This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
File: V5NDbSKpagYTaFEgO7clmE1wsBc.mft (raw, json)
Hash identifier: +mFw8FzEJa0bNQoy/YeSaMpVP1BwL9hHeP7uDoC/RSc=
Subject key identifier: 2D:51:B9:8C:A4:98:58:49:9B:9B:1F:99:61:C3:3D:CA:00:81:DC:77
Authority key identifier: 57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17
Certificate issuer: /CN=A9159DCD/serialNumber=5793436D22A96A06136851203BB725984D70B017
Certificate serial: 01C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
Manifest number: 01C4
Signing time: Tue 23 Dec 2025 01:58:55 +0000
Manifest this update: Tue 23 Dec 2025 01:58:55 +0000
Manifest next update: Tue 30 Dec 2025 01:58:55 +0000
Files and hashes: 1: V5NDbSKpagYTaFEgO7clmE1wsBc.crl (hash: 4Fhlq1scZJ30vPHTyJ5PTicXFHcaq9bzkeKsCkU0HIw=)
2: 29D600062C3311EEBFF69B6CC4F9AE02.roa (hash: hskv6e7Ag+5HAqH/N4O5ItTvOGPOLGR+/yJDzJO0d+k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl
rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:58:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 456 (0x1c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159DCD, serialNumber=5793436D22A96A06136851203BB725984D70B017
Validity
Not Before: Dec 23 01:58:55 2025 GMT
Not After : Dec 30 01:58:55 2025 GMT
Subject: CN=6949f75f-b0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:d7:53:ff:b0:1f:80:cc:0d:ba:da:c5:86:
d4:e6:ce:8d:08:8a:df:5e:e4:10:9a:57:32:9d:16:
df:67:4d:52:c8:28:ae:3d:25:8d:e1:70:35:a7:22:
1e:0f:71:db:86:50:2b:99:ef:25:ce:c9:51:3e:e1:
bc:1f:fc:75:bf:a3:58:e4:f4:b8:e3:3b:21:3f:81:
c9:7b:31:72:ff:32:1b:88:53:dc:c6:32:b8:00:c0:
8f:7f:a2:d0:24:88:5c:60:3e:dc:fc:83:aa:b1:64:
0f:80:01:6e:ba:80:5d:45:33:83:9d:5a:c8:b0:5d:
ff:5e:9d:55:12:16:3f:5d:ee:d4:50:a1:fe:12:ca:
0a:59:29:ef:70:05:f3:1f:ee:8d:86:8f:82:a6:62:
45:cd:17:ed:20:ba:19:98:5e:78:b6:55:6f:c4:a2:
44:5f:e8:27:bd:fd:d2:7b:f6:81:c5:c3:48:f6:06:
6d:aa:78:f9:67:37:0c:4f:c2:c3:d9:25:27:39:fb:
a6:63:cb:df:51:c0:6d:3e:5b:02:28:1c:7f:85:d1:
fe:1e:19:9f:b8:7e:bf:ce:c8:68:ce:3a:a7:0e:6c:
e8:11:5b:9d:ed:3f:be:7c:74:d4:ef:40:87:be:c6:
f1:bd:e5:12:b7:ac:99:a1:b5:68:e6:bd:e9:5f:4f:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:51:B9:8C:A4:98:58:49:9B:9B:1F:99:61:C3:3D:CA:00:81:DC:77
X509v3 Authority Key Identifier:
keyid:57:93:43:6D:22:A9:6A:06:13:68:51:20:3B:B7:25:98:4D:70:B0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V5NDbSKpagYTaFEgO7clmE1wsBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159DCD/A00D70062C2411EEAB978F0FC4F9AE02/V5NDbSKpagYTaFEgO7clmE1wsBc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:1d:c8:f3:a7:18:de:a4:3a:84:cc:c8:2f:d1:f6:ca:35:9a:
cb:f8:42:cb:30:5b:aa:a9:2f:7f:af:b0:72:1d:57:5a:f1:88:
e4:cc:39:c5:a5:ef:69:39:0c:7b:e0:93:67:75:de:4e:43:db:
5c:fe:cc:5c:4f:2a:c3:9a:d2:18:a1:59:15:b5:3f:85:48:9d:
61:7b:3b:9f:2b:40:4f:cd:94:60:82:c0:0b:37:fe:60:3a:5b:
3a:d4:82:89:ee:ca:55:ef:d4:d8:87:5d:ba:33:d6:2b:d4:af:
29:0b:d5:93:94:d3:f8:6f:c5:a2:21:9d:26:83:2b:4e:fe:db:
de:31:ec:45:f7:75:d9:33:a2:04:35:9c:ef:83:59:0f:32:67:
6b:8f:3b:af:7b:cb:ec:5e:9a:9e:ab:11:2a:74:a9:71:3b:fa:
c1:72:44:a2:c0:0f:dd:67:32:a5:32:eb:00:cd:fd:9f:64:3f:
35:87:04:4a:c8:ab:78:73:28:9c:46:91:e4:84:c9:f0:15:bd:
7c:75:e9:32:90:d2:0c:76:46:72:2b:64:94:fe:ae:b3:da:67:
70:a1:d8:80:39:58:5b:16:b6:c1:11:21:5e:32:54:a9:af:74:
8e:2f:0d:18:74:03:b9:b4:7a:e7:00:d4:09:0b:de:8e:65:b8:
1a:ef:dd:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTlEQ0QxMTAvBgNVBAUTKDU3OTM0MzZEMjJBOTZBMDYxMzY4NTEyMDNCQjcyNTk4
NEQ3MEIwMTcwHhcNMjUxMjIzMDE1ODU1WhcNMjUxMjMwMDE1ODU1WjAYMRYwFAYD
VQQDDA02OTQ5Zjc1Zi1iMGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy1nXU/+wH4DMDbraxYbU5s6NCIrfXuQQmlcynRbfZ01SyCiuPSWN4XA1pyIe
D3HbhlArme8lzslRPuG8H/x1v6NY5PS44zshP4HJezFy/zIbiFPcxjK4AMCPf6LQ
JIhcYD7c/IOqsWQPgAFuuoBdRTODnVrIsF3/Xp1VEhY/Xe7UUKH+EsoKWSnvcAXz
H+6Nho+CpmJFzRftILoZmF54tlVvxKJEX+gnvf3Se/aBxcNI9gZtqnj5ZzcMT8LD
2SUnOfumY8vfUcBtPlsCKBx/hdH+HhmfuH6/zshozjqnDmzoEVud7T++fHTU70CH
vsbxveUSt6yZobVo5r3pX0+YDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1RuYyk
mFhJm5sfmWHDPcoAgdx3MB8GA1UdIwQYMBaAFFeTQ20iqWoGE2hRIDu3JZhNcLAX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OURDRC9BMDBENzAwNjJD
MjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFnWVRhRkVnTzdjbG1FMXdz
QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Y1TkRiU0twYWdZVGFGRWdPN2NsbUUxd3NCYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OURDRC9BMDBENzAwNjJDMjQxMUVFQUI5NzhGMEZDNEY5QUUwMi9WNU5EYlNLcGFn
WVRhRkVnTzdjbG1FMXdzQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgHcjzpxjepDqEzMgv0fbKNZrL+ELLMFuqqS9/r7ByHVda8YjkzDnF
pe9pOQx74JNndd5OQ9tc/sxcTyrDmtIYoVkVtT+FSJ1hezufK0BPzZRggsALN/5g
Ols61IKJ7spV79TYh126M9Yr1K8pC9WTlNP4b8WiIZ0mgytO/tveMexF93XZM6IE
NZzvg1kPMmdrjzuve8vsXpqeqxEqdKlxO/rBckSiwA/dZzKlMusAzf2fZD81hwRK
yKt4cyicRpHkhMnwFb18dekykNIMdkZyK2SU/q6z2mdwodiAOVhbFrbBESFeMlSp
r3SOLw0YdAO5tHrnANQJC96OZbga790Y
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:07:41 2025 by rpki-client