This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
File: sb1NsCH1THJj88NTX4g2hJui5g4.mft (raw, json)
Hash identifier: 5E67TWpsP3AJ+gSuFxTqlPZpobPzrW2OhH4vrUKIDNA=
Subject key identifier: DD:38:1D:5A:C9:8D:D0:A7:06:4A:D4:C1:C6:66:F9:E2:3E:DD:BF:7D
Authority key identifier: B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E
Certificate issuer: /CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
Manifest number: C3
Signing time: Fri 05 Dec 2025 03:53:15 +0000
Manifest this update: Fri 05 Dec 2025 03:53:14 +0000
Manifest next update: Fri 12 Dec 2025 03:53:14 +0000
Files and hashes: 1: sb1NsCH1THJj88NTX4g2hJui5g4.crl (hash: WoSGh79ezMZ0YJxvnYaTP/2rHWS86yfeaK4hriVwmlU=)
2: A30B17FAA81911EF862F3A56C4F9AE02.roa (hash: 6sFK3IOISiUObcshTaAhJEDmqO5j9CtjdCqW8qlBcT4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl
rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E520F, serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
Validity
Not Before: Dec 5 03:53:14 2025 GMT
Not After : Dec 12 03:53:14 2025 GMT
Subject: CN=6932572b-1df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:6e:50:70:d9:79:f2:17:54:73:da:22:4b:
0c:27:4f:7e:48:b8:cb:3f:a1:10:e5:49:99:0a:27:
58:95:15:45:4e:40:79:63:6b:8b:ec:f2:9b:31:ae:
e0:36:b4:ac:57:e6:c7:50:88:1a:64:00:f5:16:bf:
3a:6a:15:6e:91:73:2d:79:03:14:3b:8e:c0:9f:f5:
1f:7a:b1:94:d7:98:02:b3:c5:98:04:0a:10:ff:7d:
05:96:5e:7d:92:94:77:77:a3:c5:a7:5c:ea:88:e1:
0b:0a:79:56:6f:43:5c:d5:ab:56:e0:71:cc:87:73:
6b:cb:a2:e9:3c:0e:62:2b:8a:45:3f:19:3e:d4:4b:
b0:e4:28:e2:e8:02:81:f3:38:bf:c6:a5:1a:c3:92:
c9:11:0d:91:86:63:1c:c7:64:32:17:34:15:e1:b0:
94:bb:f5:07:19:0e:f8:7f:87:c5:a1:89:6a:44:b3:
a6:c9:26:17:03:c3:0d:b2:87:a1:7d:f7:48:82:32:
7b:2d:fb:43:16:71:ec:59:5d:1d:2d:4f:1d:a3:72:
f2:80:ec:ff:02:80:0f:43:77:fc:36:6e:01:74:76:
4d:4f:16:ee:9a:8e:2d:0e:b5:e1:c7:cd:de:cd:0f:
28:14:09:0b:36:13:28:46:bc:28:7b:d1:49:96:25:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:38:1D:5A:C9:8D:D0:A7:06:4A:D4:C1:C6:66:F9:E2:3E:DD:BF:7D
X509v3 Authority Key Identifier:
keyid:B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bd:e6:78:bd:14:db:f9:a0:21:ef:4b:b2:58:d9:e7:77:1a:
06:2e:9f:3f:26:83:76:4c:68:90:cd:e5:2b:3d:fb:0e:18:ab:
96:23:3b:ce:9e:21:6c:71:da:43:52:34:0e:5c:26:c9:a4:97:
d3:65:df:a7:35:df:be:0a:e6:cc:cd:f0:12:af:1e:82:4f:b7:
16:f7:cc:e3:2a:ab:d0:1c:72:0a:bb:27:61:11:b4:c5:65:cc:
f5:88:d3:e9:36:9c:0b:e4:fe:a0:c9:c5:f5:1f:01:b1:29:75:
68:50:82:de:93:f2:9f:e8:a1:6d:9e:da:d6:6f:c0:15:b7:e8:
78:69:16:16:ef:ab:a5:ed:6e:72:27:1c:29:30:07:35:3a:24:
0e:d1:fe:9c:83:84:f1:29:98:c4:88:53:9c:d9:af:10:63:23:
e6:90:cb:5d:8f:60:e4:ce:2e:95:37:e9:0d:c2:ee:ef:cc:5c:
ba:ed:0c:a8:ef:79:3d:9e:77:46:58:72:81:6b:d2:55:5f:bc:
32:0c:4a:a3:b4:97:f2:34:af:58:98:46:48:e3:d9:08:bb:f8:
e5:12:a2:28:b7:62:1e:83:fe:02:09:bf:a4:37:2b:b6:d8:6a:
f9:2f:7c:17:eb:f2:87:d1:da:f2:a0:cf:d5:27:10:53:f0:4b:
3a:aa:27:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTUyMEYxMTAvBgNVBAUTKEIxQkQ0REIwMjFGNTRDNzI2M0YzQzM1MzVGODgzNjg0
OUJBMkU2MEUwHhcNMjUxMjA1MDM1MzE0WhcNMjUxMjEyMDM1MzE0WjAYMRYwFAYD
VQQDEw02OTMyNTcyYi0xZGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2f5uUHDZefIXVHPaIksMJ09+SLjLP6EQ5UmZCidYlRVFTkB5Y2uL7PKbMa7g
NrSsV+bHUIgaZAD1Fr86ahVukXMteQMUO47An/UferGU15gCs8WYBAoQ/30Fll59
kpR3d6PFp1zqiOELCnlWb0Nc1atW4HHMh3Nry6LpPA5iK4pFPxk+1Euw5Cji6AKB
8zi/xqUaw5LJEQ2RhmMcx2QyFzQV4bCUu/UHGQ74f4fFoYlqRLOmySYXA8MNsoeh
ffdIgjJ7LftDFnHsWV0dLU8do3LygOz/AoAPQ3f8Nm4BdHZNTxbumo4tDrXhx83e
zQ8oFAkLNhMoRrwoe9FJliXOwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN04HVrJ
jdCnBkrUwcZm+eI+3b99MB8GA1UdIwQYMBaAFLG9TbAh9UxyY/PDU1+INoSbouYO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTIwRi80MUNDQkM2RUE4
MTkxMUVGQjlCREVENzFDNEY5QUUwMi9zYjFOc0NIMVRISmo4OE5UWDRnMmhKdWk1
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NiMU5zQ0gxVEhKajg4TlRYNGcyaEp1aTVnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NTIwRi80MUNDQkM2RUE4MTkxMUVGQjlCREVENzFDNEY5QUUwMi9zYjFOc0NIMVRI
Smo4OE5UWDRnMmhKdWk1ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfveZ4vRTb+aAh70uyWNnndxoGLp8/JoN2TGiQzeUrPfsOGKuWIzvO
niFscdpDUjQOXCbJpJfTZd+nNd++CubMzfASrx6CT7cW98zjKqvQHHIKuydhEbTF
Zcz1iNPpNpwL5P6gycX1HwGxKXVoUILek/Kf6KFtntrWb8AVt+h4aRYW76ul7W5y
JxwpMAc1OiQO0f6cg4TxKZjEiFOc2a8QYyPmkMtdj2Dkzi6VN+kNwu7vzFy67Qyo
73k9nndGWHKBa9JVX7wyDEqjtJfyNK9YmEZI49kIu/jlEqIot2Ieg/4CCb+kNyu2
2Gr5L3wX6/KH0dryoM/VJxBT8Es6qicY
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:06 2025 by rpki-client