This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
File: 54D6N3e4HUz2o1QG6lz0vk9l6fo.mft (raw, json)
Hash identifier: su1J+/qmW+uBmExXhS9sMgakwjdYyJcbANyFH+4/UT0=
Subject key identifier: 95:85:EA:5F:AD:9E:08:7F:9C:E6:86:86:9D:EF:3B:69:78:24:73:AA
Authority key identifier: E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA
Certificate issuer: /CN=A917530D/serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
Manifest number: 016B
Signing time: Tue 23 Dec 2025 02:57:37 +0000
Manifest this update: Tue 23 Dec 2025 02:57:37 +0000
Manifest next update: Tue 30 Dec 2025 02:57:37 +0000
Files and hashes: 1: 54D6N3e4HUz2o1QG6lz0vk9l6fo.crl (hash: Pl8u6fyxv2Y7GSHv85ZoU6GGOlPCfaApuqHd4d1rm9s=)
2: 1032223CBC2B11EE9E04192FC4F9AE02.roa (hash: KaLq/qLC36FBeVUH4PJULMTUIMWcwgut4EvM5q8D+vE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl
rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917530D, serialNumber=E780FA3777B81D4CF6A35406EA5CF4BE4F65E9FA
Validity
Not Before: Dec 23 02:57:37 2025 GMT
Not After : Dec 30 02:57:37 2025 GMT
Subject: CN=694a0521-16bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:97:3a:1b:ca:a6:c9:0c:23:5f:42:a3:f2:
fa:d9:16:80:68:34:a3:a6:a5:69:9b:44:a2:02:05:
de:2d:d7:f3:f6:54:75:bf:47:03:90:17:1f:5c:3f:
06:df:9d:d7:76:8d:72:f1:af:3e:1b:1b:c8:e2:c2:
4e:87:c2:64:6d:14:81:17:98:f7:8c:3e:74:51:00:
ab:2b:04:88:67:70:ca:52:4c:7e:84:aa:aa:c9:72:
e8:ae:9f:fe:09:1c:3d:ce:64:45:8e:75:92:e3:3f:
e5:b7:ff:68:d9:ba:83:9d:bc:6a:4c:4c:0d:19:45:
93:1c:cc:0d:86:30:f9:ac:0d:f4:1e:5d:41:d1:df:
00:62:c6:fc:72:26:a7:c1:ac:e6:bf:06:52:8e:40:
18:e6:07:85:f0:1c:23:fe:f0:9f:71:1f:2f:ad:0b:
54:b1:74:0c:27:4e:d6:fe:63:28:3f:9a:3e:95:24:
fe:d3:15:0b:39:82:f9:db:2f:45:e4:a1:4c:a5:f7:
61:46:36:53:39:de:70:6c:08:66:ac:c8:2d:6a:a9:
b2:71:6b:5b:2b:38:76:74:00:09:91:a2:21:05:f6:
53:b3:1b:5b:b3:52:1a:e2:68:9d:9c:bb:af:37:bc:
62:70:99:a7:ca:53:d3:c4:e6:f9:da:ab:60:46:45:
63:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:85:EA:5F:AD:9E:08:7F:9C:E6:86:86:9D:EF:3B:69:78:24:73:AA
X509v3 Authority Key Identifier:
keyid:E7:80:FA:37:77:B8:1D:4C:F6:A3:54:06:EA:5C:F4:BE:4F:65:E9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/54D6N3e4HUz2o1QG6lz0vk9l6fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/E64001F4B64B11EE91463760C4F9AE02/54D6N3e4HUz2o1QG6lz0vk9l6fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2e:d4:91:a9:7a:14:3b:18:1e:ae:2b:1c:10:27:98:86:c0:
81:4c:08:11:4f:bb:eb:21:3b:db:3f:7b:48:29:66:ba:66:86:
4e:f6:e1:17:e9:23:99:e0:5a:f2:89:30:f7:ee:e8:4a:94:ff:
22:54:43:e3:01:32:9e:69:a0:ad:6a:33:fc:e3:08:91:e8:18:
da:76:3f:c8:6e:aa:15:18:ee:dc:9f:8e:00:1a:bb:7a:b4:32:
c1:04:72:5d:d7:a5:4e:8b:74:a1:24:a8:37:32:ce:3d:17:27:
d0:d9:37:14:9d:8d:bb:f0:09:02:c6:c1:7b:47:7e:16:62:3a:
06:d5:39:c0:f3:66:3e:0f:a3:49:eb:17:14:b0:8c:0d:61:5a:
ce:6b:62:a3:43:5e:65:19:d8:a5:6e:7c:f9:6d:81:9e:c3:82:
a3:b6:79:62:75:fb:6b:9c:9b:b1:b7:bf:2a:96:fc:82:51:e0:
56:98:be:c2:71:6a:a0:15:57:94:0c:4f:50:26:00:7a:83:b0:
0e:11:92:87:3a:50:3c:7a:2e:83:55:1f:e9:70:47:cd:f2:20:
94:d6:5c:f8:98:ea:b6:de:bf:8d:62:e1:6a:04:dc:34:f7:76:
01:fd:a1:34:57:e2:1c:41:da:eb:32:df:f6:d4:8f:48:c0:ef:
0f:84:81:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:23 2025 by rpki-client