This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json)
Hash identifier: BWSVwQnSdxmuXu73S7yu3cF4s0T3FKONp2gqODerFOE=
Subject key identifier: C3:ED:BB:C5:2E:E7:6D:66:CA:C0:03:EB:03:DC:1C:F9:F9:24:17:22
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial: 04DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
Manifest number: 04BF
Signing time: Thu 04 Dec 2025 22:27:42 +0000
Manifest this update: Thu 04 Dec 2025 22:27:41 +0000
Manifest next update: Thu 11 Dec 2025 22:27:41 +0000
Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: qnqZDqIBx7/sEX8s5Whozg1TzWlTTmxl69s88OJJfkU=)
2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: OKD6dIXNlufXP/2KtQACOYy/fSTRLoZuLrkJHHyBmPs=)
3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: 03xQSZXfxDyCzRtWljLHUlOT109SCX3SLMxm27msFJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1244 (0x4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Validity
Not Before: Dec 4 22:27:41 2025 GMT
Not After : Dec 11 22:27:41 2025 GMT
Subject: CN=69320add-e379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:02:0a:ae:69:92:cc:e8:31:3d:c8:4c:cd:
64:92:79:81:97:04:cb:ae:76:32:fb:8f:67:3c:37:
d9:3a:00:2d:5d:8b:ca:88:ed:38:7c:ea:ce:a4:06:
1f:52:eb:1a:ef:5b:30:ea:03:4d:84:59:07:58:4a:
ef:bd:94:12:20:0e:9d:f6:bf:72:ed:c3:cf:b1:2a:
02:b8:24:1e:82:7a:d3:09:60:55:51:41:58:68:33:
fb:20:e8:a3:23:f1:21:b6:5b:a9:5a:d6:cc:d5:82:
66:e9:b5:74:4f:c5:07:be:42:80:5d:c3:d8:54:f8:
ae:49:16:75:9f:68:6b:19:21:01:ec:3f:e8:a7:86:
04:40:84:83:bb:6d:4b:f8:58:53:d2:62:df:44:d2:
01:15:1e:50:91:ad:0e:03:9f:3f:00:67:e5:63:5f:
be:c5:1b:d2:25:d2:68:4f:ed:27:49:ec:b9:ce:8b:
84:b4:c7:d1:00:54:c8:37:36:39:54:6a:d5:27:c2:
fd:5a:03:f0:e1:12:24:5c:24:e9:36:87:8a:50:70:
e1:c3:6e:f8:94:d8:9a:30:34:d6:18:51:19:43:c6:
d4:c4:9a:36:65:03:18:93:f5:33:e7:b8:fa:64:e5:
d4:5e:ce:32:04:d2:47:a9:74:5c:5a:f7:ca:df:79:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:ED:BB:C5:2E:E7:6D:66:CA:C0:03:EB:03:DC:1C:F9:F9:24:17:22
X509v3 Authority Key Identifier:
keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:96:b6:e1:ea:00:07:f0:6b:0c:15:9a:06:f8:9e:4b:9c:55:
bf:c0:ee:89:63:bb:02:d2:9e:85:8a:30:14:69:2c:66:8c:b8:
46:2c:e8:ac:3c:ec:86:b7:16:16:9a:28:a0:7d:a8:e6:ff:1a:
39:e5:42:74:8b:dd:53:b0:9d:62:65:82:5f:03:46:33:37:90:
03:17:99:bd:ca:f7:76:44:ce:ce:88:8c:77:0f:4f:c2:f0:ff:
ac:16:20:24:3b:d1:2f:f8:06:89:57:36:46:b7:b1:c2:28:d3:
4a:10:09:35:53:e8:40:e2:b2:eb:4b:1a:f5:f6:e0:0e:23:50:
3a:e5:7b:3c:aa:ef:57:af:0c:3d:1f:8f:e7:45:0a:6a:7d:b8:
53:66:be:cb:81:3d:b8:8b:42:4d:83:97:b3:a9:5d:1a:3e:78:
4a:72:9c:13:cb:25:1a:c8:48:0a:2e:cc:31:72:a7:e5:79:e5:
7f:75:d3:56:ae:e5:b0:cb:59:58:d2:2a:da:e4:16:43:2d:38:
8d:af:32:5f:76:59:74:ac:49:27:75:7d:97:dc:bc:9d:d5:dd:
a4:81:a8:26:5a:b1:5d:69:44:b4:d1:fd:2b:80:fe:cc:e8:43:
a6:89:4c:33:7d:d2:f4:9c:cb:e8:92:b8:1e:ef:27:5d:ef:5b:
f8:22:a3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:43:55 2025 by rpki-client