This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
File: 5Ux-FlPQE0JCIsO5NoohO6URXOM.mft (raw, json)
Hash identifier: g8jp5uiZIk7TxqSP7Ej0GHQejt7B4c6Q5db4mJrV3P8=
Subject key identifier: 6C:83:23:09:73:FD:41:1A:FD:38:5E:A1:7C:D6:14:67:88:8D:37:89
Authority key identifier: E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
Certificate issuer: /CN=A91877A6/serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Certificate serial: 58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
Manifest number: 57
Signing time: Tue 23 Dec 2025 06:02:52 +0000
Manifest this update: Tue 23 Dec 2025 06:02:51 +0000
Manifest next update: Tue 30 Dec 2025 06:02:51 +0000
Files and hashes: 1: 5Ux-FlPQE0JCIsO5NoohO6URXOM.crl (hash: JrdWmLnSy9+A0JjqisdcxzleXszuW8o1/XOtAZnVono=)
2: 49FB21A25C8011F0ABC6993DC4F9AE02.roa (hash: DMOnnBq0pchJxrIKNQnVPVkuYus9e6uopvVvEwbY84Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl
rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91877A6, serialNumber=E54C7E1653D013424222C3B9368A213BA5115CE3
Validity
Not Before: Dec 23 06:02:51 2025 GMT
Not After : Dec 30 06:02:51 2025 GMT
Subject: CN=694a308c-875c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:d2:be:01:20:0e:a7:98:3f:2e:41:81:47:
f1:d7:dd:df:ef:22:09:ce:7a:54:54:d2:03:50:fb:
b5:83:61:f2:b8:ad:71:5e:56:a9:09:cd:32:20:b4:
e6:37:63:15:b7:47:0b:a2:a5:fb:02:07:50:de:b2:
a5:e0:34:1f:7b:04:03:96:e8:19:9e:b1:2b:22:57:
12:04:45:6b:48:fa:5e:e7:7a:ea:02:2b:a2:27:d3:
12:f3:bf:1c:9e:78:07:43:c0:b1:1c:b3:29:7f:3b:
e9:43:87:cb:78:3a:b4:09:4b:a6:c3:ac:04:3f:e8:
6e:05:85:e8:a7:7d:57:3a:dc:06:d6:40:ac:c8:10:
88:20:62:22:05:00:49:23:ca:b5:a9:94:b9:3f:6f:
23:37:56:6c:5e:2d:83:9e:28:6e:19:c0:a8:65:73:
a2:e0:4f:f8:43:c4:18:ff:92:ee:ab:b4:f3:eb:64:
86:40:77:02:a7:29:21:a2:21:1e:1c:28:35:f3:37:
37:04:2f:78:a0:d1:ec:22:c2:5a:40:de:d8:e1:48:
a9:9f:27:bd:4b:64:38:46:3f:3d:9c:ad:d0:e1:60:
87:bc:e6:d6:84:51:9a:03:f8:29:df:29:e0:b7:bc:
d5:97:25:88:b6:f9:5f:95:c6:8f:b7:72:c5:68:7a:
35:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:83:23:09:73:FD:41:1A:FD:38:5E:A1:7C:D6:14:67:88:8D:37:89
X509v3 Authority Key Identifier:
keyid:E5:4C:7E:16:53:D0:13:42:42:22:C3:B9:36:8A:21:3B:A5:11:5C:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ux-FlPQE0JCIsO5NoohO6URXOM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/C92C39AE5C7E11F0A5C36036C4F9AE02/5Ux-FlPQE0JCIsO5NoohO6URXOM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:be:76:7f:e8:66:c7:df:fd:3e:1d:d7:3b:53:14:77:e9:8c:
85:35:37:2b:aa:a7:3d:0d:02:3c:c7:eb:39:b5:ca:16:fa:29:
46:b2:48:a5:cf:5c:92:f0:e5:4c:45:58:68:71:c4:43:96:a7:
73:74:92:6e:01:87:aa:8e:5c:8b:b8:47:40:17:e4:7f:36:f0:
f6:73:41:df:c0:63:b0:03:e2:57:ac:53:b3:19:83:80:fd:d5:
b4:e9:d7:6a:53:d1:b5:e8:09:1c:6e:84:09:0d:83:74:f9:93:
2f:10:34:84:ef:9d:2f:b1:e2:ab:a9:64:ae:8a:eb:91:1c:aa:
f7:1f:4b:96:c6:d1:9c:ae:c3:9f:c3:8d:0d:36:68:f9:21:6b:
c0:6b:0c:7e:52:f6:de:62:7a:42:39:7d:64:aa:82:ca:de:eb:
05:a2:c1:9a:0b:d7:d7:53:09:8b:f4:17:bc:c7:5f:fb:c2:e0:
57:f9:53:a0:ee:e9:b1:b7:5d:cc:06:6c:94:af:50:9b:ed:8a:
91:b8:64:8d:1b:06:81:ed:9f:f4:df:c7:10:49:3d:a3:e9:f0:
b3:82:f7:89:d4:01:e8:aa:0e:ba:b9:e0:b5:88:84:00:e7:c1:
04:02:1f:13:1f:17:e1:e3:86:18:f5:7d:06:67:b0:0d:2a:94:
55:9d:ae:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:49 2025 by rpki-client