This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File: C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier: TQBZISkEiphTSGFpgHloYfDXTAD1o8egTWP969ZAjqw=
Subject key identifier: B9:DD:B7:B3:0E:FB:46:D7:9C:BA:95:ED:8B:6F:AC:E0:82:FD:A1:C8
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial: A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number: 9C
Signing time: Fri 05 Dec 2025 04:21:01 +0000
Manifest this update: Fri 05 Dec 2025 04:21:00 +0000
Manifest next update: Fri 12 Dec 2025 04:21:00 +0000
Files and hashes: 1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: mF52qzsSqzL9DUvpnmF1auddRTnuTjAMeLn4IkFcWic=)
2: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: bP9/t2AlBY53g2t6Q5eQ3rldZs73eo2gwKpDvHbyV4Y=)
3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DqTJbrCn4Uj3CYLjBwjQvRunEdKhXtsy8A7Y63yZ9r4=)
4: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: LBvJJ/XeKAW7YpPt8QijWt6ARJJn+Uyg1XhvCYuwjks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:21:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Validity
Not Before: Dec 5 04:21:00 2025 GMT
Not After : Dec 12 04:21:00 2025 GMT
Subject: CN=69325dad-96cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:2b:ce:eb:7a:3c:05:93:08:5a:53:9b:f0:
2f:79:e9:54:b6:0f:b0:57:76:09:3d:25:11:40:bd:
18:06:1b:08:6f:41:21:68:5e:b9:49:5a:71:0c:0b:
e6:7f:47:ef:f2:1a:86:74:8f:ce:22:eb:66:03:59:
d8:44:fd:45:3b:6d:48:90:8f:0b:a4:e7:23:2e:fb:
db:31:9c:17:59:3a:e0:05:74:6a:e2:c6:ff:86:ad:
12:bb:11:d7:b3:f4:ed:3b:77:1f:a2:b5:b7:96:72:
5f:fb:70:64:1a:c1:2c:75:d5:a1:a9:24:40:2d:da:
a1:2a:4e:1e:42:69:f7:2c:03:75:94:6b:cf:67:b0:
fc:f1:8b:7b:a5:23:e6:4d:6a:c0:4b:45:8f:84:81:
fc:86:79:9c:4f:59:37:f8:b9:69:22:28:45:37:8e:
b3:9c:f8:f6:4e:85:11:0b:cd:ad:04:2e:a6:81:19:
9b:be:6d:0f:6b:0f:5d:ec:4d:28:f8:41:de:cd:bf:
b6:b1:97:a3:33:a2:5f:d2:b6:9e:fc:d6:75:a1:b5:
b5:63:ee:d2:e4:0e:9b:cd:a8:29:f8:32:f5:e5:ea:
f7:87:57:3a:b6:1e:4d:13:23:44:5f:fa:16:4c:4e:
de:84:af:93:2c:63:93:a9:c8:97:f9:6e:d1:09:6f:
8e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DD:B7:B3:0E:FB:46:D7:9C:BA:95:ED:8B:6F:AC:E0:82:FD:A1:C8
X509v3 Authority Key Identifier:
keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:72:cc:9e:8e:b3:e2:3c:0f:37:75:37:b7:6b:96:d5:94:9f:
ea:2c:a1:ce:06:fd:96:d5:a2:f1:a3:64:24:bb:de:cc:2f:ca:
75:b4:49:19:a5:14:9b:05:48:72:be:4a:b9:9f:e5:dc:84:9d:
06:9d:5a:a7:a9:ba:f7:89:0b:05:8a:e7:c7:db:59:29:7f:01:
1d:c7:c2:ee:b1:17:9a:00:ec:4d:cf:eb:55:25:99:94:8b:d2:
8a:a7:a1:f2:ed:10:f5:7e:6f:ef:c6:9f:16:c0:04:63:eb:f1:
8a:1e:b9:f7:24:ca:d4:65:4a:3e:06:34:a4:af:b9:92:11:4c:
4a:72:d1:bd:a9:80:86:e7:3d:84:97:74:a1:35:35:c5:99:30:
7c:f9:b0:f1:4c:14:19:01:5d:92:34:fb:2a:92:a4:70:66:8a:
ca:36:17:03:33:bb:fa:9e:e4:c4:db:6a:8a:0e:6d:fe:7d:81:
d2:bb:73:53:5b:d6:f9:3b:7f:47:32:fc:42:08:fe:ce:21:c0:
6c:5d:c3:2c:8b:e6:75:7d:62:45:64:c4:e7:ee:38:ab:8a:40:
9e:4a:1c:bb:30:97:70:fd:57:71:61:fc:15:8b:f7:1d:8b:ae:
cf:81:e7:66:05:4e:51:ee:45:00:7c:42:fb:8b:fb:22:d6:e4:
c3:2d:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:23:00 2025 by rpki-client