This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
File: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json)
Hash identifier: pxuVtqv76C2z9X6QtuaLlCAMTRKrlE6MGOqseUufxc0=
Subject key identifier: 7F:AE:A3:8E:CD:1F:E9:6D:88:99:15:71:73:85:A8:A6:D7:AB:0C:C7
Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
Certificate issuer: /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Certificate serial: 02F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
Manifest number: 02EF
Signing time: Sun 21 Dec 2025 00:28:11 +0000
Manifest this update: Sun 21 Dec 2025 00:28:11 +0000
Manifest next update: Sun 28 Dec 2025 00:28:11 +0000
Files and hashes: 1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: yp8CEZu/kXJPRfR7Lzt6hZPWanwynpZxCFrYZgu2vrk=)
2: E757164C074511EDB229157DC4F9AE02.roa (hash: onRdgGkpkgbRrilTwhd//fNz2yNBz6ru8beWXJE4ohY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 00:28:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755 (0x2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Validity
Not Before: Dec 21 00:28:11 2025 GMT
Not After : Dec 28 00:28:11 2025 GMT
Subject: CN=69473f1b-76b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:f7:65:2a:e5:df:f4:f3:25:d9:30:6a:2d:
a9:d4:f9:1f:5b:0b:47:fe:d8:d5:40:5a:b2:2e:7e:
3b:69:8d:e8:7a:bb:29:40:68:7d:eb:13:c5:e8:ec:
ff:4c:e0:53:61:0d:ec:2a:cb:28:91:aa:75:37:90:
cf:f4:53:28:4e:dc:52:df:ea:7b:c0:17:f2:24:3e:
82:fe:7d:6b:91:71:73:a1:dd:37:05:6d:62:a7:82:
5d:12:07:58:6d:2c:6c:f0:75:88:95:f6:58:0a:fe:
d9:cd:aa:dd:d4:c0:d3:d2:a1:01:57:df:7d:52:d5:
f3:33:03:34:c2:f4:ef:1c:3f:6b:80:2f:36:b3:68:
16:f5:11:6a:c3:72:1b:ce:c6:27:f3:e6:c8:7b:f8:
2b:55:58:a3:39:e7:60:b4:44:01:ce:9b:fe:c8:75:
50:26:0f:1e:2d:a9:82:5c:83:39:5e:f8:1a:b1:85:
ab:43:36:43:9d:6a:54:36:06:61:fe:e3:3b:e3:6f:
a1:15:13:84:a7:75:1a:82:1d:dd:e4:66:e4:e6:8f:
a2:ac:1e:40:89:87:13:35:44:8d:b7:3a:50:23:3a:
2d:a9:bc:b6:d9:65:09:22:27:00:ef:13:ee:d2:ea:
b5:46:e6:86:7f:44:45:70:d6:30:da:3f:02:85:95:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:A3:8E:CD:1F:E9:6D:88:99:15:71:73:85:A8:A6:D7:AB:0C:C7
X509v3 Authority Key Identifier:
keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:3b:75:b5:b4:e2:ec:5b:65:e7:35:8b:0c:a2:38:f4:84:23:
2e:8f:80:5f:ed:26:5d:9b:9c:7b:5c:18:2a:bf:3e:38:cf:a8:
18:52:1d:6f:bc:78:6a:53:c8:b3:66:b3:95:b9:aa:e4:aa:94:
eb:30:91:51:9f:09:52:95:3c:a1:27:0c:02:64:4a:d2:48:15:
95:7a:e2:d8:22:fa:0f:a0:6b:13:c3:1c:83:a7:fe:7c:8d:09:
60:a6:83:25:18:92:b0:37:2c:16:d2:9b:14:90:c9:71:0e:b2:
87:e0:7f:b2:f3:f8:c6:2a:a5:76:54:71:b8:5c:f3:32:39:b3:
85:3c:f2:9a:62:0b:86:ee:0b:78:5b:21:c4:de:61:ba:5f:a1:
45:b7:f5:2a:83:0c:73:fa:a6:a3:26:c4:12:8f:63:84:85:3a:
e2:52:cb:07:56:c3:7a:07:f9:ae:c4:6d:ca:d8:d7:51:7b:fc:
b3:24:39:53:3c:c3:1d:81:fa:4e:68:33:28:1c:af:86:1a:a0:
41:6c:3c:58:2d:88:5a:d5:2a:b6:51:4b:3f:47:85:6d:48:ea:
1e:6f:07:c5:a6:a7:d3:8a:28:bb:19:d4:93:d0:c7:40:84:1d:
c6:ca:07:8a:20:91:75:e8:e4:e7:31:70:89:1b:7e:3f:41:13:
de:98:25:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 21:33:02 2025 by rpki-client