This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
File: 5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json)
Hash identifier: tmlmg6gNzGlQNuyjzQKijHW+sYWwInnd9OTjN1tr01M=
Subject key identifier: AA:2D:D8:9C:F9:BA:9C:78:9A:9E:FC:32:E0:DF:5E:F3:87:3B:80:8B
Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Certificate serial: 0414
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
Manifest number: 03F4
Signing time: Mon 22 Dec 2025 23:37:11 +0000
Manifest this update: Mon 22 Dec 2025 23:37:11 +0000
Manifest next update: Mon 29 Dec 2025 23:37:11 +0000
Files and hashes: 1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: no+4WZ0yRRd1/Z6oR1dGWbVTBNSWZYGHSf5aJysl380=)
2: C8165660822F11EEABA7D533C4F9AE02.roa (hash: DSv2nGwTSEj42RfPbSo3xkl2KSy/0hQM67/1VYPFqfc=)
3: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: Tmlv9BK30imfTfrshHMTQPIJahQY5Ioivr1iDa4bJ+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB
Validity
Not Before: Dec 22 23:37:11 2025 GMT
Not After : Dec 29 23:37:11 2025 GMT
Subject: CN=6949d627-be66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:cb:0a:b9:be:78:5e:a9:df:64:9a:e2:84:
d0:76:c2:99:ef:cf:ef:a5:3c:a6:e1:8d:bd:02:fb:
12:78:1b:99:81:4d:d5:c9:65:44:a1:2e:2f:81:4e:
22:55:24:f5:1c:dd:b8:01:8b:c8:41:04:4b:81:d0:
a8:4c:57:69:e2:01:1a:e2:da:a6:7d:fc:5c:a3:e4:
33:26:5e:05:0c:ba:95:76:17:89:03:5c:bd:51:a3:
67:a9:99:b9:86:04:4e:06:9c:74:dd:d7:c7:eb:28:
82:f1:fe:32:e2:ca:1f:87:9c:ef:c5:bb:c3:75:47:
88:33:b2:c0:0d:3b:18:6d:4f:5b:a6:fd:ae:84:9e:
29:44:d7:58:13:ad:5a:c4:b1:41:12:d5:ce:be:dd:
8e:12:70:3a:96:56:e7:3a:b6:17:31:09:3e:c4:9f:
7c:2c:26:59:36:17:a5:88:51:ba:ee:b2:d0:4e:98:
8a:fe:88:75:e9:09:41:84:b6:c6:98:0b:2e:a7:4e:
e5:ba:1a:4e:2a:90:72:8e:9e:7b:aa:4a:74:f5:e8:
5b:a4:4a:55:6f:21:ed:f4:33:d4:0e:84:68:25:6f:
bd:47:54:8a:ce:f9:b9:65:a7:d5:65:e8:11:bd:cc:
b6:39:54:16:c1:91:18:2a:d8:a4:92:af:b4:78:04:
13:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2D:D8:9C:F9:BA:9C:78:9A:9E:FC:32:E0:DF:5E:F3:87:3B:80:8B
X509v3 Authority Key Identifier:
keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:a9:fb:b2:ff:98:a3:9b:31:6a:f3:3e:e9:21:90:17:6a:73:
7a:40:35:51:d3:19:a3:9d:ed:25:ce:18:70:4d:07:81:42:df:
6c:ae:4a:5c:62:32:ef:4a:02:3f:c2:78:ac:92:93:83:e0:56:
a7:6e:a7:26:66:a5:80:2b:9b:43:fb:9f:c5:14:19:8c:15:98:
bf:5f:60:ec:99:7c:22:45:2e:e7:45:fd:0d:8c:d6:f3:80:61:
6b:c6:b0:33:fc:73:79:af:40:4d:3d:73:96:53:24:3d:ce:a1:
e0:29:c0:73:7c:f7:16:ab:1d:7f:0f:09:ff:84:64:13:1b:d7:
d5:3a:5e:22:11:93:d0:c8:e8:9c:68:80:e5:ed:41:bf:10:ff:
6e:52:b7:df:e9:d1:5f:19:79:46:31:6a:00:7f:a0:fb:79:6d:
5e:4c:a0:36:00:a1:29:63:81:ee:dd:ec:83:1d:cb:fc:c7:02:
3c:ff:a1:8b:de:e6:20:80:5a:ce:25:c7:dd:c4:07:09:7d:51:
47:4b:2b:5a:75:6f:a8:d2:39:fc:c5:92:31:95:0b:7a:ba:fc:
21:d5:75:60:fe:83:e5:e3:df:52:c7:62:23:3b:3a:79:d5:da:
d3:88:fb:e1:bb:14:1b:77:57:2f:47:6a:9c:4e:15:6c:04:f7:
99:68:60:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:27 2025 by rpki-client