This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
File: 53BQiRv4knQyZQtwbyv-3ZKhEck.mft (raw, json)
Hash identifier: O729Je1tkoik+8du7nnsXPn+V4To6kVvZg5J4p7hhJY=
Subject key identifier: AD:AD:C7:0E:4D:A5:FD:0A:82:D3:F5:F4:FB:51:61:F7:EB:EC:2C:79
Authority key identifier: E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
Certificate issuer: /CN=A91F8ADF/serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Certificate serial: 01E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
Manifest number: 01E0
Signing time: Fri 05 Dec 2025 00:58:11 +0000
Manifest this update: Fri 05 Dec 2025 00:58:10 +0000
Manifest next update: Fri 12 Dec 2025 00:58:10 +0000
Files and hashes: 1: 53BQiRv4knQyZQtwbyv-3ZKhEck.crl (hash: iIUif6APEdQ9cwxH/0d/XHjloR1t4YRrp0lki37mBK4=)
2: F3210638F06D11ED9055A212C4F9AE02.roa (hash: MagQfzBe5yekFsZC62iyjicRBCCYPyKf7/pA5fRZ3FI=)
3: F2948C58F06D11ED9055A212C4F9AE02.roa (hash: WtNf5u0VPKCbZuWxho7o4y46h8TygPH5bunfDKzrwyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486 (0x1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F8ADF, serialNumber=E77050891BF8927432650B706F2BFEDD92A111C9
Validity
Not Before: Dec 5 00:58:10 2025 GMT
Not After : Dec 12 00:58:10 2025 GMT
Subject: CN=69322e22-4ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:41:97:e2:32:c9:c1:08:9c:8f:ac:1e:69:
77:df:a9:85:6a:e2:14:8b:be:c9:0e:e5:73:42:9c:
f6:08:cd:58:fc:ea:da:1e:34:a8:42:c2:b7:60:02:
10:c3:98:44:9e:40:da:03:54:fb:cb:ce:bf:81:cb:
9f:bd:41:03:49:d7:05:43:49:7b:61:07:ba:90:4b:
cd:61:3a:ec:48:f8:1e:fe:0a:83:de:9f:0c:83:a8:
2e:22:87:8c:1b:e8:37:1b:ef:cd:a7:25:4a:7c:ef:
c3:52:68:aa:20:32:33:ad:73:df:9c:f0:ea:e7:b3:
f8:19:ef:8c:4e:bb:83:f0:a2:5f:bd:42:4f:94:3a:
e4:f2:65:08:23:92:2e:e5:5d:ba:5e:bd:e3:89:a9:
69:89:4d:3a:c4:a3:e1:91:cd:4f:2a:18:24:b5:51:
e8:8b:63:5b:64:8b:0f:e0:3f:69:8a:9e:06:32:e9:
1e:3a:21:04:49:55:f9:e4:12:95:ea:d6:e1:ce:46:
e5:78:3b:a9:7d:01:68:78:52:d6:c6:20:54:82:e0:
a8:dc:0c:7f:26:e4:27:84:d8:f0:31:fe:73:b7:f9:
ce:19:a8:4a:e1:17:5a:71:0d:1d:06:37:f9:08:51:
da:04:3b:d6:b8:2c:96:5e:e7:55:d9:67:79:7b:8f:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AD:C7:0E:4D:A5:FD:0A:82:D3:F5:F4:FB:51:61:F7:EB:EC:2C:79
X509v3 Authority Key Identifier:
keyid:E7:70:50:89:1B:F8:92:74:32:65:0B:70:6F:2B:FE:DD:92:A1:11:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53BQiRv4knQyZQtwbyv-3ZKhEck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8ADF/CDF405C2F06811EDBB978E2DC4F9AE02/53BQiRv4knQyZQtwbyv-3ZKhEck.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:5d:74:ba:95:a9:15:b4:5d:68:c2:ff:3e:01:34:53:83:63:
79:b7:03:fa:3a:a7:cd:aa:eb:55:2e:5a:1f:a2:0b:9f:36:80:
ea:4a:32:ea:62:75:79:8a:16:87:6d:84:28:07:2d:58:19:21:
12:dd:40:7f:75:d4:e7:bb:82:ce:96:55:7b:92:b8:4c:d3:50:
0b:8d:c0:85:cc:cf:95:3c:4c:6e:cb:42:f5:31:64:f8:ca:28:
3d:f6:22:62:ed:57:80:69:eb:9c:d2:a6:17:6e:10:54:95:64:
1b:7f:c1:69:2d:ae:2f:d6:ff:72:74:c2:5f:9b:08:f5:f3:5c:
02:01:52:52:11:49:9f:84:2b:36:17:05:e5:62:ad:e9:84:3a:
56:f5:93:ef:e1:c3:d6:1c:77:9e:9e:0b:84:cd:43:50:d4:ef:
92:09:9c:d3:0e:c0:95:4f:a8:5c:35:b5:db:ad:fd:19:cb:64:
3c:3b:40:91:1f:32:65:ee:dc:15:cc:b4:9b:f6:85:37:0f:75:
d8:11:7f:bf:93:b0:ca:0e:05:1a:b0:8c:db:1e:8b:b3:a7:b6:
ed:75:1b:c0:d7:92:b7:5b:13:c7:e6:28:04:ba:90:69:b0:59:
4d:a4:bc:27:b0:c7:7e:08:f8:1a:f5:e5:55:2c:d8:84:67:a4:
50:6b:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:54:37 2025 by rpki-client