This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft
File: 5v6wYDITaH99TA3YxdHl8ycflmo.mft (raw, json)
Hash identifier: zGeMeDKf+fDvZYBZnZPUqJpLJXayqY6nrI9wyqktXyc=
Subject key identifier: F0:7A:71:C3:60:59:F8:2F:DF:3D:51:55:7B:AA:6D:4D:86:15:28:07
Authority key identifier: E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A
Certificate issuer: /CN=A9117602/serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft
Manifest number: 0158
Signing time: Tue 23 Dec 2025 03:08:39 +0000
Manifest this update: Tue 23 Dec 2025 03:08:38 +0000
Manifest next update: Tue 30 Dec 2025 03:08:38 +0000
Files and hashes: 1: 5v6wYDITaH99TA3YxdHl8ycflmo.crl (hash: XdKjNkMI6BfTTh8xNbfPlWmglHscmFzGeYx4sGzll9U=)
2: 1EF0CB38CEFB11EE9D1FB686C4F9AE02.roa (hash: YSxv9P+ceb+T4PK5zL4uHyyDeIGTbdqAUVG/7oe35WE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl
rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:08:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9117602, serialNumber=E6FEB0603213687F7D4C0DD8C5D1E5F3271F966A
Validity
Not Before: Dec 23 03:08:38 2025 GMT
Not After : Dec 30 03:08:38 2025 GMT
Subject: CN=694a07b7-f2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:d4:ff:5e:87:66:3f:40:5a:5f:50:af:10:
8e:ae:43:30:fa:68:af:59:1d:e8:35:71:4b:ad:a0:
3f:ef:8a:90:05:6d:00:4d:b5:16:15:02:1f:d0:98:
5e:79:ec:af:67:d8:ec:aa:7d:b6:45:3d:63:3f:ca:
14:04:94:e2:6e:83:d1:39:3e:d7:cd:0e:d6:7e:51:
54:4f:ef:40:5a:18:cc:48:29:34:10:bb:03:c6:93:
f6:55:73:e8:1d:66:49:86:43:31:8c:eb:f4:ee:bb:
1f:7f:c5:8b:ce:b7:95:b2:da:0b:dd:9b:55:f7:81:
49:68:ac:5e:dd:9b:9c:da:03:1d:40:ce:ac:78:37:
f8:7a:7b:42:b8:ad:95:e6:fd:42:24:7e:c6:73:0f:
b9:4a:f9:61:da:f8:b1:20:7a:25:5b:fa:d2:d1:49:
d7:8e:66:2a:74:8e:7f:79:97:fc:08:4b:6a:a7:70:
21:50:9a:47:e3:7b:2f:22:44:81:9a:00:54:4d:a1:
40:ee:01:d0:a6:0a:b4:6c:c1:1d:a4:45:6a:1b:3e:
f7:a3:d7:7a:28:f5:e8:e4:ae:70:d7:31:77:67:9d:
2b:4b:4b:78:de:47:b1:6d:a8:8c:82:96:a5:46:00:
ff:48:07:a8:60:37:91:79:d9:38:0f:14:86:24:cd:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7A:71:C3:60:59:F8:2F:DF:3D:51:55:7B:AA:6D:4D:86:15:28:07
X509v3 Authority Key Identifier:
keyid:E6:FE:B0:60:32:13:68:7F:7D:4C:0D:D8:C5:D1:E5:F3:27:1F:96:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5v6wYDITaH99TA3YxdHl8ycflmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117602/AEBC5CF6CEFA11EE97F88C85C4F9AE02/5v6wYDITaH99TA3YxdHl8ycflmo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:e3:8a:94:27:c5:eb:ad:f5:b5:f3:ad:bc:39:65:eb:c8:4c:
a6:c9:3e:72:47:8b:30:66:62:f0:d1:69:4f:46:6c:9a:20:86:
ed:a8:46:ea:43:ee:38:0d:91:25:ac:3a:17:fb:e4:aa:f1:5f:
e7:fb:21:c2:17:a1:bc:22:97:ec:59:d5:e1:12:4e:5a:28:67:
29:66:50:24:fc:59:8b:f4:fb:23:29:5e:a2:df:e6:2d:23:28:
85:52:f2:17:80:d4:bf:07:c1:8a:a9:0a:0a:ab:8a:e2:fd:41:
9a:d4:dd:ca:e0:0c:85:29:bf:2e:80:ce:21:79:ff:f1:d1:fc:
d4:a0:5b:22:83:21:80:6d:97:46:51:18:8e:ed:5a:cb:d0:93:
ec:ad:e9:e1:ef:d5:7c:f6:8f:e3:dd:15:1a:90:52:44:4f:ae:
31:24:a6:ae:d7:eb:a8:63:6d:9c:17:ea:63:c3:8e:ca:ee:b3:
01:0a:94:f5:d7:dc:ef:de:90:19:05:3e:2a:2b:06:b8:ac:b9:
59:49:e9:68:ba:e7:53:be:0f:4f:27:73:4a:dd:8e:6b:59:65:
9c:db:6c:0c:14:db:88:90:05:42:7d:a5:1e:b2:5f:95:ac:52:
ad:71:b7:6e:55:11:c7:4e:9f:bb:57:2f:32:4a:37:b9:8b:b4:
96:b7:84:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc2MDIxMTAvBgNVBAUTKEU2RkVCMDYwMzIxMzY4N0Y3RDRDMEREOEM1RDFFNUYz
MjcxRjk2NkEwHhcNMjUxMjIzMDMwODM4WhcNMjUxMjMwMDMwODM4WjAYMRYwFAYD
VQQDDA02OTRhMDdiNy1mMmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZDU/16HZj9AWl9QrxCOrkMw+mivWR3oNXFLraA/74qQBW0ATbUWFQIf0Jhe
eeyvZ9jsqn22RT1jP8oUBJTiboPROT7XzQ7WflFUT+9AWhjMSCk0ELsDxpP2VXPo
HWZJhkMxjOv07rsff8WLzreVstoL3ZtV94FJaKxe3Zuc2gMdQM6seDf4entCuK2V
5v1CJH7Gcw+5Svlh2vixIHolW/rS0UnXjmYqdI5/eZf8CEtqp3AhUJpH43svIkSB
mgBUTaFA7gHQpgq0bMEdpEVqGz73o9d6KPXo5K5w1zF3Z50rS0t43kexbaiMgpal
RgD/SAeoYDeRedk4DxSGJM3wBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPB6ccNg
Wfgv3z1RVXuqbU2GFSgHMB8GA1UdIwQYMBaAFOb+sGAyE2h/fUwN2MXR5fMnH5Zq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzYwMi9BRUJDNUNGNkNF
RkExMUVFOTdGODhDODVDNEY5QUUwMi81djZ3WURJVGFIOTlUQTNZeGRIbDh5Y2Zs
bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV2NndZRElUYUg5OVRBM1l4ZEhsOHljZmxtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzYwMi9BRUJDNUNGNkNFRkExMUVFOTdGODhDODVDNEY5QUUwMi81djZ3WURJVGFI
OTlUQTNZeGRIbDh5Y2ZsbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB444qUJ8XrrfW18628OWXryEymyT5yR4swZmLw0WlPRmyaIIbtqEbq
Q+44DZElrDoX++Sq8V/n+yHCF6G8IpfsWdXhEk5aKGcpZlAk/FmL9PsjKV6i3+Yt
IyiFUvIXgNS/B8GKqQoKq4ri/UGa1N3K4AyFKb8ugM4hef/x0fzUoFsigyGAbZdG
URiO7VrL0JPsrenh79V89o/j3RUakFJET64xJKau1+uoY22cF+pjw47K7rMBCpT1
19zv3pAZBT4qKwa4rLlZSelouudTvg9PJ3NK3Y5rWWWc22wMFNuIkAVCfaUesl+V
rFKtcbduVRHHTp+7Vy8ySje5i7SWt4Q9
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:07 2025 by rpki-client