This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
File: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft (raw, json)
Hash identifier: YBCtxA9K5gPh2t6FVrCwkd0NMchtBWK+8i25q6bhQFY=
Subject key identifier: E6:46:57:90:A1:7B:E8:3A:6C:9E:DB:CC:7D:7C:87:7B:A0:7D:07:FD
Authority key identifier: 44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47
Certificate issuer: /CN=A91F3C11/serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447
Certificate serial: 09E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
Manifest number: 09E5
Signing time: Sat 06 Dec 2025 14:52:49 +0000
Manifest this update: Sat 06 Dec 2025 14:52:48 +0000
Manifest next update: Sat 13 Dec 2025 14:52:48 +0000
Files and hashes: 1: RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl (hash: KYUxGSHKg42CSnNX+EuW5UcAORXg+BpZr4i1jLqL2+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl
rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2533 (0x9e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F3C11, serialNumber=44F8D153B77B092B11EDF00A93E4BB64091C2447
Validity
Not Before: Dec 6 14:52:48 2025 GMT
Not After : Dec 13 14:52:48 2025 GMT
Subject: CN=69344341-6190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:e7:b1:06:55:28:81:db:a9:76:1b:a5:5a:
48:1f:95:5e:a9:78:29:d4:3c:e2:80:34:09:78:78:
a7:0b:6d:7f:d1:21:61:cd:cf:2c:9c:0b:7b:17:7c:
cf:c7:99:f8:50:e9:9d:d9:3f:d2:6c:32:a1:67:d8:
58:ab:64:8c:8b:44:8a:a0:b1:cf:58:cd:21:fc:fb:
a6:5d:7e:d9:ff:34:4f:0d:1f:88:fe:bb:29:66:d8:
51:47:4b:86:b3:0f:5e:2c:00:8b:29:d8:10:a6:36:
20:16:66:12:86:a4:fc:e2:0f:19:fe:e7:4a:fd:70:
c5:6c:66:c4:d0:5b:5b:af:b6:95:e5:51:6d:1a:4e:
d1:c4:f6:ab:33:ca:4c:0e:17:94:da:c1:df:0e:11:
93:28:7b:d4:d9:56:b8:ae:91:b6:69:9b:be:6b:0b:
13:b2:17:94:d7:93:77:6f:a5:e5:10:ae:e8:0a:cc:
19:11:ba:b4:30:65:f8:8d:8c:18:ba:e9:42:5d:28:
97:4f:78:41:3c:4a:5b:be:06:ac:6d:0b:fa:f9:4a:
80:32:fd:2a:3e:1f:81:bf:06:7c:17:6a:25:20:22:
cc:b0:83:47:56:15:e8:98:cd:9b:c6:26:c3:7a:75:
a2:4d:8b:ed:3c:51:af:69:50:69:cd:45:4b:3b:5d:
c0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:46:57:90:A1:7B:E8:3A:6C:9E:DB:CC:7D:7C:87:7B:A0:7D:07:FD
X509v3 Authority Key Identifier:
keyid:44:F8:D1:53:B7:7B:09:2B:11:ED:F0:0A:93:E4:BB:64:09:1C:24:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C11/5198FB968F7B11EA9ACB7E7FC4F9AE02/RPjRU7d7CSsR7fAKk-S7ZAkcJEc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:c4:fd:8e:0b:6a:33:f8:73:c3:b7:c5:06:1c:de:87:aa:32:
f3:49:d8:2a:d9:34:54:3b:a6:81:9e:3d:f2:62:c9:07:e3:7d:
25:31:bd:50:3f:30:30:f3:da:50:fd:13:15:90:ab:9a:01:d9:
c5:7a:17:fd:9b:73:bb:7e:7f:51:45:16:ce:b0:70:56:03:bf:
8b:eb:46:66:f1:c8:14:da:2f:8a:91:27:80:66:43:a8:4d:b9:
53:f8:19:e8:04:60:45:c6:00:5f:37:37:fa:4d:3b:86:04:9a:
ac:67:ea:ac:97:b5:bf:ea:5a:89:09:cc:02:6d:04:7e:21:1a:
6b:ce:7c:9f:b8:6d:72:11:af:fc:32:5d:53:3b:39:c3:7a:e6:
04:b8:be:2d:40:2d:2b:3b:59:d1:1f:69:b9:cb:33:8f:b7:19:
9f:4d:ec:dc:ed:ef:e1:62:2f:1c:2e:5e:65:15:16:91:a4:e9:
1a:f5:64:43:3c:d3:ca:06:87:92:8c:1a:82:c9:48:e6:44:44:
99:6b:58:f1:9f:ec:72:38:77:e0:42:c3:2f:81:4e:ad:26:e9:
e6:6b:3a:88:de:de:ec:2e:f3:05:91:6d:26:f8:24:0e:f9:93:
ba:e6:5f:f0:09:69:70:ed:87:bd:6d:ef:90:12:0b:1b:bd:0e:
0e:5f:28:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjNDMTExMTAvBgNVBAUTKDQ0RjhEMTUzQjc3QjA5MkIxMUVERjAwQTkzRTRCQjY0
MDkxQzI0NDcwHhcNMjUxMjA2MTQ1MjQ4WhcNMjUxMjEzMTQ1MjQ4WjAYMRYwFAYD
VQQDEw02OTM0NDM0MS02MTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoVLnsQZVKIHbqXYbpVpIH5VeqXgp1DzigDQJeHinC21/0SFhzc8snAt7F3zP
x5n4UOmd2T/SbDKhZ9hYq2SMi0SKoLHPWM0h/PumXX7Z/zRPDR+I/rspZthRR0uG
sw9eLACLKdgQpjYgFmYShqT84g8Z/udK/XDFbGbE0Ftbr7aV5VFtGk7RxParM8pM
DheU2sHfDhGTKHvU2Va4rpG2aZu+awsTsheU15N3b6XlEK7oCswZEbq0MGX4jYwY
uulCXSiXT3hBPEpbvgasbQv6+UqAMv0qPh+BvwZ8F2olICLMsINHVhXomM2bxibD
enWiTYvtPFGvaVBpzUVLO13AWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZGV5Ch
e+g6bJ7bzH18h3ugfQf9MB8GA1UdIwQYMBaAFET40VO3ewkrEe3wCpPku2QJHCRH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0MxMS81MTk4RkI5NjhG
N0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NTc1I3ZkFLay1TN1pBa2NK
RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JQalJVN2Q3Q1NzUjdmQUtrLVM3WkFrY0pFYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
M0MxMS81MTk4RkI5NjhGN0IxMUVBOUFDQjdFN0ZDNEY5QUUwMi9SUGpSVTdkN0NT
c1I3ZkFLay1TN1pBa2NKRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBIxP2OC2oz+HPDt8UGHN6HqjLzSdgq2TRUO6aBnj3yYskH430lMb1Q
PzAw89pQ/RMVkKuaAdnFehf9m3O7fn9RRRbOsHBWA7+L60Zm8cgU2i+KkSeAZkOo
TblT+BnoBGBFxgBfNzf6TTuGBJqsZ+qsl7W/6lqJCcwCbQR+IRprznyfuG1yEa/8
Ml1TOznDeuYEuL4tQC0rO1nRH2m5yzOPtxmfTezc7e/hYi8cLl5lFRaRpOka9WRD
PNPKBoeSjBqCyUjmRESZa1jxn+xyOHfgQsMvgU6tJunmazqI3t7sLvMFkW0m+CQO
+ZO65l/wCWlw7Ye9be+QEgsbvQ4OXyjO
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:44:44 2025 by rpki-client