This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
File: Klc5bc5w61bAc94adgtipyKwR44.mft (raw, json)
Hash identifier: 0S3ZAfVWOqrvmMSu4kR+Eyq8KtCoh6BQbHaIE+8psHk=
Subject key identifier: 8E:EC:6C:0B:DA:4E:34:28:3A:4A:63:B8:36:21:BA:95:6E:95:7A:0E
Authority key identifier: 2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
Certificate issuer: /CN=A9193B94/serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Certificate serial: B7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
Manifest number: B5
Signing time: Wed 03 Dec 2025 04:24:57 +0000
Manifest this update: Wed 03 Dec 2025 04:24:56 +0000
Manifest next update: Wed 10 Dec 2025 04:24:56 +0000
Files and hashes: 1: Klc5bc5w61bAc94adgtipyKwR44.crl (hash: PHWuksGYzuuAfhjcvqKabhp9eQdZSpsfBpXn3qeNj0Y=)
2: 329C17E6BCDA11EFA2D81814C4F9AE02.roa (hash: jqm9AvgV4FxQG5X3y3xKe8muOycM02nLSK2i0VaGmmM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 04:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183 (0xb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9193B94, serialNumber=2A57396DCE70EB56C073DE1A760B62A722B0478E
Validity
Not Before: Dec 3 04:24:56 2025 GMT
Not After : Dec 10 04:24:56 2025 GMT
Subject: CN=692fbb98-92af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:e2:55:89:45:c8:5e:2f:b9:e1:0d:4e:01:
3e:40:88:6f:24:e6:a5:7f:84:13:e9:47:42:16:dc:
43:1a:43:73:3b:7e:4e:df:86:e0:a9:95:5c:f6:e0:
97:19:ea:f1:8c:7f:ee:46:ea:b4:bb:29:ec:a8:9e:
20:a6:f5:41:98:d0:09:5a:7d:af:db:e4:3d:56:cd:
7b:54:31:3f:87:f8:af:e9:7a:c9:52:95:ef:dc:83:
32:55:a2:3a:b7:72:43:9d:c6:df:35:8a:76:69:9b:
1e:dc:8e:67:7c:e3:0c:8b:53:d2:55:0c:2e:f0:5a:
e5:40:89:3a:20:6e:04:a3:05:9a:58:54:9b:4a:6c:
db:64:de:c6:a8:d2:22:cb:8f:11:be:57:69:b6:6d:
66:ef:80:4f:5a:2e:15:db:e0:0f:92:ae:05:f8:00:
7e:cd:36:0b:cd:20:cc:49:95:ee:ed:95:25:19:b9:
ef:33:10:53:89:cd:38:87:a6:27:6f:61:51:c3:b9:
1b:0d:7b:89:46:4f:ca:a2:a8:e5:d7:e6:ae:ca:22:
68:50:68:78:e4:ec:bc:c2:02:39:c8:91:6e:ed:4d:
65:f8:f3:f3:f2:59:27:6e:63:75:c4:7f:fc:1c:6c:
75:01:3b:7f:6a:de:7a:15:0e:d7:d1:2f:4f:ed:8a:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EC:6C:0B:DA:4E:34:28:3A:4A:63:B8:36:21:BA:95:6E:95:7A:0E
X509v3 Authority Key Identifier:
keyid:2A:57:39:6D:CE:70:EB:56:C0:73:DE:1A:76:0B:62:A7:22:B0:47:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klc5bc5w61bAc94adgtipyKwR44.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B94/AF41BD10BCD911EF92AB3313C4F9AE02/Klc5bc5w61bAc94adgtipyKwR44.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:6e:1f:af:4f:cc:be:77:49:3b:ee:cc:0e:d7:66:9d:c4:0e:
9e:eb:ee:78:e4:f9:8b:0b:c3:82:78:44:98:be:37:35:b2:dc:
16:d6:b9:e8:24:6e:5f:78:e6:41:69:83:72:77:c9:c8:f9:45:
db:13:a4:c4:39:36:c7:13:11:61:50:f3:43:1a:15:a9:78:33:
f1:c1:4a:6a:70:d8:c9:12:68:5c:50:be:d9:ed:cf:f7:75:b8:
63:ca:31:8f:5b:90:7b:2c:e9:52:fe:ef:2e:ae:9b:58:f0:a1:
f2:04:37:cc:61:df:ba:21:b2:23:24:93:ee:d7:38:58:3e:5b:
0f:6d:de:6f:7d:41:57:05:4b:6a:1e:ac:e0:26:c2:6e:dd:2f:
39:db:b5:ad:7a:3d:5c:a1:52:0e:ea:2d:99:64:93:25:55:c4:
58:fd:55:a1:12:4c:6b:2f:72:7a:3b:ce:02:3f:41:8d:5a:85:
ce:72:39:91:3a:f1:c6:3f:01:12:15:15:b4:6c:e3:42:c8:16:
0d:89:4a:66:fd:b3:b9:46:69:63:30:4a:61:c3:76:15:ff:83:
0f:48:fc:1d:16:49:fa:19:85:38:91:d2:25:a6:9b:a4:18:c7:
14:7b:c7:5f:89:01:7f:d4:8c:c8:6b:a3:a2:a1:da:43:32:44:
5a:14:14:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:31:47 2025 by rpki-client