This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
File: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft (raw, json)
Hash identifier: hhWNuOTFPsxOTTcHz8U1AAo1YxZ5P5wdJfpEaM7xKrU=
Subject key identifier: 85:96:39:AC:A0:06:D1:1C:A6:79:48:C4:03:8F:F5:8A:78:12:05:73
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial: 05B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
Manifest number: 058C
Signing time: Sat 20 Dec 2025 22:39:21 +0000
Manifest this update: Sat 20 Dec 2025 22:39:20 +0000
Manifest next update: Sat 27 Dec 2025 22:39:20 +0000
Files and hashes: 1: 5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl (hash: ZYocO38BppXZgfcTpzo9OVAeNvsEc3kePSGfxGCNhxU=)
2: 9CB324BA273111EF9F5B0860C4F9AE02.roa (hash: pTVmfHpB/0A0PCQmTKIL1dACfjcI9Ghchso3ovyJFjM=)
3: 2C4993AA271B11EF97731F0BC4F9AE02.roa (hash: qDUJODkwDIIJRA6eE37o52LxfEd01z/xEmopFBMRwmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1457 (0x5b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Validity
Not Before: Dec 20 22:39:20 2025 GMT
Not After : Dec 27 22:39:20 2025 GMT
Subject: CN=69472599-7a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:ef:05:16:d0:e4:2b:64:3d:2a:fe:81:a1:
fe:ac:b5:56:01:ef:7b:0c:10:f7:59:af:6b:70:8d:
b6:ee:f2:88:9a:27:21:99:78:00:78:00:86:58:fd:
81:3c:fb:31:5e:1b:fd:f9:c5:88:d6:26:cf:5a:f2:
15:13:10:f7:63:08:56:14:e3:4a:61:5c:33:72:71:
2b:e6:07:c9:16:1b:fa:62:e4:8a:84:69:86:75:32:
9b:e4:88:7e:b6:cd:e8:c7:21:56:c8:c8:c0:13:d6:
89:1f:82:be:e9:e2:a3:0f:7f:42:9f:c9:af:e3:3b:
9a:d7:f9:06:04:28:fb:01:3b:ab:c4:9e:98:0c:47:
53:85:ed:09:54:38:e5:68:ef:19:16:ae:b8:2c:8c:
65:5e:8f:51:d8:f5:64:0a:97:01:86:a6:c7:b5:37:
2f:b4:f9:2c:1c:a4:c1:af:c4:a4:b4:20:d7:de:44:
cb:d5:15:25:ff:f3:f7:74:2f:13:d0:34:6c:3a:66:
27:29:23:b8:c1:f6:d9:6f:ca:f5:b1:2d:4b:81:5a:
11:2b:5d:cb:11:07:68:e5:d9:65:a8:c4:7e:a8:fe:
8f:a1:1f:a6:d8:ea:e6:14:c5:5f:17:57:27:93:b5:
73:35:97:94:8e:74:f1:03:8c:30:5c:34:d4:04:15:
bd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:96:39:AC:A0:06:D1:1C:A6:79:48:C4:03:8F:F5:8A:78:12:05:73
X509v3 Authority Key Identifier:
keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:20:b3:cf:dd:4b:ac:d6:4c:28:e2:72:ac:12:46:70:dc:ef:
7c:a6:96:f5:ee:90:cf:e9:3d:4a:ae:65:86:bb:43:a4:52:93:
08:be:49:b7:fe:af:4f:85:a2:df:d4:67:e8:71:72:07:e8:2b:
57:e3:d5:7f:64:d2:11:37:da:63:f9:7e:2f:f7:c4:9c:ce:96:
c1:5e:b6:8f:28:4f:97:18:b8:54:b5:db:0e:fa:2c:5d:32:2b:
0e:64:62:7c:9b:3d:12:49:a7:5e:be:77:8f:db:35:e4:c4:d8:
46:ee:eb:8d:a0:57:45:63:85:99:05:5c:8a:8e:76:e4:55:8a:
ca:b6:73:11:10:4e:03:1e:13:9f:77:bd:21:b6:0e:08:bc:f0:
a0:ca:50:c3:e1:22:4e:bc:73:36:f3:99:2e:e2:de:e6:85:ef:
d0:c3:3e:11:55:d8:82:94:a9:ee:23:57:18:53:91:bd:c3:12:
40:2e:00:c9:a0:71:74:d6:52:f5:0c:b4:b9:81:3b:02:3b:c3:
d5:fe:4d:80:90:7b:4b:9d:92:6e:75:24:ec:78:3d:2c:fa:3b:
ca:71:3a:10:7a:80:fd:3c:18:ec:f3:81:35:6c:17:4a:a9:41:
78:82:4a:c6:78:a4:db:87:6e:15:c8:05:94:5c:92:30:ca:50:
30:d2:bd:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUzNjIxMTAvBgNVBAUTKEU1RTVEMTY4QTBFMTA5NkVBMUMzRjlCN0Y4RThENzU4
RUFFQTIzRjMwHhcNMjUxMjIwMjIzOTIwWhcNMjUxMjI3MjIzOTIwWjAYMRYwFAYD
VQQDDA02OTQ3MjU5OS03YTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvLbvBRbQ5CtkPSr+gaH+rLVWAe97DBD3Wa9rcI227vKImichmXgAeACGWP2B
PPsxXhv9+cWI1ibPWvIVExD3YwhWFONKYVwzcnEr5gfJFhv6YuSKhGmGdTKb5Ih+
ts3oxyFWyMjAE9aJH4K+6eKjD39Cn8mv4zua1/kGBCj7ATurxJ6YDEdThe0JVDjl
aO8ZFq64LIxlXo9R2PVkCpcBhqbHtTcvtPksHKTBr8SktCDX3kTL1RUl//P3dC8T
0DRsOmYnKSO4wfbZb8r1sS1LgVoRK13LEQdo5dllqMR+qP6PoR+m2OrmFMVfF1cn
k7VzNZeUjnTxA4wwXDTUBBW9zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWWOayg
BtEcpnlIxAOP9Yp4EgVzMB8GA1UdIwQYMBaAFOXl0Wig4QluocP5t/jo11jq6iPz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM2Mi9EOUNCRjgwQTEw
QjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENXNmh3X20zLU9qWFdPcnFJ
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVlWFJhS0RoQ1c2aHdfbTMtT2pYV09ycUlfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTM2Mi9EOUNCRjgwQTEwQjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENX
Nmh3X20zLU9qWFdPcnFJX00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRILPP3Uus1kwo4nKsEkZw3O98ppb17pDP6T1KrmWGu0OkUpMIvkm3
/q9PhaLf1GfocXIH6CtX49V/ZNIRN9pj+X4v98SczpbBXraPKE+XGLhUtdsO+ixd
MisOZGJ8mz0SSadevneP2zXkxNhG7uuNoFdFY4WZBVyKjnbkVYrKtnMREE4DHhOf
d70htg4IvPCgylDD4SJOvHM285ku4t7mhe/Qwz4RVdiClKnuI1cYU5G9wxJALgDJ
oHF01lL1DLS5gTsCO8PV/k2AkHtLnZJudSTseD0s+jvKcToQeoD9PBjs84E1bBdK
qUF4gkrGeKTbh24VyAWUXJIwylAw0r28
-----END CERTIFICATE-----
Generated at Mon Dec 22 20:46:55 2025 by rpki-client