This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
File: l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft (raw, json)
Hash identifier: vpqZNQVKgstTD1AsJlhNLNOfnfCtj9axOKAkdnOLJvY=
Subject key identifier: 01:21:13:C1:58:6F:D8:03:DB:D0:C7:8A:61:D6:5D:33:1E:AD:3C:64
Authority key identifier: 97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
Certificate issuer: /CN=A91309C9/serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
Certificate serial: 0472
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
Manifest number: 046D
Signing time: Mon 22 Dec 2025 23:11:22 +0000
Manifest this update: Mon 22 Dec 2025 23:11:22 +0000
Manifest next update: Mon 29 Dec 2025 23:11:22 +0000
Files and hashes: 1: l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl (hash: /V/Uxw4H6TsU3JM/1hgdvI84AkJnM3tUzLGVcE2o490=)
2: 46BFB17C739711ECAD333D27C4F9AE02.roa (hash: 6m2q3lRXLAFrPlHDZxzNnpenf3mKGBo+gMVhi6EnOZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl
rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:11:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1138 (0x472)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91309C9, serialNumber=97958FFFE696D80C57636524A46E18234176FBC1
Validity
Not Before: Dec 22 23:11:22 2025 GMT
Not After : Dec 29 23:11:22 2025 GMT
Subject: CN=6949d01a-7c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:ae:ac:0e:92:02:ab:be:64:80:5f:3a:ec:
8a:61:36:94:88:72:a1:9c:6d:94:88:54:de:3e:6e:
d2:32:99:91:e4:f1:ae:04:82:29:0e:93:4d:b3:21:
01:9a:82:4c:bc:66:19:66:12:e0:e7:f0:55:c5:bd:
e6:ca:d9:95:8c:a2:26:5f:8c:14:b5:c3:78:2a:53:
2b:90:c2:f4:38:20:ef:86:a0:35:c4:31:48:97:69:
44:1c:2b:88:6e:eb:fd:0e:fa:4f:b7:a6:10:d6:85:
8e:f3:75:ef:b4:7e:f7:70:4a:2f:6e:62:21:2c:77:
fa:74:88:ca:15:9b:3b:93:49:71:f9:50:d1:b2:9a:
1c:50:e8:a3:17:83:e1:f5:42:6c:e1:3e:1a:39:18:
10:22:c3:33:5f:d6:0c:c0:20:d4:94:04:cd:72:fc:
4d:93:d2:e9:f9:8a:51:48:81:a6:e6:c5:49:47:df:
1e:dc:b4:cd:b8:fd:87:54:45:7e:3e:ce:46:c4:6a:
da:5b:21:de:ec:03:c4:5b:f5:d8:77:7e:59:c9:09:
8d:a8:04:24:67:50:8d:b3:43:4c:3c:b7:c8:e3:02:
39:3b:c4:12:57:47:68:bf:50:fd:cd:3f:58:e9:c3:
76:eb:7e:de:c6:66:19:16:56:c3:27:16:f0:43:aa:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:21:13:C1:58:6F:D8:03:DB:D0:C7:8A:61:D6:5D:33:1E:AD:3C:64
X509v3 Authority Key Identifier:
keyid:97:95:8F:FF:E6:96:D8:0C:57:63:65:24:A4:6E:18:23:41:76:FB:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l5WP_-aW2AxXY2UkpG4YI0F2-8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91309C9/46D72DE2736611EC8982BE0AC4F9AE02/l5WP_-aW2AxXY2UkpG4YI0F2-8E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:4d:e3:38:82:3e:b7:82:3d:8b:fe:f5:7f:51:e1:a4:cb:68:
ea:67:d3:06:11:1a:a4:9d:a4:e4:6b:ba:ea:b7:bf:5a:2c:45:
da:fb:0f:60:53:14:52:96:75:68:15:49:95:24:d4:1b:e9:5f:
54:7e:5a:33:36:81:28:e0:d3:b4:ce:a2:01:81:c8:49:69:62:
70:1e:b1:56:0c:10:db:7c:50:7b:1f:7c:be:c0:aa:61:e3:c1:
bc:79:5c:d5:5c:9a:33:2b:34:73:df:14:5c:e5:9a:bd:21:b6:
07:9e:85:94:2d:30:3d:c4:8d:a1:49:45:b1:58:91:32:03:d3:
e7:20:ae:a7:f9:a0:7e:a8:5d:e5:99:0d:6c:87:6f:38:fe:21:
79:06:1d:a1:10:34:cd:f7:7d:e8:d7:8a:30:7b:3b:a1:17:a3:
41:47:9c:56:5b:31:94:32:40:e0:19:35:ed:76:46:d7:22:dc:
a9:93:c9:05:8b:05:6e:8d:55:99:5a:94:b7:03:a9:93:b1:bd:
da:fe:af:14:6d:5e:5e:d0:6b:08:aa:d1:15:ce:26:cb:a7:71:
c4:00:df:6e:93:c5:4c:92:4d:66:f2:2e:52:43:c2:0b:6f:aa:
5e:f5:d0:54:c4:d8:bb:1b:94:d6:63:f7:4d:d7:c6:4f:c9:2c:
04:46:6a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:37 2025 by rpki-client