This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json)
Hash identifier: BnxlZs+7SpfCunx4pA/U27sBsIRPZQm8Ftl9ri43RrE=
Subject key identifier: 3B:D1:10:CA:08:96:C2:56:EB:78:FA:D7:17:FB:2B:4D:D4:2F:F8:C3
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial: 1839
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
Manifest number: 182B
Signing time: Sat 06 Dec 2025 16:08:28 +0000
Manifest this update: Sat 06 Dec 2025 16:08:27 +0000
Manifest next update: Sat 13 Dec 2025 16:08:27 +0000
Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: HDBi8tlhlLEeGixG9/7+tI8SmwZiIR8nzcbqPaVNfy0=)
2: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: b8auFL+OGTstQHyewNvl2CDT74Oau9yNM7VkRWGDuEg=)
3: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: gFLbFRy/ivjEl0Dcp/t/VXs92pwAJ2tSip4UwHoVC3M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6201 (0x1839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Validity
Not Before: Dec 6 16:08:27 2025 GMT
Not After : Dec 13 16:08:27 2025 GMT
Subject: CN=693454fc-bcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:d5:bf:3b:9c:c4:90:54:a3:a0:76:4f:a9:
6b:00:3d:ed:ac:b0:67:75:e6:c2:78:ea:ef:c1:21:
09:f9:7b:78:5c:69:29:4e:a1:f5:28:ed:bd:54:a0:
0f:70:b9:98:85:5a:91:59:76:bb:4c:16:de:45:26:
90:25:af:28:b1:41:11:54:f9:86:9d:1a:77:cb:e7:
ee:b6:23:e3:63:3d:4c:ae:e6:e3:f7:d5:91:23:6b:
38:a8:e4:be:fa:ca:3d:98:32:e8:69:d0:8e:30:4f:
a4:11:aa:e1:3b:fe:17:fb:5f:04:02:ca:6c:52:11:
0e:20:7d:67:4a:14:43:03:70:a5:6c:bd:e6:e1:17:
02:f3:91:db:82:08:f2:45:73:bb:01:2f:04:66:ab:
7b:6b:12:4e:70:1f:61:d6:93:2d:27:ce:e7:f3:31:
f0:87:f4:f4:b3:09:5b:fa:99:70:23:cd:1f:03:68:
8e:0d:8e:af:de:00:00:d3:90:ac:e0:f0:f6:8d:bc:
66:5e:62:07:12:97:f6:25:96:b9:db:e0:dd:3e:a5:
68:64:fb:af:9b:7d:1a:e1:87:fa:3e:07:aa:af:aa:
2a:03:81:7a:8b:8a:f3:03:18:f6:ab:b1:c8:f5:d2:
0c:8a:e1:6e:05:3a:e6:3f:c8:ce:ca:93:1b:a3:6e:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D1:10:CA:08:96:C2:56:EB:78:FA:D7:17:FB:2B:4D:D4:2F:F8:C3
X509v3 Authority Key Identifier:
keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f0:c0:8a:ac:a7:69:27:79:ad:52:73:3d:25:5d:99:42:72:
d1:72:62:b5:38:51:b6:2a:96:07:82:6b:f6:b1:2a:cb:5a:4d:
1b:70:6a:af:cd:0e:a8:af:47:24:3e:c5:4e:42:67:5e:24:00:
bc:f5:d9:00:7b:c3:a6:2f:5c:84:b0:92:02:80:3b:45:6e:13:
13:20:0f:b7:56:ac:e0:9b:21:33:b5:6d:55:73:4f:ee:2a:90:
f5:97:6c:44:00:ff:0d:0c:eb:d2:e3:48:53:4f:ac:5b:c0:0d:
f8:81:2d:b9:17:07:8d:29:0b:42:00:ea:6f:8f:4e:b6:34:51:
41:6f:b0:e0:29:28:31:61:e3:cf:d5:a3:13:91:ea:06:ca:f9:
f1:4f:51:08:c8:75:fd:12:56:51:e9:e6:98:a5:99:58:2c:33:
cd:66:a3:46:e1:2b:4e:09:a1:0d:06:27:5a:58:13:4a:fc:ed:
4c:40:a8:28:12:79:0e:58:98:1a:8e:28:4a:31:a9:aa:65:24:
0a:3a:af:81:e4:0d:6f:01:80:2d:4c:7d:06:5d:d4:2e:60:62:
b6:b8:a5:4f:1e:26:d7:86:b5:d1:bb:d4:1b:c2:f9:d2:47:8b:
33:c2:b3:f4:bc:6b:1e:87:71:f9:bd:7c:1a:27:77:27:6d:e7:
cd:9e:9a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:28:13 2025 by rpki-client