This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft
File: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft (raw, json)
Hash identifier: EcoXCzTAwJY3Tq5M0V6+FakiteKBlmP8u+vARn1YRA8=
Subject key identifier: 37:96:01:0A:3B:D3:27:BF:4B:D5:96:54:57:56:8A:56:AD:70:16:47
Authority key identifier: E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22
Certificate issuer: /CN=A91B6395/serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22
Certificate serial: 07E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft
Manifest number: 07D9
Signing time: Thu 04 Dec 2025 20:14:00 +0000
Manifest this update: Thu 04 Dec 2025 20:14:00 +0000
Manifest next update: Thu 11 Dec 2025 20:14:00 +0000
Files and hashes: 1: 5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl (hash: AGd1R/uZCkRzP8Ha82YdBG67f3uxQoDshhxB3mejgII=)
2: 09664BCE144D11EBA0AF3555C4F9AE02.roa (hash: R46kSRwUPT0o0L3SeYvTpp+6+QBHFN3Gx97bjF86iSQ=)
3: 08CE75A6144D11EBA0AF3555C4F9AE02.roa (hash: i2JuCRbl47lyjIy9Uq49MeJ6KkU/aJdqxVXf6ZSbeSM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl
rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:13:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6395, serialNumber=E6ACF4F594A4438F897AEDAAB4A3D38C865CCE22
Validity
Not Before: Dec 4 20:14:00 2025 GMT
Not After : Dec 11 20:14:00 2025 GMT
Subject: CN=6931eb88-46a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:de:a6:5a:ac:b7:48:0a:c2:da:1d:48:a8:
b2:77:66:ab:5a:e7:81:49:a7:fd:6b:90:93:ab:dc:
cb:87:2c:ad:79:00:8d:6e:b6:cc:5d:c8:6a:f7:9b:
34:97:35:f5:af:4f:06:6b:f4:9c:67:b4:22:94:f2:
fc:76:1d:2b:c4:47:32:18:9e:4b:b4:36:fd:65:9f:
fc:09:8f:d3:2b:fd:8e:02:fb:67:c9:cd:55:5a:43:
69:84:1e:0f:4b:75:91:2d:ab:b9:47:44:a3:a8:f4:
58:a4:d5:ed:43:f0:43:9d:6b:22:41:29:a9:a5:52:
78:d8:8d:28:6c:96:5c:42:8e:f1:e9:aa:ee:1a:79:
4f:aa:bc:3d:f0:ea:2b:94:df:e6:7f:75:93:31:63:
d2:19:2a:98:44:2e:d8:81:bd:bc:41:44:99:7f:4a:
0c:74:7d:b7:c6:b8:26:59:9d:f7:50:66:e2:d8:26:
b4:33:9a:04:ce:bb:6d:59:42:c2:b8:82:92:f3:f0:
25:88:68:85:55:f7:07:4f:fc:12:35:4b:9c:61:3c:
7a:92:84:63:02:0f:f0:da:ac:37:9d:b0:22:69:e0:
bf:3e:35:03:33:b8:e0:a6:ba:f7:b5:1b:84:30:7a:
e6:e8:37:85:b2:3d:73:f5:70:ea:17:a6:81:18:9b:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:96:01:0A:3B:D3:27:BF:4B:D5:96:54:57:56:8A:56:AD:70:16:47
X509v3 Authority Key Identifier:
keyid:E6:AC:F4:F5:94:A4:43:8F:89:7A:ED:AA:B4:A3:D3:8C:86:5C:CE:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6395/DC456578144A11EB94076652C4F9AE02/5qz09ZSkQ4-Jeu2qtKPTjIZcziI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4d:bf:86:bb:f8:bd:f7:f9:c7:c4:a3:49:82:1e:8b:ff:b9:
2a:65:20:75:17:e8:4d:7c:4c:54:04:ab:6b:97:32:f7:7e:e6:
87:e2:05:84:a1:77:d4:fa:24:a2:62:f9:b4:a0:15:66:c8:f6:
16:8c:0b:61:cd:66:45:fa:55:01:2f:9c:fc:01:22:b6:46:d5:
80:e6:85:e2:7f:c6:37:2d:86:ff:40:e6:39:91:6a:f5:3f:84:
06:ad:dd:15:06:be:d8:b7:95:70:da:21:a4:86:ac:56:88:e1:
39:a9:40:6d:68:86:59:80:8a:f0:7b:6d:37:bf:e2:dd:b3:2c:
87:82:a8:b1:03:62:78:4c:1f:fe:a4:12:cc:dc:6a:76:3e:97:
b6:88:7a:df:ec:b8:c0:f5:9e:c8:08:0a:1f:f6:8e:bd:21:5c:
66:2e:a0:1c:9e:65:9c:16:6d:5f:d2:8c:f7:e6:9f:62:32:09:
24:b0:7e:63:19:0e:bd:7c:74:b9:58:b3:65:59:a6:95:9c:de:
da:d7:d3:cd:00:36:b2:eb:05:79:78:03:b9:92:ec:7e:36:7c:
2b:20:18:6e:10:68:27:a0:75:e4:e8:db:ee:17:fe:6c:91:b1:
21:84:14:9a:e5:a2:ca:27:55:f4:0d:ba:bc:51:db:c7:d8:db:
b2:0e:a5:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYzOTUxMTAvBgNVBAUTKEU2QUNGNEY1OTRBNDQzOEY4OTdBRURBQUI0QTNEMzhD
ODY1Q0NFMjIwHhcNMjUxMjA0MjAxNDAwWhcNMjUxMjExMjAxNDAwWjAYMRYwFAYD
VQQDEw02OTMxZWI4OC00NmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4hzeplqst0gKwtodSKiyd2arWueBSaf9a5CTq9zLhyyteQCNbrbMXchq95s0
lzX1r08Ga/ScZ7QilPL8dh0rxEcyGJ5LtDb9ZZ/8CY/TK/2OAvtnyc1VWkNphB4P
S3WRLau5R0SjqPRYpNXtQ/BDnWsiQSmppVJ42I0obJZcQo7x6aruGnlPqrw98Oor
lN/mf3WTMWPSGSqYRC7Ygb28QUSZf0oMdH23xrgmWZ33UGbi2Ca0M5oEzrttWULC
uIKS8/AliGiFVfcHT/wSNUucYTx6koRjAg/w2qw3nbAiaeC/PjUDM7jgprr3tRuE
MHrm6DeFsj1z9XDqF6aBGJusswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDeWAQo7
0ye/S9WWVFdWilatcBZHMB8GA1UdIwQYMBaAFOas9PWUpEOPiXrtqrSj04yGXM4i
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjM5NS9EQzQ1NjU3ODE0
NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0LUpldTJxdEtQVGpJWmN6
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVxejA5WlNrUTQtSmV1MnF0S1BUaklaY3ppSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjM5NS9EQzQ1NjU3ODE0NEExMUVCOTQwNzY2NTJDNEY5QUUwMi81cXowOVpTa1E0
LUpldTJxdEtQVGpJWmN6aUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqTb+Gu/i99/nHxKNJgh6L/7kqZSB1F+hNfExUBKtrlzL3fuaH4gWE
oXfU+iSiYvm0oBVmyPYWjAthzWZF+lUBL5z8ASK2RtWA5oXif8Y3LYb/QOY5kWr1
P4QGrd0VBr7Yt5Vw2iGkhqxWiOE5qUBtaIZZgIrwe203v+LdsyyHgqixA2J4TB/+
pBLM3Gp2Ppe2iHrf7LjA9Z7ICAof9o69IVxmLqAcnmWcFm1f0oz35p9iMgkksH5j
GQ69fHS5WLNlWaaVnN7a19PNADay6wV5eAO5kux+NnwrIBhuEGgnoHXk6NvuF/5s
kbEhhBSa5aLKJ1X0Dbq8UdvH2NuyDqUl
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:29:30 2025 by rpki-client