This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
File: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft (raw, json)
Hash identifier: aSatgIWVz0WdZavbrtA3pXyGNm6hr75AJ44dP+mEiRg=
Subject key identifier: AD:6B:01:05:A6:8F:0E:36:F5:D0:E7:43:06:B3:D0:26:4D:53:E0:D1
Authority key identifier: E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
Certificate issuer: /CN=A91E554A/serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
Manifest number: D1
Signing time: Fri 05 Dec 2025 03:42:50 +0000
Manifest this update: Fri 05 Dec 2025 03:42:49 +0000
Manifest next update: Fri 12 Dec 2025 03:42:49 +0000
Files and hashes: 1: 5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl (hash: VhTb1KJCKatDagUC5Xmu0fCB0UPFYTMLO7OUX3Ot2So=)
2: 388A91E0985A11EFA6912B0EC4F9AE02.roa (hash: JjgqoANmsusAqQnFWaBmauCJuNgw+HQl/ZcBjvaDkfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E554A, serialNumber=E6758B9A375982C2C4D1C7649A31E4CF27D5A680
Validity
Not Before: Dec 5 03:42:49 2025 GMT
Not After : Dec 12 03:42:49 2025 GMT
Subject: CN=693254ba-3121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b0:92:40:04:44:97:78:5f:7d:3d:8e:b8:09:
bd:65:e0:c8:f4:7f:4b:26:21:a5:a1:83:36:59:93:
ca:36:0c:06:a7:37:cb:46:04:a6:4f:b8:ce:37:70:
dc:d2:9e:14:a3:a7:43:58:7f:ce:ca:7b:05:0b:02:
9a:24:4e:ec:f9:60:7b:ec:0f:f1:f2:4f:f3:16:bd:
dc:13:2c:05:61:53:fa:9c:1a:fa:a7:f3:9f:a4:db:
7b:2d:b3:85:68:5e:4a:fd:8e:c1:8f:8b:78:d1:13:
c3:b8:a4:55:f7:ee:b2:6c:0f:dd:1a:ef:7c:c7:43:
9e:e0:64:a2:42:90:a2:20:ec:9c:06:7a:94:36:f8:
14:cf:6d:ff:72:ed:dd:70:21:cc:36:c2:1b:ba:a1:
6d:3c:89:af:7c:f1:cd:91:1c:c5:ec:bb:55:82:8e:
4d:aa:a9:ca:00:6e:26:47:9f:88:1d:e5:36:ac:66:
ed:37:22:16:e6:3a:e4:53:a7:96:93:f6:ff:a2:f6:
b6:65:fa:d7:01:d6:1f:cb:9b:8b:75:34:ce:25:f4:
83:4b:ff:0c:6d:2f:18:a1:4a:96:c0:05:2f:51:1a:
7e:d7:9a:54:5e:f6:23:8e:30:5b:6e:90:70:4d:25:
c1:2b:ff:05:a0:45:76:eb:63:6c:ee:5d:f2:16:7c:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6B:01:05:A6:8F:0E:36:F5:D0:E7:43:06:B3:D0:26:4D:53:E0:D1
X509v3 Authority Key Identifier:
keyid:E6:75:8B:9A:37:59:82:C2:C4:D1:C7:64:9A:31:E4:CF:27:D5:A6:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nWLmjdZgsLE0cdkmjHkzyfVpoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/822FC22091F711EFADE11266C4F9AE02/5nWLmjdZgsLE0cdkmjHkzyfVpoA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:92:7a:32:15:24:6a:1f:10:92:fa:1a:38:73:0f:19:ee:fc:
48:33:dc:68:e1:d7:ff:51:ad:f0:68:fa:f4:81:85:c3:f5:03:
5a:24:74:a4:b1:78:fb:27:ff:9b:2a:02:84:9c:ff:a1:e1:17:
33:33:1f:ef:35:99:91:42:88:8c:b8:16:7f:3f:39:b5:c0:30:
97:d7:03:16:c6:d5:3d:fa:57:e3:49:13:d4:55:1d:aa:39:48:
94:48:a3:f5:12:94:78:d2:90:1b:73:b7:34:4e:69:a8:c6:ab:
ea:20:09:ad:72:96:24:30:b3:f9:c9:69:28:01:80:3e:dd:8e:
3e:4e:80:73:79:4e:13:43:71:f5:bf:90:81:f8:fb:3c:72:ed:
7a:74:17:51:1f:15:2f:be:c1:c0:cd:58:69:b8:90:28:94:22:
52:75:71:70:5a:19:e9:c4:b7:75:f1:05:7a:8f:4d:49:b6:9f:
fe:71:7a:7c:49:c9:8d:e4:7c:37:2d:28:56:63:fc:6e:dc:e4:
64:e8:ac:2f:ba:fd:7e:4c:0b:eb:41:34:f2:f4:4b:19:76:c0:
d8:cc:3e:de:50:82:11:2f:d2:58:95:c3:68:af:e7:00:ec:66:
4f:11:cc:c0:34:ee:99:3e:b9:86:96:8d:9c:01:a7:7d:20:e9:
a6:00:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:28:04 2025 by rpki-client