This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
File: 5wYdsiKDjeaKk84h7ykbBVQthyY.mft (raw, json)
Hash identifier: 3UtjV+6EhtKHvvCCw4tkNLUYP/M4TrRnepYBjc52Au4=
Subject key identifier: C6:F4:B1:19:91:36:22:3C:25:54:1B:5B:35:98:D7:C4:35:F2:5E:06
Authority key identifier: E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26
Certificate issuer: /CN=A919D3C2/serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726
Certificate serial: 1B5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
Manifest number: 1B53
Signing time: Sat 06 Dec 2025 15:56:05 +0000
Manifest this update: Sat 06 Dec 2025 15:56:04 +0000
Manifest next update: Sat 13 Dec 2025 15:56:04 +0000
Files and hashes: 1: 5wYdsiKDjeaKk84h7ykbBVQthyY.crl (hash: pH0GWFLLbOU3UtqkmXct+k9QfojppRjfuK9EEVuNwYM=)
2: A6B5F55C23F911E79BE44454C4F9AE02.roa (hash: F2ak73nonVZ20QRrcSfPPZHYy8EZQeLDHTDgpyvlwUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl
rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7006 (0x1b5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D3C2, serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726
Validity
Not Before: Dec 6 15:56:04 2025 GMT
Not After : Dec 13 15:56:04 2025 GMT
Subject: CN=69345215-fe80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:c4:5b:61:9d:40:4b:c8:12:07:c9:de:6a:
e3:e4:e9:84:f8:b6:e0:d7:a3:08:cd:08:d4:32:ca:
3f:73:d9:64:00:8b:2e:9a:ad:d4:c8:4a:05:34:f5:
56:5c:67:ee:20:df:5b:be:d7:73:2c:bd:09:64:91:
15:9a:73:12:c7:e9:92:40:4f:88:da:83:9c:d1:5f:
60:8d:a6:d7:9b:17:1b:a7:3f:09:fa:e6:fb:5c:34:
f0:48:33:03:bb:61:d4:77:eb:de:c1:cd:df:23:9d:
50:6e:f0:20:0a:7f:b3:e6:f7:b0:23:55:ff:c3:f3:
bd:66:5c:a4:45:a1:a0:c6:2e:ce:70:4c:a4:6f:42:
98:53:fd:99:21:33:95:40:d0:6d:17:9d:48:cc:73:
47:d7:f5:1e:b9:6a:bc:78:d6:ac:b1:fd:9c:70:8d:
8f:8e:72:ec:d5:d0:ef:73:3d:a4:f3:32:c4:33:c8:
ca:9c:ed:87:e3:1b:9d:7b:86:84:87:b5:50:8b:98:
aa:72:aa:72:d3:f7:7f:5d:17:2e:45:bb:0a:5a:8e:
e2:9e:65:b8:91:49:30:9f:d3:a8:52:d1:0b:4b:66:
c5:05:1a:de:be:dd:7b:aa:6d:81:de:f2:52:84:b2:
52:59:e8:1f:fd:cf:53:12:62:da:70:d8:c9:1e:5c:
f6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F4:B1:19:91:36:22:3C:25:54:1B:5B:35:98:D7:C4:35:F2:5E:06
X509v3 Authority Key Identifier:
keyid:E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:a8:e7:d5:3e:09:48:e5:0b:f7:97:e3:4a:ec:aa:fe:a4:3b:
9a:b9:bd:11:35:1c:ec:22:ae:ac:72:99:9a:0a:30:eb:aa:82:
86:21:d5:d2:72:58:49:26:8f:29:1b:d4:6a:c7:6b:ec:1c:37:
49:ca:71:b1:1b:be:aa:74:0a:f7:1e:49:40:fd:fb:f5:41:47:
e3:6b:e4:c2:2e:12:03:8e:24:bf:26:15:6b:df:5e:b6:ec:fd:
f5:5f:8b:b0:27:4b:0a:7a:25:ce:ff:0d:12:3e:dd:9c:2a:27:
78:ac:7c:ee:09:20:5d:f6:0b:a5:41:99:9b:66:28:56:f7:26:
1f:fa:86:a8:95:16:25:7d:e4:80:ff:48:30:2a:9e:e5:a4:62:
19:34:d8:76:31:7b:1f:e8:ab:09:a9:33:75:39:df:d2:cd:4a:
3b:7d:9f:c6:d1:34:11:df:ba:e1:5f:4d:96:ba:ed:5e:3d:b7:
33:54:96:53:30:c7:f2:79:c8:d8:71:f5:a2:22:0b:de:bb:2c:
1c:f1:00:3c:89:e5:dc:24:9a:df:a2:22:28:56:17:4b:25:96:
32:56:78:80:cf:47:f8:67:96:86:32:2d:0c:43:8b:3b:73:33:
ee:47:bb:b0:9b:f5:d1:b7:8f:d8:57:d0:27:f8:5f:4d:17:7a:
0c:19:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:08:20 2025 by rpki-client