This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft
File: 5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft (raw, json)
Hash identifier: +SxGbWOvLlVhdS0P2MA/NW9iGFRCCLV4Py/+veGYKaU=
Subject key identifier: 48:F0:C9:EE:AE:8B:9B:BE:2A:E4:2C:6D:CE:96:AA:CD:04:2F:DC:F1
Authority key identifier: E4:5F:61:EF:BC:B2:E7:B1:E4:14:B2:CB:DC:34:50:F7:F8:46:18:9D
Certificate issuer: /CN=A91E4ED1/serialNumber=E45F61EFBCB2E7B1E414B2CBDC3450F7F846189D
Certificate serial: 0C82
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft
Manifest number: 0C80
Signing time: Sat 06 Dec 2025 17:49:24 +0000
Manifest this update: Sat 06 Dec 2025 17:49:24 +0000
Manifest next update: Sat 13 Dec 2025 17:49:24 +0000
Files and hashes: 1: 5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl (hash: MuVdRKMUQgJOUPmxlm2KXsmXeyB0jaSZMsaoltBmJVY=)
2: D77C5AC003E611F0A9F5535FC4F9AE02.roa (hash: C3dI3f47oUkTpODJD7lPzsLlPec49Cck1X3kjiuVXDM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl
rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3202 (0xc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4ED1, serialNumber=E45F61EFBCB2E7B1E414B2CBDC3450F7F846189D
Validity
Not Before: Dec 6 17:49:24 2025 GMT
Not After : Dec 13 17:49:24 2025 GMT
Subject: CN=69346ca4-449e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:6e:f7:93:e0:5d:a6:39:c3:b4:e2:8a:23:
db:42:e6:f2:56:36:c9:9d:03:10:92:c9:69:fe:7b:
41:b2:c9:81:51:08:15:d9:89:d1:7d:4e:5a:12:97:
13:ac:73:3b:c3:44:98:19:da:42:01:0f:a1:b7:de:
f2:fb:6f:07:f4:05:ac:ad:a2:4a:18:21:58:c9:7f:
90:1c:74:9e:f6:7c:4f:45:0e:83:d4:81:c8:3d:2e:
86:b7:84:35:b6:4d:13:96:a6:f1:62:98:a7:ad:58:
9a:cc:05:a0:c3:0d:86:d3:35:1f:99:26:2d:50:07:
d0:53:08:5d:95:f3:92:12:bc:ef:cb:de:c0:44:c3:
47:9e:1a:6d:27:88:bd:ae:7d:18:70:63:87:4c:2e:
9d:ef:97:54:0f:89:ea:b8:05:85:d4:3d:dc:4a:f0:
32:18:fa:cc:65:02:3d:04:33:9f:4b:d1:8d:5e:44:
87:d5:79:1e:29:4c:0a:84:33:97:ac:d5:64:8e:26:
03:d8:8a:97:ed:df:de:aa:92:30:2e:50:31:3f:e0:
73:04:4a:d0:27:cb:ad:37:ed:c0:e3:c3:60:cb:89:
61:eb:15:8d:7f:77:5d:9e:78:28:30:c8:8d:cc:a3:
9e:e4:91:3b:c3:72:ef:e1:e3:3a:77:21:93:90:3c:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F0:C9:EE:AE:8B:9B:BE:2A:E4:2C:6D:CE:96:AA:CD:04:2F:DC:F1
X509v3 Authority Key Identifier:
keyid:E4:5F:61:EF:BC:B2:E7:B1:E4:14:B2:CB:DC:34:50:F7:F8:46:18:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5F9h77yy57HkFLLL3DRQ9_hGGJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4ED1/5FDD78B20B6411EA90923066C4F9AE02/5F9h77yy57HkFLLL3DRQ9_hGGJ0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:8f:a1:26:35:1f:53:64:b5:83:f4:12:12:01:bf:35:e7:3f:
3a:64:ba:48:71:68:9b:de:8a:7c:b4:4e:b8:a7:4c:8b:b0:38:
f2:ea:a8:6f:f5:46:6c:b2:91:db:93:5b:54:26:a7:8e:f1:ed:
ce:4e:7b:73:2a:74:b0:78:4d:62:c3:e1:33:33:80:31:17:a7:
26:6d:87:9b:f5:39:27:9e:16:c4:58:58:0c:68:fd:c2:03:df:
7f:89:65:00:26:03:6c:bc:d3:6f:e9:34:3a:42:5c:80:2c:5d:
7b:3f:87:dd:d4:ac:ac:61:34:95:82:e6:e0:49:0c:10:ad:e7:
12:7e:34:07:77:3d:e2:1c:61:92:5c:bf:92:cf:49:f1:77:ab:
33:cf:34:ae:71:46:64:6a:7b:04:b3:df:44:be:7e:d5:01:b0:
20:dd:fc:67:ed:84:72:88:13:ea:89:4e:cb:06:75:f7:f2:3a:
85:bc:1c:b1:cb:f4:b4:f8:40:95:25:09:d2:63:7a:8c:be:a4:
5f:30:16:1e:9f:6e:af:02:b4:9c:c6:0f:45:67:de:86:35:07:
9d:db:e8:cc:60:a0:e1:d3:dc:e1:db:7d:8f:23:6d:02:2c:15:
e3:00:f8:a3:12:1e:e3:c5:be:3d:b9:66:4a:5b:35:fc:92:e7:
30:8d:18:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTRFRDExMTAvBgNVBAUTKEU0NUY2MUVGQkNCMkU3QjFFNDE0QjJDQkRDMzQ1MEY3
Rjg0NjE4OUQwHhcNMjUxMjA2MTc0OTI0WhcNMjUxMjEzMTc0OTI0WjAYMRYwFAYD
VQQDEw02OTM0NmNhNC00NDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvehu95PgXaY5w7TiiiPbQubyVjbJnQMQkslp/ntBssmBUQgV2YnRfU5aEpcT
rHM7w0SYGdpCAQ+ht97y+28H9AWsraJKGCFYyX+QHHSe9nxPRQ6D1IHIPS6Gt4Q1
tk0TlqbxYpinrViazAWgww2G0zUfmSYtUAfQUwhdlfOSErzvy97ARMNHnhptJ4i9
rn0YcGOHTC6d75dUD4nquAWF1D3cSvAyGPrMZQI9BDOfS9GNXkSH1XkeKUwKhDOX
rNVkjiYD2IqX7d/eqpIwLlAxP+BzBErQJ8utN+3A48Ngy4lh6xWNf3ddnngoMMiN
zKOe5JE7w3Lv4eM6dyGTkDzZgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjwye6u
i5u+KuQsbc6Wqs0EL9zxMB8GA1UdIwQYMBaAFORfYe+8suex5BSyy9w0UPf4Rhid
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVEMS81RkRENzhCMjBC
NjQxMUVBOTA5MjMwNjZDNEY5QUUwMi81RjloNzd5eTU3SGtGTExMM0RSUTlfaEdH
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVGOWg3N3l5NTdIa0ZMTEwzRFJROV9oR0dKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NEVEMS81RkRENzhCMjBCNjQxMUVBOTA5MjMwNjZDNEY5QUUwMi81RjloNzd5eTU3
SGtGTExMM0RSUTlfaEdHSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADj6EmNR9TZLWD9BISAb815z86ZLpIcWib3op8tE64p0yLsDjy6qhv
9UZsspHbk1tUJqeO8e3OTntzKnSweE1iw+EzM4AxF6cmbYeb9TknnhbEWFgMaP3C
A99/iWUAJgNsvNNv6TQ6QlyALF17P4fd1KysYTSVgubgSQwQrecSfjQHdz3iHGGS
XL+Sz0nxd6szzzSucUZkansEs99Evn7VAbAg3fxn7YRyiBPqiU7LBnX38jqFvByx
y/S0+ECVJQnSY3qMvqRfMBYen26vArScxg9FZ96GNQed2+jMYKDh09zh232PI20C
LBXjAPijEh7jxb49uWZKWzX8kucwjRi7
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:38:57 2025 by rpki-client