This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json)
Hash identifier: eLu4XovNSZGL8DxxZCN5wVf/cu41typNfeel6oZ0BgQ=
Subject key identifier: 89:CA:5E:6D:E0:86:C4:C8:E6:DF:CB:3F:ED:D3:96:8F:0E:82:5B:08
Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Certificate serial: 01FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
Manifest number: 01FA
Signing time: Sun 07 Dec 2025 01:00:52 +0000
Manifest this update: Sun 07 Dec 2025 01:00:51 +0000
Manifest next update: Sun 14 Dec 2025 01:00:51 +0000
Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: g2TdSYaCg86LEKHSgIyRcqxMOUgS+Q2xSr447fVKHFA=)
2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: b8ZzvlKgDQGk0f2Mf7aPG61cEDCQRJBc44944Geb3Mc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 510 (0x1fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Validity
Not Before: Dec 7 01:00:51 2025 GMT
Not After : Dec 14 01:00:51 2025 GMT
Subject: CN=6934d1c3-b661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:de:0a:a4:0b:b7:51:47:15:6b:43:66:ea:
de:4d:2b:5e:d9:a8:b4:ad:d4:bb:be:a8:3b:ff:cd:
83:1a:98:7b:09:40:52:50:fc:a4:7e:32:2e:57:99:
0d:b2:70:f0:8f:2f:eb:c9:e8:c4:09:b9:1f:c2:65:
73:5f:8d:80:16:9c:95:20:b2:0b:5d:31:ef:81:55:
3a:1e:3d:62:09:fb:90:5d:e4:58:cd:67:5a:b4:48:
4e:cb:29:53:29:be:a9:ad:0b:ce:d5:02:64:7b:61:
84:d0:a2:e7:2f:52:a3:4d:f8:02:1f:07:e6:73:48:
24:ef:6e:d7:8e:f4:51:e5:62:75:9c:47:51:66:03:
d7:da:88:e5:f9:d5:14:83:52:8e:ac:b1:17:e4:53:
99:2a:78:8c:e8:07:4a:b8:ce:3e:f7:fc:29:54:dd:
1e:25:0e:33:fe:ca:21:ef:d7:f4:aa:ba:ee:0d:7c:
54:7b:68:10:0f:37:df:66:0c:11:15:83:08:d5:77:
06:c4:59:0f:c3:12:29:6a:92:3d:29:b2:01:0b:d8:
93:7c:32:1c:b2:ed:f8:5f:d3:4e:67:dc:2e:d2:95:
00:05:8a:31:16:91:df:92:6e:ae:ba:92:d3:94:78:
c1:ea:b1:2d:b4:68:33:32:fe:34:49:83:ee:87:e3:
4a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CA:5E:6D:E0:86:C4:C8:E6:DF:CB:3F:ED:D3:96:8F:0E:82:5B:08
X509v3 Authority Key Identifier:
keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:98:04:e5:85:3a:50:37:84:2a:5b:1d:b2:b7:33:e2:ac:a0:
3f:d3:47:8b:aa:7e:d0:e8:bc:43:b5:af:16:80:ef:e8:7d:1c:
31:b8:db:69:3a:02:82:fc:b7:fd:a6:8a:28:34:19:76:dd:fe:
81:c6:10:74:08:03:8f:14:ed:41:8c:50:69:76:fc:d8:7d:cc:
ab:69:3b:29:f7:9a:2d:c5:b4:58:8d:44:9d:4a:08:de:e7:19:
88:78:b4:57:2d:19:e7:06:29:6b:e1:36:dd:29:be:49:a8:e6:
9e:d1:17:8a:26:68:24:6d:af:95:67:da:f1:ba:8a:83:5d:ef:
33:b5:eb:9e:4f:b3:6e:81:c8:ca:71:ae:b5:10:d0:63:e4:47:
d8:60:2c:16:d6:ce:3a:56:37:08:40:34:b0:0c:d5:20:fd:c2:
e1:8f:91:9c:78:c5:dd:5d:79:ab:9e:4a:b4:d0:aa:01:6d:e5:
d4:76:40:fe:b7:d4:43:da:d8:56:e2:86:40:fc:bc:8e:6c:52:
96:bc:64:90:9b:29:a5:1a:e1:80:1f:46:02:7d:2f:86:f4:02:
b3:41:ad:ad:3f:38:80:15:4b:37:92:e4:da:b2:b3:c3:3e:94:
4d:91:fe:fb:30:a4:0e:68:39:b5:0b:be:64:ae:5b:fb:3f:5f:
19:85:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:02:20 2025 by rpki-client