This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json)
Hash identifier: mIPVfZQs6IzVQlSJfDVjayXF2gqPUu1+jUyG9vScUd0=
Subject key identifier: C2:1F:6C:CE:CE:9B:C4:33:9A:9B:B2:17:2D:08:B3:27:07:7F:E0:53
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial: 1337
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
Manifest number: 486A
Signing time: Sat 06 Dec 2025 14:19:56 +0000
Manifest this update: Sat 06 Dec 2025 14:19:55 +0000
Manifest next update: Sat 13 Dec 2025 14:19:55 +0000
Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: hKUKQzfPPWSPmTCu95RcxkM3wLALaeNzEvwIdcoZG/k=)
2: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: hei/cgFAUZIGCHaatDAW34u7WoWx8+SizsC0TsbKAW0=)
3: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: GOy9OboZpKQbKQnVi7OFhab7NMhnYhuV2h2uNtdNUpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4919 (0x1337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Validity
Not Before: Dec 6 14:19:55 2025 GMT
Not After : Dec 13 14:19:55 2025 GMT
Subject: CN=69343b8c-105a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:f6:5a:cc:5d:90:68:6c:6e:77:97:84:85:
75:50:72:b3:ba:b0:25:4b:bd:2d:33:93:24:be:35:
02:0f:bf:4b:34:7c:1a:1d:18:b8:5d:03:fd:51:62:
c8:47:7b:66:02:6c:7f:d4:83:16:57:06:f3:64:8e:
78:f6:79:4d:a5:46:30:46:d1:10:36:8b:db:08:a0:
6f:c1:d3:64:22:09:8e:1b:a3:72:6b:aa:ff:51:8b:
56:7c:49:54:41:be:3e:51:8f:bf:cb:17:85:7b:b3:
37:8b:11:7f:99:08:31:c3:85:c6:04:d7:4c:26:bd:
07:3b:c8:cd:3d:77:02:b8:9d:b9:8e:03:e2:e1:90:
12:05:8e:81:54:b6:e5:57:e1:a5:5b:e1:fb:74:77:
49:0a:11:eb:07:11:e1:18:21:e4:ea:08:5b:3b:0b:
ee:51:e8:c5:ba:2f:d2:fc:2d:0d:16:b0:4a:31:2b:
e8:64:aa:f7:4e:96:25:1b:49:4c:b1:d9:27:fb:19:
c4:12:f0:8f:12:ac:40:2e:23:8d:0b:28:6f:66:aa:
da:1a:c9:13:21:67:be:dd:3e:1c:ba:b9:28:3d:3d:
53:47:d6:4c:28:b9:33:84:db:45:2c:5f:8d:5b:33:
e2:59:ba:8c:2e:de:22:a1:71:79:70:db:f4:75:d9:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1F:6C:CE:CE:9B:C4:33:9A:9B:B2:17:2D:08:B3:27:07:7F:E0:53
X509v3 Authority Key Identifier:
keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2f:2c:3e:41:d0:8d:d2:a3:7f:98:71:a1:7b:05:40:2d:7c:
3b:86:c0:0e:b4:cb:cd:bb:6d:4f:f5:02:a3:42:4f:44:cc:cd:
5a:c2:db:91:58:dc:f2:13:2b:e9:cc:ad:1f:e2:6d:c7:17:ca:
0e:e4:74:fb:72:a9:be:88:6c:1d:8b:fb:1b:18:e2:c5:ec:cf:
a8:f1:1f:7b:33:62:37:55:8b:be:9b:7e:03:05:03:98:2c:81:
8e:ef:79:41:7c:5a:7b:b7:b7:77:be:8b:d6:08:85:80:16:f6:
69:8c:86:a1:b1:0a:48:90:1a:d8:5a:b1:ee:38:dc:da:ec:38:
3b:d2:b5:e7:13:9e:d0:f6:01:1c:3d:dc:07:4c:ba:29:0d:38:
87:6b:85:0e:f0:c6:e7:c4:8e:41:69:09:c4:65:00:d5:e4:e7:
30:67:22:ca:0a:53:61:dd:70:d8:a8:18:6c:16:9a:ea:37:49:
4e:14:9c:a2:7c:89:33:59:2e:4d:82:e8:99:8d:dd:4d:9f:52:
12:9a:93:25:17:eb:18:99:7d:b5:d2:57:45:90:6f:65:8e:3d:
6a:0e:60:b5:b8:ab:1e:f8:f6:2d:04:75:2e:fd:ed:3f:38:e5:
e8:c4:03:01:b7:03:c7:0b:f9:30:73:bf:f3:66:67:65:74:0b:
0f:a2:18:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVENjExMTAvBgNVBAUTKDVFNTEwOUJFMzRCODFDMENCQkUwRTQzNTlBNzc4MUE0
NjI0QjlGQ0QwHhcNMjUxMjA2MTQxOTU1WhcNMjUxMjEzMTQxOTU1WjAYMRYwFAYD
VQQDEw02OTM0M2I4Yy0xMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApaD2WsxdkGhsbneXhIV1UHKzurAlS70tM5MkvjUCD79LNHwaHRi4XQP9UWLI
R3tmAmx/1IMWVwbzZI549nlNpUYwRtEQNovbCKBvwdNkIgmOG6Nya6r/UYtWfElU
Qb4+UY+/yxeFe7M3ixF/mQgxw4XGBNdMJr0HO8jNPXcCuJ25jgPi4ZASBY6BVLbl
V+GlW+H7dHdJChHrBxHhGCHk6ghbOwvuUejFui/S/C0NFrBKMSvoZKr3TpYlG0lM
sdkn+xnEEvCPEqxALiONCyhvZqraGskTIWe+3T4curkoPT1TR9ZMKLkzhNtFLF+N
WzPiWbqMLt4ioXF5cNv0ddmjEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIfbM7O
m8QzmpuyFy0IsycHf+BTMB8GA1UdIwQYMBaAFF5RCb40uBwMu+DkNZp3gaRiS5/N
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE
NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhBeTc0T1ExbW5lQnBHSkxu
ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hsRUp2alM0SEF5NzRPUTFtbmVCcEdKTG44MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9YbEVKdmpTNEhB
eTc0T1ExbW5lQnBHSkxuODAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeLyw+QdCN0qN/mHGhewVALXw7hsAOtMvNu21P9QKjQk9EzM1awtuR
WNzyEyvpzK0f4m3HF8oO5HT7cqm+iGwdi/sbGOLF7M+o8R97M2I3VYu+m34DBQOY
LIGO73lBfFp7t7d3vovWCIWAFvZpjIahsQpIkBrYWrHuONza7Dg70rXnE57Q9gEc
PdwHTLopDTiHa4UO8MbnxI5BaQnEZQDV5OcwZyLKClNh3XDYqBhsFprqN0lOFJyi
fIkzWS5NguiZjd1Nn1ISmpMlF+sYmX210ldFkG9ljj1qDmC1uKse+PYtBHUu/e0/
OOXoxAMBtwPHC/kwc7/zZmdldAsPohgZ
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:54:30 2025 by rpki-client