This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
File: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft (raw, json)
Hash identifier: eF4Z5c1kuAoVSVPdglLB+bgrA6mz7VAvuBiigdXP4Ic=
Subject key identifier: 5A:88:C2:08:C2:81:64:88:E4:89:32:F1:90:64:3D:3E:60:E5:3E:63
Authority key identifier: E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
Certificate issuer: /CN=A91D9F0A/serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Certificate serial: 141F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
Manifest number: 13F6
Signing time: Mon 22 Dec 2025 16:40:29 +0000
Manifest this update: Mon 22 Dec 2025 16:40:29 +0000
Manifest next update: Mon 29 Dec 2025 16:40:29 +0000
Files and hashes: 1: 5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl (hash: QCkI3mRQTM87dWFdDEHGlbVpbEYYXffFHUDIO01PnZQ=)
2: 3F6E94ACF5CF11EF90104A57C4F9AE02.roa (hash: aWpyluRmBbFOKLiw+qC27KTJm1uY55qHIyXwRzZimsw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5151 (0x141f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9F0A, serialNumber=E46BBF01768956E866AEC443F2BB13501F2E7379
Validity
Not Before: Dec 22 16:40:29 2025 GMT
Not After : Dec 29 16:40:29 2025 GMT
Subject: CN=6949747d-943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:9c:80:86:3e:dc:6b:8c:89:90:13:eb:b5:
40:b2:38:8d:11:20:9e:aa:49:dd:db:4d:df:35:1b:
3f:32:2b:ed:fc:99:33:67:95:15:a1:73:e2:13:cf:
be:d8:24:e7:1d:e5:c4:00:5e:b7:95:5c:7f:e1:63:
18:d9:9f:58:15:fe:dd:9a:b4:23:68:e3:a9:21:70:
53:da:46:e3:04:3d:5e:a4:c9:aa:02:55:44:0e:de:
d3:2e:ba:15:ba:4d:26:14:c2:4f:b8:ae:e6:d9:3e:
eb:3f:d4:19:63:e7:71:61:f0:14:08:f0:3a:4f:71:
b9:c7:cc:7b:40:18:ba:39:e8:1d:93:75:05:30:16:
29:bf:9b:ee:17:52:f7:55:e4:ab:18:33:31:6b:bf:
ee:f7:8b:de:77:bc:aa:70:df:4e:5e:f4:82:2b:2f:
21:27:e5:8d:29:71:a0:ed:96:2a:30:b0:16:71:e8:
29:0a:c2:4b:95:b1:fd:d2:d1:ea:76:42:4c:63:3b:
07:a9:fd:2d:a5:05:71:5f:11:e4:6f:67:c4:b6:9b:
f7:72:f3:a0:8c:95:7b:fc:83:81:17:f4:12:5b:f2:
f7:e2:d8:89:db:11:43:20:ce:57:f3:03:e2:03:06:
53:38:f3:c2:9e:fe:43:3c:18:d2:6b:fe:b3:12:84:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:88:C2:08:C2:81:64:88:E4:89:32:F1:90:64:3D:3E:60:E5:3E:63
X509v3 Authority Key Identifier:
keyid:E4:6B:BF:01:76:89:56:E8:66:AE:C4:43:F2:BB:13:50:1F:2E:73:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F0A/E86021D6A23C11E88A6FE66CC4F9AE02/5Gu_AXaJVuhmrsRD8rsTUB8uc3k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:9b:a9:12:01:a5:44:c7:1c:82:63:7c:36:81:60:1f:17:f0:
51:d4:09:c6:1b:59:d1:be:eb:38:28:1b:89:da:06:69:36:d3:
72:9f:23:b6:4e:49:3f:28:fb:9a:f9:27:51:7f:4e:83:46:b9:
13:fe:7b:14:c3:a4:30:5b:d7:36:ee:87:2e:00:15:30:02:69:
c0:9a:f4:ca:d3:64:c3:bd:08:78:e3:30:69:30:00:c8:d7:84:
c1:60:29:5f:73:d6:cf:35:51:8f:39:97:83:23:93:a4:d4:a7:
88:9a:fc:19:a7:05:df:51:6e:2a:cb:2c:19:66:2d:37:26:1d:
42:53:d5:3c:75:10:60:1a:a2:49:84:4b:15:25:a4:e6:52:00:
e5:e3:1b:fc:05:88:b7:13:67:24:6a:05:b5:78:35:c5:35:92:
4b:97:fe:af:6e:97:d2:9a:39:0a:78:fc:be:e2:24:7a:00:13:
49:aa:d7:d6:5a:8f:59:55:e3:96:ec:bd:3a:e4:da:c3:40:e2:
35:75:5b:b1:a6:d1:cd:89:86:67:b7:f0:f8:28:e4:8c:bd:07:
29:c5:6f:40:ec:49:02:ad:1e:a5:00:e8:cc:2b:6e:a8:ef:64:
8e:de:38:dd:a6:aa:45:fa:34:d0:6e:f2:ff:bb:49:54:a5:01:
5e:a5:10:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:19 2025 by rpki-client