This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
File: 5OZ6308FfoAR2ixoJJ18JW1QB0E.mft (raw, json)
Hash identifier: v3SPjznEeRqfo2oKNIppFiTjNwZcp6WgdKZFG4H+G7M=
Subject key identifier: 20:AF:20:69:73:F1:EE:6F:43:53:90:88:99:E9:99:5B:B9:BD:6A:1A
Authority key identifier: E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
Certificate issuer: /CN=A913B3D6/serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Certificate serial: 0206
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
Manifest number: 0202
Signing time: Tue 23 Dec 2025 01:27:39 +0000
Manifest this update: Tue 23 Dec 2025 01:27:38 +0000
Manifest next update: Tue 30 Dec 2025 01:27:38 +0000
Files and hashes: 1: 5OZ6308FfoAR2ixoJJ18JW1QB0E.crl (hash: zGf2aoTrcS6pqUKM6rSSCIa3ZC0Lp5BVL45sfnchN6Y=)
2: A6E025D4CEB111EDAE111B61C4F9AE02.roa (hash: b8ZzvlKgDQGk0f2Mf7aPG61cEDCQRJBc44944Geb3Mc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:27:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 518 (0x206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B3D6, serialNumber=E4E67ADF4F057E8011DA2C68249D7C256D500741
Validity
Not Before: Dec 23 01:27:38 2025 GMT
Not After : Dec 30 01:27:38 2025 GMT
Subject: CN=6949f00b-3252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:fd:2f:96:13:55:c7:2b:e0:ba:e6:0c:dc:
dc:1c:6f:7f:5b:cb:34:f2:05:9b:84:85:da:ef:10:
79:24:6d:ed:f6:c5:fe:25:d6:75:c3:40:a3:29:45:
a7:0c:08:f7:df:9a:82:3e:19:5a:00:56:68:fb:08:
9b:0a:9a:5f:cf:b5:d8:53:2f:ca:a7:8f:d0:9e:72:
a7:2b:ea:e0:54:56:db:69:c1:3c:1a:4b:a2:a9:98:
02:12:a1:89:8e:00:20:55:03:a0:59:c4:e2:e1:e6:
be:57:58:9c:41:3e:40:66:c7:ff:7e:95:a7:a4:3f:
0e:75:75:4c:3c:78:09:07:04:88:f5:2d:d5:fb:d4:
68:0c:3c:d2:8d:cb:a2:08:c5:ca:ce:8c:d9:1a:49:
ab:b1:8c:7b:7d:ca:d7:3a:15:fe:a3:c5:97:6d:3b:
f6:a7:60:c4:b6:9e:ee:74:24:a9:3e:23:e4:54:e4:
da:fc:b9:59:f4:e2:84:85:b8:84:32:81:54:ef:79:
a3:9a:00:49:f3:6a:86:e9:73:35:a2:38:5a:0e:d3:
38:95:07:c9:2b:4b:8a:60:36:da:e7:ac:79:5e:a0:
3d:71:60:ea:40:0d:26:d7:89:11:30:74:f7:6b:cd:
a4:9d:d2:c9:ad:40:ae:0c:35:c3:ee:20:bf:54:c1:
73:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AF:20:69:73:F1:EE:6F:43:53:90:88:99:E9:99:5B:B9:BD:6A:1A
X509v3 Authority Key Identifier:
keyid:E4:E6:7A:DF:4F:05:7E:80:11:DA:2C:68:24:9D:7C:25:6D:50:07:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5OZ6308FfoAR2ixoJJ18JW1QB0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B3D6/46EC1DE4CEA311EDB303F738C4F9AE02/5OZ6308FfoAR2ixoJJ18JW1QB0E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:ae:05:76:24:77:87:4b:4a:52:db:e0:4f:6b:7e:8c:6a:58:
72:b9:f5:5a:90:02:1e:a7:01:90:3b:2e:b9:d6:e4:04:53:bb:
97:c4:ac:07:8b:35:24:28:e6:12:26:4c:83:56:73:a0:07:08:
1c:bd:a3:b7:39:ed:5a:b0:64:02:fb:fb:35:03:02:c9:62:d0:
b7:c2:76:2e:24:05:4e:13:53:09:94:55:76:92:0b:f6:6b:c9:
03:0b:a7:54:ff:f4:76:8f:96:9c:17:13:03:bd:a1:02:3c:95:
b2:9d:fb:b4:fd:63:ea:81:e4:84:7d:65:1a:11:14:09:cf:0f:
eb:08:6a:e9:dd:53:80:9b:d3:9d:d5:34:d9:8f:8c:2d:c5:84:
f5:6c:9c:cd:fc:19:81:06:f5:f5:8f:d6:8a:f0:b9:24:41:3b:
55:0e:ed:7b:87:01:20:61:92:af:4a:f6:41:a9:aa:e4:91:7f:
58:75:4d:ad:db:d1:56:dd:92:92:fa:8d:98:0b:5b:88:87:28:
49:82:2c:97:1d:fd:00:21:1b:b7:e6:98:e2:b7:85:1a:63:a9:
d2:9b:bd:24:ce:b9:2a:1e:8b:5b:d0:1c:25:a2:d2:3f:03:d1:
9d:8f:92:1a:1e:60:65:00:29:3b:88:3a:c8:24:23:4a:79:96:
8c:79:45:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 04:13:40 2025 by rpki-client