This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json)
Hash identifier: 9R/YXDMSDcOSUxfm0ALKDQLakAHYLWgcRHqPemP7t7Y=
Subject key identifier: 3C:99:E5:42:A9:BD:82:EC:3B:C6:C8:10:53:63:06:D2:B6:A8:4B:3C
Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
Manifest number: 0175
Signing time: Fri 19 Dec 2025 03:08:11 +0000
Manifest this update: Fri 19 Dec 2025 03:08:10 +0000
Manifest next update: Fri 26 Dec 2025 03:08:10 +0000
Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: 4RkAUNvfzrPnUjyV9MQOi8DbIUmqa1zUs2ObwOIA6Ak=)
2: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: iA4PiBqhCGu6j+QREktQJZZ0YDevgINmDR162rqZIpg=)
3: 762CACD0B04311EF95390327C4F9AE02.roa (hash: 7lH097TnqT2Frr0JL7F0/A/6TnFN0hBEwwqzvbNC3Tc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44
Validity
Not Before: Dec 19 03:08:10 2025 GMT
Not After : Dec 26 03:08:10 2025 GMT
Subject: CN=6944c19b-21f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fb:12:47:44:79:3f:7a:ea:23:f3:eb:3e:ff:
49:1f:56:cf:16:80:17:58:d6:cf:60:f6:29:ab:53:
0e:f6:26:5f:ab:ae:0a:05:87:6b:0c:41:71:41:6f:
98:93:d8:39:cb:61:f1:a0:49:9e:0a:53:44:c6:17:
48:cb:42:fe:f0:f1:2a:65:3a:9c:37:75:45:93:fd:
34:e0:1c:98:9c:e3:b2:09:ee:20:e4:90:7c:bb:ef:
f8:ab:8b:0d:b5:16:fc:3c:98:f0:ba:12:99:0c:95:
55:ec:bd:cc:21:b4:29:fb:1a:fb:ff:d8:2d:99:57:
ef:70:31:45:03:9b:d6:24:ec:6b:6c:a9:23:85:0e:
37:57:9a:01:f3:70:ee:96:35:b0:8c:00:f7:a5:ea:
8c:b4:1f:5f:67:d2:22:28:77:c9:d5:08:34:6b:58:
8e:22:78:08:48:ed:75:3e:86:03:eb:9b:89:fc:24:
f0:c5:c0:40:87:f4:55:f6:31:5c:0b:c8:9c:58:4e:
aa:a7:e3:c8:70:0f:3c:87:d2:50:a6:e6:3b:55:c7:
2e:4f:f2:6c:74:78:e8:c2:64:6f:83:ca:fe:14:d8:
d8:b7:7d:89:6b:2a:13:23:49:7a:f9:07:ae:74:08:
fd:7f:55:06:ec:bc:59:e9:32:ed:33:3b:dc:85:89:
80:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:99:E5:42:A9:BD:82:EC:3B:C6:C8:10:53:63:06:D2:B6:A8:4B:3C
X509v3 Authority Key Identifier:
keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1e:92:43:a6:0e:0e:9b:03:5d:37:30:a2:1e:d9:7f:c8:05:
ec:05:29:f6:1d:ec:ba:f3:6c:80:2a:13:86:66:99:d1:1d:0a:
75:94:e8:1b:92:1a:85:eb:1b:42:aa:dd:29:d3:79:5f:29:d9:
eb:48:86:de:a3:ca:16:de:a7:9f:67:95:4f:e4:fd:76:71:43:
38:ce:d7:2b:72:16:d3:44:0e:e6:4c:a8:ae:25:ab:b6:8b:a1:
6f:b4:31:c8:d3:c4:5e:05:e0:01:84:e7:fe:88:6a:05:d4:80:
53:2d:18:98:42:8c:d4:1b:a8:c9:05:8d:b7:91:e6:af:28:bd:
0a:3f:fa:0c:ef:dc:6f:f3:93:36:fb:5b:7c:54:c0:54:c5:b8:
38:18:f3:04:74:50:ab:87:44:ee:8e:b8:ba:d0:10:39:24:8b:
13:61:d6:59:57:01:11:44:79:8e:43:12:f8:2c:ca:cb:06:4d:
73:60:c3:90:0c:a7:3a:0a:a7:76:32:87:61:33:ed:69:ed:d5:
95:50:26:cb:4c:7d:76:3b:9d:d9:31:cf:e2:93:bf:0a:25:94:
5e:d6:3c:79:ba:d3:7f:1f:26:1f:fa:a9:34:82:8f:08:0e:ef:
92:65:2a:5c:91:97:f6:dc:12:2e:9a:e1:72:38:be:87:92:90:
21:28:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:27:02 2025 by rpki-client