This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
File: o5hxRib4es6-X2_QHlBwGRWqfRU.mft (raw, json)
Hash identifier: Ik/S0iUscCL2nrCTbRkr3KJXEyme3F0KO/BxzNUynek=
Subject key identifier: B5:16:8A:8E:00:51:D3:01:5F:4A:E5:74:EE:B7:08:9C:EF:CF:55:89
Authority key identifier: A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
Certificate issuer: /CN=A91827C5/serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Certificate serial: DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
Manifest number: DE
Signing time: Tue 23 Dec 2025 04:29:40 +0000
Manifest this update: Tue 23 Dec 2025 04:29:40 +0000
Manifest next update: Tue 30 Dec 2025 04:29:40 +0000
Files and hashes: 1: o5hxRib4es6-X2_QHlBwGRWqfRU.crl (hash: NQxUwv5de+XWRt1Y1OxhygpESc1F6UYBTgYw8x7hTrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222 (0xde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91827C5, serialNumber=A398714626F87ACEBE5F6FD01E50701915AA7D15
Validity
Not Before: Dec 23 04:29:40 2025 GMT
Not After : Dec 30 04:29:40 2025 GMT
Subject: CN=694a1ab4-8750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:45:62:f0:8a:9b:c3:50:95:4f:4b:5a:59:
1c:12:00:ef:ea:1c:71:85:dd:23:d5:c3:89:16:c0:
5e:c1:43:03:f1:62:fc:82:23:e9:9f:8c:d0:25:87:
7f:7b:d5:78:85:d1:c7:37:13:cc:66:6f:e3:9a:fb:
ba:32:c3:fa:f4:db:24:ae:d3:74:0b:cc:f7:36:15:
22:c1:db:09:a3:99:7b:49:ed:94:0f:c7:a9:ef:9d:
a3:2c:3c:e2:25:71:26:27:83:30:47:89:5a:06:6b:
9a:48:d9:b5:7e:b4:33:f0:89:cb:e9:2c:78:20:e5:
7b:9c:0d:f5:4a:8b:f9:d6:11:2a:87:80:8a:b5:3d:
ea:8c:04:ac:20:70:1b:9f:2f:ae:c1:e4:c0:1f:e0:
82:81:6a:cd:73:22:9b:f5:45:40:f9:3f:30:09:f9:
15:5b:3f:f2:b1:ab:f1:da:2d:58:69:66:fc:e3:6f:
a1:f0:5d:46:78:76:92:67:7b:4c:34:fd:94:79:ef:
01:ee:74:38:63:3e:db:22:18:25:48:48:e0:b9:62:
24:70:c4:7b:01:35:91:5b:19:26:23:7b:94:46:b4:
d7:ad:25:3c:8a:7e:86:d9:66:a1:7f:c8:66:5a:2f:
a1:49:35:c7:7d:2d:17:b6:5d:a6:49:71:16:3c:4e:
e1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:16:8A:8E:00:51:D3:01:5F:4A:E5:74:EE:B7:08:9C:EF:CF:55:89
X509v3 Authority Key Identifier:
keyid:A3:98:71:46:26:F8:7A:CE:BE:5F:6F:D0:1E:50:70:19:15:AA:7D:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5hxRib4es6-X2_QHlBwGRWqfRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D9AAB82C8AD911EF981C8283C4F9AE02/o5hxRib4es6-X2_QHlBwGRWqfRU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:5a:1b:ef:ed:e3:8d:1f:7a:e0:09:83:83:a6:4b:0a:6c:44:
ea:40:f2:51:67:71:fe:4e:67:58:a5:b7:e2:5f:ae:a6:47:02:
5e:a1:4d:04:8f:aa:24:d4:5b:a2:ac:6c:ff:85:7e:00:0a:f2:
bc:d2:1f:2c:45:ff:9c:6e:b1:93:2f:c0:4d:dc:7b:47:5f:8a:
65:1f:b5:80:5a:72:ec:4d:94:ab:2b:c2:dc:0e:11:4b:d7:f2:
36:57:82:18:bd:57:0a:16:fc:b9:ab:54:ac:e6:39:5c:cc:53:
79:71:04:24:5c:e9:e1:3d:7a:c5:84:fd:ae:10:23:a1:0c:5e:
d0:8e:e1:bd:87:e4:7d:83:a1:56:ab:10:27:90:24:93:18:9e:
cf:13:af:49:ad:9e:c5:07:33:29:c6:fd:5e:21:86:78:c1:a2:
db:b1:15:85:c5:2c:ff:0a:ae:ee:40:e2:d3:a8:fd:cb:d3:32:
86:a1:3e:d8:cf:18:98:52:88:5e:40:38:db:35:23:38:54:be:
e0:ca:96:6a:63:1d:5a:70:7c:35:7d:37:ec:92:5e:85:f5:58:
51:3a:20:a6:48:0c:26:03:28:64:ab:6c:67:ee:a6:8a:e2:d2:
df:aa:2b:59:3b:4b:1b:c4:8a:e2:b9:02:09:31:a4:d2:fb:4a:
55:a3:54:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI3QzUxMTAvBgNVBAUTKEEzOTg3MTQ2MjZGODdBQ0VCRTVGNkZEMDFFNTA3MDE5
MTVBQTdEMTUwHhcNMjUxMjIzMDQyOTQwWhcNMjUxMjMwMDQyOTQwWjAYMRYwFAYD
VQQDDA02OTRhMWFiNC04NzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr+xFYvCKm8NQlU9LWlkcEgDv6hxxhd0j1cOJFsBewUMD8WL8giPpn4zQJYd/
e9V4hdHHNxPMZm/jmvu6MsP69NskrtN0C8z3NhUiwdsJo5l7Se2UD8ep752jLDzi
JXEmJ4MwR4laBmuaSNm1frQz8InL6Sx4IOV7nA31Sov51hEqh4CKtT3qjASsIHAb
ny+uweTAH+CCgWrNcyKb9UVA+T8wCfkVWz/ysavx2i1YaWb842+h8F1GeHaSZ3tM
NP2Uee8B7nQ4Yz7bIhglSEjguWIkcMR7ATWRWxkmI3uURrTXrSU8in6G2Wahf8hm
Wi+hSTXHfS0Xtl2mSXEWPE7hJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUWio4A
UdMBX0rldO63CJzvz1WJMB8GA1UdIwQYMBaAFKOYcUYm+HrOvl9v0B5QcBkVqn0V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjdDNS9EOUFBQjgyQzhB
RDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVzNi1YMl9RSGxCd0dSV3Fm
UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL281aHhSaWI0ZXM2LVgyX1FIbEJ3R1JXcWZSVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjdDNS9EOUFBQjgyQzhBRDkxMUVGOTgxQzgyODNDNEY5QUUwMi9vNWh4UmliNGVz
Ni1YMl9RSGxCd0dSV3FmUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCDWhvv7eONH3rgCYODpksKbETqQPJRZ3H+TmdYpbfiX66mRwJeoU0E
j6ok1FuirGz/hX4ACvK80h8sRf+cbrGTL8BN3HtHX4plH7WAWnLsTZSrK8LcDhFL
1/I2V4IYvVcKFvy5q1Ss5jlczFN5cQQkXOnhPXrFhP2uECOhDF7QjuG9h+R9g6FW
qxAnkCSTGJ7PE69JrZ7FBzMpxv1eIYZ4waLbsRWFxSz/Cq7uQOLTqP3L0zKGoT7Y
zxiYUoheQDjbNSM4VL7gypZqYx1acHw1fTfskl6F9VhROiCmSAwmAyhkq2xn7qaK
4tLfqitZO0sbxIriuQIJMaTS+0pVo1Qu
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:59 2025 by rpki-client