This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
File: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json)
Hash identifier: fwPeOi9Yb39MpdNflp1w4LREzddePoHwxqcnjCefOYM=
Subject key identifier: 85:C7:BF:D0:6E:3A:21:8A:06:CE:77:23:70:46:C5:8F:74:01:7E:37
Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
Certificate issuer: /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
Manifest number: F9
Signing time: Fri 05 Dec 2025 03:14:26 +0000
Manifest this update: Fri 05 Dec 2025 03:14:25 +0000
Manifest next update: Fri 12 Dec 2025 03:14:25 +0000
Files and hashes: 1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: 8gnyj3Q7D1U+Mgg8TSo5jgZ8bRUo+1oQ5ROX2yzVz/U=)
2: E9BDEF2CABD011F0B868ED11C4F9AE02.roa (hash: 2Wbjmbr/71aOBBlMkPfPkpOAq3lB1Uo+dxGr4/ylof4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Validity
Not Before: Dec 5 03:14:25 2025 GMT
Not After : Dec 12 03:14:25 2025 GMT
Subject: CN=69324e12-0c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:8c:46:af:e6:72:85:01:42:66:5e:81:ea:
2c:ab:8d:d6:7b:3a:17:cc:b2:8f:b5:c6:07:b1:ac:
4d:5c:02:60:f1:85:31:8b:da:bb:9e:b8:be:d5:2a:
0d:28:ec:b0:c2:bb:25:19:c4:20:52:33:e4:54:a8:
fb:c1:21:40:70:80:d7:36:ab:d6:03:9d:5a:28:c8:
4d:89:44:ea:5a:97:92:e6:5f:a4:a2:df:bc:61:46:
14:ec:f4:bb:a5:eb:c1:6a:53:f2:d0:ae:84:48:22:
de:29:cb:89:f7:a2:44:13:56:fc:2f:5c:d8:b7:a5:
0e:4d:36:e4:4a:5a:57:6b:a4:13:87:2d:48:d0:31:
6e:22:c7:24:a2:b7:db:2b:ff:47:14:0d:c3:fb:ee:
57:a2:81:77:16:31:c1:f9:00:6e:35:75:3a:a4:92:
1b:f3:0c:92:88:57:0b:ce:58:43:41:92:cb:d4:36:
cb:00:53:a5:d5:1c:3a:6a:3a:71:81:5f:fe:d6:13:
37:83:dd:95:92:71:9c:67:af:24:be:53:20:7e:dc:
d3:cc:5a:53:e5:e2:42:30:36:ec:14:44:d0:17:5d:
ae:f1:c0:77:cc:ba:71:9d:e1:38:1a:a1:e3:7b:7d:
d7:0c:b7:da:03:5c:2d:10:5b:25:f6:15:d5:8a:bb:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C7:BF:D0:6E:3A:21:8A:06:CE:77:23:70:46:C5:8F:74:01:7E:37
X509v3 Authority Key Identifier:
keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:84:89:84:0c:52:57:4c:a8:1e:39:a9:55:d3:6d:5c:8c:61:
4b:8a:73:b8:29:e8:64:83:94:69:06:73:ae:97:0a:21:52:20:
ee:2d:c1:30:8a:f0:65:06:2b:e6:07:df:b2:7a:5e:f5:c2:7f:
6d:f4:d6:f5:07:de:d8:2c:2d:6f:12:37:46:d7:79:0d:37:f1:
19:45:a1:a0:e1:98:4a:a2:8f:01:1a:06:7d:4b:3f:ed:1a:14:
5a:6c:de:b0:09:9f:b2:a2:90:67:04:2a:45:9e:98:b4:aa:ca:
1e:4c:b1:6a:23:75:9f:6e:b9:f2:a7:c2:a7:50:a2:24:74:3a:
e8:fd:17:a4:e0:e5:04:15:06:c2:57:27:70:f9:9e:4b:43:99:
66:e9:86:6b:9e:ca:32:ed:68:6d:7b:13:ad:7d:c6:4a:e5:48:
94:e3:0c:e0:09:68:c5:16:52:ca:61:ad:ed:99:a5:ca:f7:ae:
be:d6:83:f5:8a:12:ee:35:6f:26:a3:86:07:f4:d1:16:56:2d:
5c:71:07:20:7f:82:20:89:50:13:4f:c4:76:6d:8e:6f:58:af:
b7:54:d3:3b:05:bf:21:1e:a2:ae:d7:03:9c:d7:3d:0b:56:32:
ca:7e:8c:f0:8f:6f:4e:78:3f:e7:6c:91:0d:17:1c:42:6b:b4:
40:ca:39:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJCNjIxMTAvBgNVBAUTKEU2RjY1RDIyMUI1OTVGNkJBMTNFQjMxNERFRTMzOENB
MjQxRTI3MjAwHhcNMjUxMjA1MDMxNDI1WhcNMjUxMjEyMDMxNDI1WjAYMRYwFAYD
VQQDEw02OTMyNGUxMi0wYzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvYWMRq/mcoUBQmZegeosq43WezoXzLKPtcYHsaxNXAJg8YUxi9q7nri+1SoN
KOywwrslGcQgUjPkVKj7wSFAcIDXNqvWA51aKMhNiUTqWpeS5l+kot+8YUYU7PS7
pevBalPy0K6ESCLeKcuJ96JEE1b8L1zYt6UOTTbkSlpXa6QThy1I0DFuIsckorfb
K/9HFA3D++5XooF3FjHB+QBuNXU6pJIb8wySiFcLzlhDQZLL1DbLAFOl1Rw6ajpx
gV/+1hM3g92VknGcZ68kvlMgftzTzFpT5eJCMDbsFETQF12u8cB3zLpxneE4GqHj
e33XDLfaA1wtEFsl9hXVirs+zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXHv9Bu
OiGKBs53I3BGxY90AX43MB8GA1UdIwQYMBaAFOb2XSIbWV9roT6zFN7jOMokHicg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkI2Mi9CRDI5QjgxNjVB
RTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0WlgydWhQck1VM3VNNHlpUWVK
eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV2WmRJaHRaWDJ1aFByTVUzdU00eWlRZUp5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkI2Mi9CRDI5QjgxNjVBRTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0Wlgy
dWhQck1VM3VNNHlpUWVKeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJhImEDFJXTKgeOalV021cjGFLinO4Kehkg5RpBnOulwohUiDuLcEw
ivBlBivmB9+yel71wn9t9Nb1B97YLC1vEjdG13kNN/EZRaGg4ZhKoo8BGgZ9Sz/t
GhRabN6wCZ+yopBnBCpFnpi0qsoeTLFqI3Wfbrnyp8KnUKIkdDro/Rek4OUEFQbC
Vydw+Z5LQ5lm6YZrnsoy7WhtexOtfcZK5UiU4wzgCWjFFlLKYa3tmaXK966+1oP1
ihLuNW8mo4YH9NEWVi1ccQcgf4IgiVATT8R2bY5vWK+3VNM7Bb8hHqKu1wOc1z0L
VjLKfozwj29OeD/nbJENFxxCa7RAyjn7
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:12 2025 by rpki-client