This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
File: v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft (raw, json)
Hash identifier: lYfdbKuAA1pAPnUYNbPrJZc3bUKXoSVnA9apcYoBx/8=
Subject key identifier: B3:C9:ED:BC:66:0C:41:06:71:D0:E9:D9:49:EF:DB:13:D4:29:53:ED
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Certificate issuer: /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
Manifest number: B1
Signing time: Fri 05 Dec 2025 04:21:58 +0000
Manifest this update: Fri 05 Dec 2025 04:21:58 +0000
Manifest next update: Fri 12 Dec 2025 04:21:58 +0000
Files and hashes: 1: v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl (hash: cAakIxZvYrt77VRl5bLQiE391BuNLgVfP2KONoE3IDI=)
2: 46602E62E99D11EFB8E6881DC4F9AE02.roa (hash: N2mU+Nf+OkWsydJNTigowac6C/kadZEo42ZXOPhaxXU=)
3: 339F0FFA9D9D11F0981B7A12C4F9AE02.roa (hash: YDUGJInCxGYNvztq3dbMwJMAM402KtbRyKKGjQJtcPg=)
4: 465DA74CEE4C11EFBBD5275FC4F9AE02.roa (hash: SPPv4eq5g0hLSyvOMf5eiY3618RcXXiv7J3/H4BO4L4=)
5: 2A7B4C14C51511F0B6CAF70BC4F9AE02.roa (hash: q8d/T1oeGTAAj8I/vFpzngulLnjhXuMa8KZmfC7sm8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Validity
Not Before: Dec 5 04:21:58 2025 GMT
Not After : Dec 12 04:21:58 2025 GMT
Subject: CN=69325de6-59c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:b8:6d:c1:e1:e4:da:ee:24:68:bb:56:04:
31:d7:a9:f6:d4:f7:da:6d:d0:41:1c:84:ba:4f:a3:
de:11:d6:56:36:45:21:84:a8:c0:d0:73:00:30:89:
bb:df:e4:82:2c:a7:df:3f:ea:5d:f8:06:46:d7:a5:
8f:a4:aa:01:19:92:2a:a0:a1:63:73:46:f7:24:9d:
77:59:7d:40:7d:68:74:de:46:75:89:87:69:a2:18:
a2:82:cd:7b:be:4b:1c:1b:51:49:60:16:3b:86:19:
c9:57:7d:84:e1:6f:32:30:a6:97:bd:0b:d5:51:59:
f0:a0:c7:25:6d:e7:6a:3c:db:3a:7a:75:fc:10:1c:
5d:72:59:4f:f8:30:8e:37:3a:1d:c8:6b:51:50:2b:
21:82:9e:fe:35:49:d2:87:56:04:22:f9:bc:b2:d4:
40:6b:79:c0:02:45:1f:27:83:30:18:e0:5e:00:b5:
f1:25:8f:49:69:db:a3:95:69:07:f1:66:4a:b6:79:
43:9a:2d:e8:f5:37:82:88:1f:36:dd:d1:10:e6:a7:
99:0d:f4:0e:3c:45:c0:19:99:da:a6:d4:45:fe:55:
db:ca:86:69:af:b6:b5:a4:e5:5f:5f:63:3e:af:43:
2a:b9:45:e8:d3:1d:48:a0:3f:92:5f:d9:60:9e:26:
00:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C9:ED:BC:66:0C:41:06:71:D0:E9:D9:49:EF:DB:13:D4:29:53:ED
X509v3 Authority Key Identifier:
keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c7:1e:50:61:62:a2:60:0b:a1:10:49:22:a2:7a:6e:8e:8d:
2f:a8:c0:68:93:fc:58:f5:85:51:c7:0c:f2:c5:ab:7e:b1:6a:
c3:66:24:2b:56:fa:92:d4:83:c8:3e:1f:da:bb:75:da:df:64:
48:ed:c7:3b:fb:c2:92:39:98:39:7c:4a:3c:5a:f3:fa:1e:7e:
4d:c7:22:c9:ef:9a:cf:3f:a5:cc:55:95:ae:05:00:27:e0:a8:
c5:a9:c0:70:33:3b:4d:27:c0:49:70:74:a7:40:eb:37:99:be:
fa:61:a5:f9:5d:d2:b5:b0:08:a8:7c:ac:cb:b9:1b:64:f6:07:
6b:d8:c2:72:31:45:69:54:8c:56:cd:87:7b:28:85:90:58:1e:
15:d3:9a:3b:0c:9e:7a:99:36:92:a8:02:96:67:67:6a:1f:03:
68:aa:d7:b0:fb:bd:b0:70:ba:97:59:67:ea:68:73:72:ac:4b:
b1:73:2b:55:9c:89:eb:24:0b:b3:31:7c:ad:4d:c2:cb:4a:74:
37:a6:b1:33:dc:28:40:38:94:b2:81:bd:fc:a6:8b:58:44:92:
21:e3:53:5b:fc:bf:d1:84:47:70:1d:16:23:c8:1b:01:59:a6:
f9:fe:de:85:cd:82:c5:c1:e7:e0:bd:12:34:f0:97:76:03:25:
9e:92:9a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:52:24 2025 by rpki-client