This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json)
Hash identifier: MRBiQU0YDrVZAbBd7AmmpLs3A+U4+hN3+VTwlqe+pys=
Subject key identifier: F5:1E:7E:19:92:DE:FA:1C:DB:15:89:50:54:5B:0E:86:FB:09:7E:34
Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56
Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
Certificate serial: 09A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
Manifest number: 0999
Signing time: Sat 06 Dec 2025 19:14:20 +0000
Manifest this update: Sat 06 Dec 2025 19:14:19 +0000
Manifest next update: Sat 13 Dec 2025 19:14:19 +0000
Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: 1Cyb8QyKeEKwtB9g7tSgxDaS6m2w6Ep4hGnJva15QoU=)
2: 156CEB62DC6011ECB2698C14C4F9AE02.roa (hash: reuaGLtn1xD8mIcBhpyoMRgE/LzBHNExqumLX0mZnsc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl
rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2465 (0x9a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56
Validity
Not Before: Dec 6 19:14:19 2025 GMT
Not After : Dec 13 19:14:19 2025 GMT
Subject: CN=6934808b-fd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:d4:d2:09:1c:f2:b2:1a:7a:62:32:e9:7f:
c6:36:ff:e9:29:5b:4b:38:b8:33:26:81:92:17:61:
f9:5f:60:64:9d:d0:07:71:44:e9:94:6c:0b:35:3d:
b1:73:d1:ba:44:b1:eb:3f:9a:a4:88:1b:67:28:12:
7f:49:8f:4e:b6:b4:6c:8e:f9:14:72:c3:a4:01:9f:
d8:dc:17:1c:f4:5a:1e:94:50:69:dd:fb:ae:28:a0:
f9:35:9e:e1:ad:e3:e2:88:bd:2d:0a:5c:74:24:1c:
cd:b5:67:b7:5c:df:9f:e7:e3:36:c0:c8:96:37:de:
8c:dd:a1:57:43:41:81:7a:2e:f1:4e:a3:db:00:c0:
8d:90:91:6f:30:5e:71:7b:60:12:5c:09:cf:2a:ac:
cc:8f:a0:f8:ff:96:4f:da:77:fd:03:87:48:30:38:
31:97:d4:a7:94:b4:21:b9:f9:f8:2f:68:b5:b2:91:
62:32:83:75:48:28:72:13:61:15:ea:5d:6e:8c:16:
d5:54:84:2d:e5:c4:a1:bc:74:e7:0a:6a:77:c7:90:
7e:7b:02:05:38:f0:62:b6:67:43:42:61:61:d5:7e:
48:ff:e0:0f:42:f1:33:e1:dc:cc:0f:0a:c2:b7:5a:
1b:94:dc:14:be:16:9b:fd:4e:68:e2:4d:f9:f7:e6:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1E:7E:19:92:DE:FA:1C:DB:15:89:50:54:5B:0E:86:FB:09:7E:34
X509v3 Authority Key Identifier:
keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ac:2b:86:f7:c7:f5:1b:91:ee:b0:91:a3:06:cf:7a:48:8c:
5b:26:41:74:4f:34:48:99:57:5c:73:69:d3:8e:71:09:78:92:
92:ee:98:4b:42:af:87:da:6b:34:2b:ff:76:71:2f:e4:86:84:
2d:50:de:15:fc:72:d6:a5:d8:52:d8:e4:60:0d:41:2f:34:57:
23:72:77:7d:69:1c:0a:b9:21:d3:c2:c2:d6:ad:88:6c:de:70:
00:ad:e8:be:b8:29:b2:32:a2:08:83:a1:61:ba:da:3a:8b:1b:
9f:16:f5:65:1a:f7:b1:f6:e0:c3:a7:fc:39:4b:c2:e8:9e:26:
6b:91:96:35:d6:24:96:4c:f4:c9:2c:e4:9d:fd:d9:e0:95:78:
52:96:29:3a:0b:f6:3c:7a:5b:9f:23:4f:dd:af:e1:0c:3a:97:
eb:25:a5:46:82:ad:4b:ab:09:da:4b:97:d4:b7:b2:19:e8:89:
0c:4a:39:59:0d:b0:a9:e6:52:c4:3f:a4:cf:da:0e:0a:a9:20:
a5:01:81:ab:0f:f9:dc:d8:79:b4:6b:4b:1f:bd:c6:da:b8:d0:
14:27:a0:d1:87:b4:20:21:c8:74:10:48:d6:88:17:39:cb:5e:
42:98:49:8b:ab:24:21:50:53:84:58:f9:c2:a6:8d:e6:27:28:
09:c3:ad:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG
NDk2N0VGNTYwHhcNMjUxMjA2MTkxNDE5WhcNMjUxMjEzMTkxNDE5WjAYMRYwFAYD
VQQDEw02OTM0ODA4Yi1mZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsFzU0gkc8rIaemIy6X/GNv/pKVtLOLgzJoGSF2H5X2BkndAHcUTplGwLNT2x
c9G6RLHrP5qkiBtnKBJ/SY9OtrRsjvkUcsOkAZ/Y3Bcc9FoelFBp3fuuKKD5NZ7h
rePiiL0tClx0JBzNtWe3XN+f5+M2wMiWN96M3aFXQ0GBei7xTqPbAMCNkJFvMF5x
e2ASXAnPKqzMj6D4/5ZP2nf9A4dIMDgxl9SnlLQhufn4L2i1spFiMoN1SChyE2EV
6l1ujBbVVIQt5cShvHTnCmp3x5B+ewIFOPBitmdDQmFh1X5I/+APQvEz4dzMDwrC
t1oblNwUvhab/U5o4k359+ayKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUefhmS
3voc2xWJUFRbDob7CX40MB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF
NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy
Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNrCuG98f1G5HusJGjBs96SIxbJkF0TzRImVdcc2nTjnEJeJKS7phL
Qq+H2ms0K/92cS/khoQtUN4V/HLWpdhS2ORgDUEvNFcjcnd9aRwKuSHTwsLWrYhs
3nAArei+uCmyMqIIg6Fhuto6ixufFvVlGvex9uDDp/w5S8LoniZrkZY11iSWTPTJ
LOSd/dnglXhSlik6C/Y8elufI0/dr+EMOpfrJaVGgq1LqwnaS5fUt7IZ6IkMSjlZ
DbCp5lLEP6TP2g4KqSClAYGrD/nc2Hm0a0sfvcbauNAUJ6DRh7QgIch0EEjWiBc5
y15CmEmLqyQhUFOEWPnCpo3mJygJw60O
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:30:38 2025 by rpki-client