This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
File: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft (raw, json)
Hash identifier: pPjrquW0Hs2L3rvslJblURJddKQxOkO4JTjfvPhZnoU=
Subject key identifier: 7D:53:BD:B1:13:14:7F:BA:C5:77:51:E0:9F:6D:F2:44:8D:87:05:9F
Authority key identifier: E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE
Certificate issuer: /CN=A91164FE/serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
Certificate serial: 0198
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
Manifest number: 0194
Signing time: Tue 23 Dec 2025 02:29:45 +0000
Manifest this update: Tue 23 Dec 2025 02:29:44 +0000
Manifest next update: Tue 30 Dec 2025 02:29:44 +0000
Files and hashes: 1: 5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl (hash: hc1Y3ist7+MHUM9vLnyK01eRWO56BlJ+eWCSjzzQCHQ=)
2: 63EC7E9476C211EE9FDED166C4F9AE02.roa (hash: 5kehy6INc2ToLeOi19J6b3LvAIXj1iv4FwMeLT93MH8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl
rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 408 (0x198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91164FE, serialNumber=E6F086C05C5E04DD96AE0E5FC9039791A37560FE
Validity
Not Before: Dec 23 02:29:44 2025 GMT
Not After : Dec 30 02:29:44 2025 GMT
Subject: CN=6949fe98-2996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:da:a3:00:1f:73:52:54:38:8c:4f:5d:4a:67:
1f:2c:04:4a:cf:45:7d:db:fd:27:81:1e:40:60:c5:
d7:f2:79:66:90:c3:c7:54:08:2c:b4:e7:4a:86:60:
9f:99:aa:b2:66:3a:e9:0f:b1:12:f7:d8:06:c2:f8:
61:85:77:e2:60:9c:0e:92:aa:2a:ff:85:b0:43:bc:
30:31:de:cc:7a:89:e6:86:0f:d2:e1:a3:c3:0e:5c:
99:41:50:fb:54:90:49:b4:b4:b2:47:62:83:ae:44:
bb:69:ea:79:b0:12:b7:35:02:91:ba:1f:61:8d:90:
1d:5c:8d:68:0c:fa:65:4a:35:22:83:34:e8:7b:f7:
b6:ce:d4:18:9e:18:6e:86:1d:72:98:f0:6a:10:db:
5d:47:2b:be:ea:e2:18:90:d6:82:ae:b9:b3:47:59:
99:d0:97:61:ce:5c:71:e3:dc:5a:c5:0d:cf:1e:08:
2e:83:10:d4:17:90:46:0b:f5:da:58:52:c4:67:2a:
5d:23:49:70:d4:e9:a8:74:21:e9:37:9b:7e:f8:bf:
14:68:01:ad:32:f7:9a:b3:4a:16:c6:6e:88:ba:7e:
49:12:cf:ab:2f:7e:14:df:6d:64:ce:62:20:bd:3d:
3b:2d:be:33:a9:74:14:5f:d0:23:96:16:01:a6:ab:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:53:BD:B1:13:14:7F:BA:C5:77:51:E0:9F:6D:F2:44:8D:87:05:9F
X509v3 Authority Key Identifier:
keyid:E6:F0:86:C0:5C:5E:04:DD:96:AE:0E:5F:C9:03:97:91:A3:75:60:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164FE/B826CA8076BF11EEB14F2D72C4F9AE02/5vCGwFxeBN2Wrg5fyQOXkaN1YP4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:aa:5c:8c:b4:c1:9a:b1:22:f1:60:b2:32:18:bf:74:35:1d:
2b:52:a5:6c:c1:c6:52:c1:c0:9e:ba:21:65:03:23:6e:53:5b:
a4:4c:cf:c9:23:a0:22:f3:35:30:25:d4:f3:10:38:57:ad:3c:
f4:26:d4:1b:f1:ec:13:f4:ac:bb:63:a6:6f:5b:58:04:fd:1e:
08:60:63:24:b4:56:03:8a:58:d6:c5:1c:f1:e8:45:3a:e9:50:
7f:17:17:c9:fc:db:23:38:76:a4:b9:49:4c:3d:68:33:26:56:
f4:3b:35:c9:52:bc:10:be:0c:06:25:29:fc:b9:89:88:8e:01:
88:9f:2d:93:38:ad:bb:22:ef:98:15:80:37:1a:58:ca:09:47:
86:c6:6c:f9:3f:7b:bf:44:55:31:80:89:dd:4b:c8:05:f6:cc:
25:66:1c:6c:fd:49:ee:03:72:a3:a4:cb:dc:29:5e:20:18:bc:
cf:7c:94:c2:2a:86:38:11:fb:e5:99:3e:cd:2a:3e:e9:46:e3:
eb:55:61:16:42:14:8d:ce:4e:b0:5a:36:ea:cc:b9:7a:b3:d1:
34:f6:d4:d8:b0:09:5f:5f:2e:9f:3f:d7:ed:26:43:f9:06:64:
22:2c:d1:fd:9e:8c:0d:77:f7:02:81:f6:fb:74:8d:df:28:d3:
c0:9b:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:31:55 2025 by rpki-client