This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
File: PLw5Tr9aIgmw6yx0fD_wBratGds.mft (raw, json)
Hash identifier: +n9u0pmKs42mWOCMC1uaKPXwFlW/nkXdpYucwkydfe0=
Subject key identifier: 83:E4:28:3B:4B:DD:97:D0:91:1B:65:AA:15:ED:69:E7:98:C1:C3:F3
Authority key identifier: 3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
Certificate issuer: /CN=A91B8E1F/serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Certificate serial: 01C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
Manifest number: 01BE
Signing time: Fri 05 Dec 2025 01:16:02 +0000
Manifest this update: Fri 05 Dec 2025 01:16:02 +0000
Manifest next update: Fri 12 Dec 2025 01:16:02 +0000
Files and hashes: 1: PLw5Tr9aIgmw6yx0fD_wBratGds.crl (hash: eBi6/DaIV54Sijbo+HsT8bCuzssr02do9ScoVm7NhSQ=)
2: 98B1A08E256211EEB175EF31C4F9AE02.roa (hash: f/XfH+fCVff7PA8nldVD7NmbtLtb1i0+sniLXngDEPo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449 (0x1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8E1F, serialNumber=3CBC394EBF5A2209B0EB2C747C3FF006B6AD19DB
Validity
Not Before: Dec 5 01:16:02 2025 GMT
Not After : Dec 12 01:16:02 2025 GMT
Subject: CN=69323252-0cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:5b:89:5e:bf:71:8d:9c:2c:98:95:a9:37:
da:77:9e:6f:63:39:25:41:b7:3e:cd:08:c4:7d:02:
11:8e:ca:a7:ff:cf:fd:2b:78:53:69:6b:42:ae:70:
3f:c4:88:07:30:08:e6:1a:b0:3d:46:95:1b:9e:ae:
94:6b:57:6e:68:86:d5:ff:88:eb:60:1d:b7:7c:99:
1a:fb:98:54:29:1c:dd:9f:f7:37:bf:9f:c5:8c:34:
b4:cf:39:8a:77:89:a3:7e:cb:a8:12:92:84:17:f3:
fa:d4:44:92:fa:5a:f3:12:f5:26:50:dd:5f:1e:b1:
fe:fc:3a:af:5b:a4:cd:11:21:f4:25:6b:06:2c:bc:
d8:c2:f0:c8:51:d2:0c:81:66:f3:ba:99:9a:b9:60:
7d:d8:08:90:46:f1:1a:54:59:18:63:21:b2:b6:74:
57:ab:e3:df:02:6f:2a:97:c7:ee:9d:1a:0c:43:01:
ef:5c:94:3c:ba:ed:04:06:9d:82:07:f8:4b:a3:30:
b0:4c:95:7e:19:5a:17:6a:d8:79:5e:a0:b1:c7:6c:
e6:31:61:e3:e0:54:c3:43:aa:ef:46:b4:03:c7:07:
97:96:8b:d7:ab:95:bd:21:09:7d:a1:fd:3e:e4:a5:
35:e5:c8:99:88:b4:d2:b2:38:68:ae:08:a7:7d:bd:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E4:28:3B:4B:DD:97:D0:91:1B:65:AA:15:ED:69:E7:98:C1:C3:F3
X509v3 Authority Key Identifier:
keyid:3C:BC:39:4E:BF:5A:22:09:B0:EB:2C:74:7C:3F:F0:06:B6:AD:19:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PLw5Tr9aIgmw6yx0fD_wBratGds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E1F/1692D488256211EE81222E31C4F9AE02/PLw5Tr9aIgmw6yx0fD_wBratGds.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:68:16:46:83:50:85:6f:4b:6b:4c:55:06:04:2d:91:c7:ad:
e9:85:c5:6d:0e:de:22:7a:78:49:7e:42:29:83:7d:da:ab:ed:
87:bd:3c:83:1c:77:3f:4a:dc:be:1b:a5:b4:49:63:43:0f:ec:
98:8f:f3:99:f6:4a:f9:35:a5:4e:37:c7:a2:cc:81:5c:90:6b:
6e:e2:64:fd:1c:20:18:5b:5f:36:8a:1f:5e:81:69:40:82:08:
ce:83:a8:1c:a0:33:0a:7d:3f:08:ea:b6:08:4a:34:56:2f:9d:
4a:1e:63:58:ff:9b:4e:94:f8:7b:e2:31:fe:35:c0:4a:6e:6f:
a9:74:21:2b:93:9b:74:69:02:96:45:f4:a4:20:20:1c:4a:a4:
a6:2f:ed:61:ea:3d:c4:4d:5e:07:3b:a3:e3:3c:88:11:43:cf:
ac:40:18:1c:95:cd:cd:00:c0:21:c6:76:ec:7b:1a:44:dc:56:
1a:24:c9:d1:e8:7c:d3:12:d5:92:18:3e:b6:ca:a3:63:73:b6:
ee:6d:5d:5d:76:9a:70:c3:c5:b9:69:be:bf:09:5f:0d:7d:5e:
15:de:08:87:35:78:ca:b6:66:4d:99:1f:e1:32:6d:85:0c:ee:
3d:30:32:66:b4:16:99:87:91:72:2e:25:a6:d6:cd:39:b1:47:
33:aa:30:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:59:27 2025 by rpki-client