This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
File: 5K6ANyqGeYe7Kgq74RCrgENw1eM.mft (raw, json)
Hash identifier: GtGeVLLKPK/qjG+HfsZJB5ShD6MGyqHxFfHm2ZuSKE8=
Subject key identifier: F0:22:29:70:54:B5:B0:D4:38:31:3D:ED:86:13:B9:9A:E1:EC:69:B8
Authority key identifier: E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
Certificate issuer: /CN=A917452D/serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Certificate serial: 0379
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
Manifest number: 0300
Signing time: Thu 04 Dec 2025 23:53:19 +0000
Manifest this update: Thu 04 Dec 2025 23:53:18 +0000
Manifest next update: Thu 11 Dec 2025 23:53:18 +0000
Files and hashes: 1: 5K6ANyqGeYe7Kgq74RCrgENw1eM.crl (hash: 3IKy68TcZWVN2rkxb8TE5zILasduGwseG0sxpoCjxEU=)
2: 10B04C9853D411EFB53AD61CC4F9AE02.roa (hash: re09eFLUacOajfT7PHmH3pKESg4yI7L+qf6XvS9N5cU=)
3: AA71F05C60EF11EF8D645D72C4F9AE02.roa (hash: ZekLkbwk4y5kRd+4yPe1K3c5jSN2HJp6NjlpAMKckXc=)
4: 7D96BB10A96B11F09DD07C12C4F9AE02.roa (hash: syRpK/Vpl0n5sY64MJgrXCfHJlwZ86GxAr0NE5nmtYM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889 (0x379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917452D, serialNumber=E4AE80372A867987BB2A0ABBE110AB804370D5E3
Validity
Not Before: Dec 4 23:53:18 2025 GMT
Not After : Dec 11 23:53:18 2025 GMT
Subject: CN=69321eef-fa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:52:22:d1:fb:c1:36:ac:4c:03:53:6d:83:
09:4b:95:35:54:36:12:d0:2a:e9:12:60:dd:6d:ad:
eb:48:c2:a3:e4:5a:a7:03:06:09:63:31:63:b9:97:
88:0a:21:53:09:1d:d0:89:0d:af:4d:87:a8:22:c8:
7b:4d:f7:ae:c1:07:2f:ce:85:14:d0:70:9d:66:c8:
ac:1f:f1:51:0f:4a:31:75:16:a1:51:a1:64:0e:00:
b7:2d:94:71:81:6f:35:b5:20:ef:ed:f8:8d:31:e0:
1d:2f:af:f8:04:52:c7:be:d5:df:6a:2b:02:2e:96:
28:8e:5d:01:6d:76:24:7a:8a:76:66:c1:2c:c9:49:
ff:aa:49:a2:53:03:e1:aa:cc:8f:cb:22:00:b1:e1:
62:07:8b:67:20:07:27:b6:20:e1:24:1e:59:29:d3:
e5:0c:40:be:c0:0d:1d:b8:7e:35:8e:0a:5d:ef:4f:
8d:f3:9c:86:d5:69:7a:ea:81:8b:ce:5e:36:2d:4d:
85:ab:48:4c:5f:bd:65:4f:f3:b6:6f:95:92:cb:24:
ff:7b:12:7a:50:a1:85:5a:f1:bf:6b:d9:fd:58:38:
b6:6c:10:e4:50:a2:38:70:f8:2b:98:f1:6f:b4:b7:
9a:91:9f:71:59:55:e7:0b:65:2e:b4:c0:6d:6f:4b:
96:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:22:29:70:54:B5:B0:D4:38:31:3D:ED:86:13:B9:9A:E1:EC:69:B8
X509v3 Authority Key Identifier:
keyid:E4:AE:80:37:2A:86:79:87:BB:2A:0A:BB:E1:10:AB:80:43:70:D5:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5K6ANyqGeYe7Kgq74RCrgENw1eM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917452D/AA42171E276811ED9A221730C4F9AE02/5K6ANyqGeYe7Kgq74RCrgENw1eM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:84:9c:84:90:5f:17:dc:20:e3:34:ef:f5:0e:9b:d5:13:47:
0f:ac:0b:3a:8c:c3:59:08:54:a5:a3:9a:f1:69:ef:0f:7d:47:
64:81:3c:85:18:05:5b:d8:2b:98:91:75:f5:b1:7f:51:88:d7:
20:a8:f1:26:84:72:a7:7d:a6:ea:2d:62:81:f0:2f:85:0c:ee:
24:3d:a3:fc:a0:6d:8b:48:01:7f:10:2a:dc:61:60:df:93:9c:
38:a5:16:3b:6f:8b:97:da:c4:b7:0a:6a:aa:1f:64:4a:d5:68:
56:a0:75:ac:ec:50:83:c0:cb:93:ed:4e:45:dd:e0:52:d0:0e:
2c:8b:7c:e9:0c:50:fb:76:4f:bb:6b:86:17:51:55:dd:b5:bb:
cc:ba:70:e9:3c:b5:18:2e:dc:04:0f:26:e1:4c:1c:a9:a7:23:
82:80:96:55:b0:f9:b7:b8:b4:10:94:cf:08:80:60:e2:a6:d5:
4a:c3:a1:f5:b2:0d:e6:60:13:08:01:5b:6b:12:f6:80:0f:6f:
a2:12:8c:ce:40:42:56:0a:b2:60:09:74:c2:de:c7:d5:c6:17:
de:60:f0:83:78:92:de:64:8d:81:99:7f:1a:53:45:28:7b:5a:
20:d8:ae:72:3b:f7:3f:ac:c1:a3:93:75:74:39:4d:aa:22:67:
cd:34:bb:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQ1MkQxMTAvBgNVBAUTKEU0QUU4MDM3MkE4Njc5ODdCQjJBMEFCQkUxMTBBQjgw
NDM3MEQ1RTMwHhcNMjUxMjA0MjM1MzE4WhcNMjUxMjExMjM1MzE4WjAYMRYwFAYD
VQQDEw02OTMyMWVlZi1mYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0H9SItH7wTasTANTbYMJS5U1VDYS0CrpEmDdba3rSMKj5FqnAwYJYzFjuZeI
CiFTCR3QiQ2vTYeoIsh7TfeuwQcvzoUU0HCdZsisH/FRD0oxdRahUaFkDgC3LZRx
gW81tSDv7fiNMeAdL6/4BFLHvtXfaisCLpYojl0BbXYkeop2ZsEsyUn/qkmiUwPh
qsyPyyIAseFiB4tnIAcntiDhJB5ZKdPlDEC+wA0duH41jgpd70+N85yG1Wl66oGL
zl42LU2Fq0hMX71lT/O2b5WSyyT/exJ6UKGFWvG/a9n9WDi2bBDkUKI4cPgrmPFv
tLeakZ9xWVXnC2UutMBtb0uWCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAiKXBU
tbDUODE97YYTuZrh7Gm4MB8GA1UdIwQYMBaAFOSugDcqhnmHuyoKu+EQq4BDcNXj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDUyRC9BQTQyMTcxRTI3
NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZZTdLZ3E3NFJDcmdFTncx
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVLNkFOeXFHZVllN0tncTc0UkNyZ0VOdzFlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDUyRC9BQTQyMTcxRTI3NjgxMUVEOUEyMjE3MzBDNEY5QUUwMi81SzZBTnlxR2VZ
ZTdLZ3E3NFJDcmdFTncxZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2hJyEkF8X3CDjNO/1DpvVE0cPrAs6jMNZCFSlo5rxae8PfUdkgTyF
GAVb2CuYkXX1sX9RiNcgqPEmhHKnfabqLWKB8C+FDO4kPaP8oG2LSAF/ECrcYWDf
k5w4pRY7b4uX2sS3CmqqH2RK1WhWoHWs7FCDwMuT7U5F3eBS0A4si3zpDFD7dk+7
a4YXUVXdtbvMunDpPLUYLtwEDybhTByppyOCgJZVsPm3uLQQlM8IgGDiptVKw6H1
sg3mYBMIAVtrEvaAD2+iEozOQEJWCrJgCXTC3sfVxhfeYPCDeJLeZI2BmX8aU0Uo
e1og2K5yO/c/rMGjk3V0OU2qImfNNLtU
-----END CERTIFICATE-----
Generated at Fri Dec 5 23:06:09 2025 by rpki-client