This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
File: 5hI_ServZkwi-UzV67rqztOHoW8.mft (raw, json)
Hash identifier: FngyAONOKxZFlCpFK2UYWyKclWI1DSd2zEYmE7WPYL0=
Subject key identifier: 26:45:D8:67:E1:FC:4B:08:C4:C0:9D:67:2D:3C:C2:FD:89:67:DE:2D
Authority key identifier: E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
Certificate issuer: /CN=A91B861D/serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Certificate serial: 0661
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
Manifest number: 065A
Signing time: Thu 04 Dec 2025 21:22:41 +0000
Manifest this update: Thu 04 Dec 2025 21:22:41 +0000
Manifest next update: Thu 11 Dec 2025 21:22:41 +0000
Files and hashes: 1: 5hI_ServZkwi-UzV67rqztOHoW8.crl (hash: 0tfpLCUF4hykwGySZXm1EwG//I+j35d87smkBvOEm3Y=)
2: 1D0BA0FC57EB11F096357F7CC4F9AE02.roa (hash: Njg0pVJ4I7URnxza7bv42AK9X5Mt3J26B9EOz9eASoo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1633 (0x661)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B861D, serialNumber=E6123F49EAEF664C22F94CD5EBBAEACED387A16F
Validity
Not Before: Dec 4 21:22:41 2025 GMT
Not After : Dec 11 21:22:41 2025 GMT
Subject: CN=6931fba1-1db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:10:a2:1c:fe:fe:29:62:48:80:91:43:c9:
73:c0:b1:bf:a6:90:74:7e:eb:5f:ab:7a:91:cc:cb:
b3:9c:ba:15:2e:de:40:b0:9f:63:29:44:b5:1c:50:
4c:db:72:dd:e5:64:9b:bd:70:1c:75:83:c5:08:6b:
3c:cb:03:5e:76:a8:8e:fe:25:68:26:6d:8d:79:e5:
d0:62:13:4a:37:93:c1:3e:58:87:0d:d1:67:a8:cc:
7d:47:bd:aa:79:85:7a:88:79:d6:fa:97:1e:1c:e4:
18:15:3d:cd:64:b1:83:46:2d:f5:7a:8f:d5:74:0b:
92:3f:df:d1:fd:50:63:70:68:47:8f:e0:53:e3:06:
94:48:e5:9e:85:d6:5b:11:d8:b7:77:5d:aa:93:f0:
60:e6:44:18:e7:11:18:23:11:0f:6e:68:17:1d:a2:
c7:1d:1a:1d:8b:f4:8d:88:50:93:d6:2d:b8:34:6b:
a6:cb:46:34:20:56:bd:7c:fe:59:25:74:f5:6e:68:
da:fa:23:b7:30:4e:11:6c:3f:ff:60:39:91:b6:8a:
6c:87:71:af:e8:01:7a:17:83:49:cf:fa:ce:31:63:
a8:1f:ab:71:b4:e6:82:ca:54:0a:93:b9:c6:04:cf:
10:0d:23:94:44:5f:77:f1:c3:39:01:ba:05:ac:eb:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:45:D8:67:E1:FC:4B:08:C4:C0:9D:67:2D:3C:C2:FD:89:67:DE:2D
X509v3 Authority Key Identifier:
keyid:E6:12:3F:49:EA:EF:66:4C:22:F9:4C:D5:EB:BA:EA:CE:D3:87:A1:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hI_ServZkwi-UzV67rqztOHoW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B861D/D2997F60ABE311EB9C2B1156C4F9AE02/5hI_ServZkwi-UzV67rqztOHoW8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:78:63:60:9d:5a:7d:e9:09:4d:aa:c0:fe:c6:e0:f3:0d:ad:
e2:de:f6:4f:8b:f8:20:2a:ec:09:27:21:3b:c7:52:bf:2d:17:
7c:01:ad:bf:14:b3:34:79:15:70:f8:69:11:5d:79:ea:d1:b2:
e7:36:ad:80:ff:8c:f3:23:3c:aa:08:46:b3:85:44:85:63:8d:
7a:5e:af:f7:29:a3:2f:e0:e8:bf:1f:67:bd:bd:49:07:8d:d2:
14:dc:54:0f:a0:fb:93:ef:35:51:38:15:11:5b:c1:90:b2:5b:
18:7b:3f:89:a8:30:9a:ec:65:a4:53:8c:a3:67:78:01:ce:b0:
72:ed:96:3f:9e:47:5d:91:34:42:c6:f6:41:b0:8e:68:6e:14:
26:c4:24:ee:81:5f:2b:c8:0b:5b:42:60:16:54:cb:d0:ed:45:
71:e3:3d:7b:cd:ac:35:e4:99:a3:7b:e9:a4:d1:22:2e:ee:5d:
57:02:9c:03:f0:69:22:ad:3a:49:63:57:48:2c:fd:9a:76:0e:
78:75:c8:a5:f6:09:44:70:ed:bd:87:7f:e5:75:94:43:c2:a7:
f0:a0:a6:22:de:cb:4f:fa:81:c5:e0:dd:02:bb:f5:4f:68:3e:
bb:33:0a:f2:06:91:2e:c2:4f:04:6b:dd:86:9b:f4:c0:f7:ba:
be:27:5b:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjg2MUQxMTAvBgNVBAUTKEU2MTIzRjQ5RUFFRjY2NEMyMkY5NENENUVCQkFFQUNF
RDM4N0ExNkYwHhcNMjUxMjA0MjEyMjQxWhcNMjUxMjExMjEyMjQxWjAYMRYwFAYD
VQQDEw02OTMxZmJhMS0xZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2rIQohz+/iliSICRQ8lzwLG/ppB0futfq3qRzMuznLoVLt5AsJ9jKUS1HFBM
23Ld5WSbvXAcdYPFCGs8ywNedqiO/iVoJm2NeeXQYhNKN5PBPliHDdFnqMx9R72q
eYV6iHnW+pceHOQYFT3NZLGDRi31eo/VdAuSP9/R/VBjcGhHj+BT4waUSOWehdZb
Edi3d12qk/Bg5kQY5xEYIxEPbmgXHaLHHRodi/SNiFCT1i24NGumy0Y0IFa9fP5Z
JXT1bmja+iO3ME4RbD//YDmRtopsh3Gv6AF6F4NJz/rOMWOoH6txtOaCylQKk7nG
BM8QDSOURF938cM5AboFrOtbwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZF2Gfh
/EsIxMCdZy08wv2JZ94tMB8GA1UdIwQYMBaAFOYSP0nq72ZMIvlM1eu66s7Th6Fv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODYxRC9EMjk5N0Y2MEFC
RTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlprd2ktVXpWNjdycXp0T0hv
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVoSV9TZXJ2Wmt3aS1VelY2N3JxenRPSG9XOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
ODYxRC9EMjk5N0Y2MEFCRTMxMUVCOUMyQjExNTZDNEY5QUUwMi81aElfU2Vydlpr
d2ktVXpWNjdycXp0T0hvVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBieGNgnVp96QlNqsD+xuDzDa3i3vZPi/ggKuwJJyE7x1K/LRd8Aa2/
FLM0eRVw+GkRXXnq0bLnNq2A/4zzIzyqCEazhUSFY416Xq/3KaMv4Oi/H2e9vUkH
jdIU3FQPoPuT7zVROBURW8GQslsYez+JqDCa7GWkU4yjZ3gBzrBy7ZY/nkddkTRC
xvZBsI5obhQmxCTugV8ryAtbQmAWVMvQ7UVx4z17zaw15Jmje+mk0SIu7l1XApwD
8GkirTpJY1dILP2adg54dcil9glEcO29h3/ldZRDwqfwoKYi3stP+oHF4N0Cu/VP
aD67MwryBpEuwk8Ea92Gm/TA97q+J1sp
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:07:47 2025 by rpki-client