb:af:fd:
e8:df:98:4e:70:e2:90:67:0c:ae:99:0d:c9:11:08:bb:36:e0:
9e:d4:94:43:49:e2:94:8e:43:94:d2:79:a2:69:c7:14:25:49:
5b:19:7c:79:bc:57:ba:8a:d6:89:ba:8e:47:40:55:ee:03:13:
1f:f5:3b:8d:5d:89:15:fe:d5:2c:48:b4:15:13:50:77:18:f2:
ba:27:b8:ac:da:b9:b2:e1:14:fb:9a:ea:cf:a9:87:25:2e:e7:
ea:39:1b:88:c9:2d:da:be:2f:9e:71:3d:b5:8f:1c:e4:1d:d2:
bd:04:9c:ca:f1:06:9a:df:d6:b6:4e:5f:e7:31:bb:c3:ae:fd:
56:34:99:2b:cd:20:3e:02:59:05:92:27:10:23:2b:83:15:62:
d9:8d:86:2a:cd:99:13:c6:60:79:fe:fa:f4:8a:5f:05:dc:07:
b6:fc:52:28:5c:b8:b3:f6:15:97:74:dd:ef:87:0c:13:6b:93:
42:61:9f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:32:41 2025 by rpki-client