This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
File: b5wj5AN3j-Ace8lQiL_R5rMoqps.mft (raw, json)
Hash identifier: OIZPICVio3MzVzROJmHGouA4LwfYUN98PqTUrASYVw4=
Subject key identifier: 49:DA:BD:62:AB:99:2D:79:D2:5F:FB:8C:82:09:7C:78:A2:08:DB:E1
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Certificate issuer: /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
Manifest number: 019E
Signing time: Wed 17 Dec 2025 02:55:31 +0000
Manifest this update: Wed 17 Dec 2025 02:55:31 +0000
Manifest next update: Wed 24 Dec 2025 02:55:31 +0000
Files and hashes: 1: b5wj5AN3j-Ace8lQiL_R5rMoqps.crl (hash: X5UK3vjyobnl+G9qwfB5YRIUCfPx5sSSSLxsKHeXUwI=)
2: 4F445CCE1FF311F0833FC50BC4F9AE02.roa (hash: lZkWd47Uz2uf21zAmsLBWU8pUQNaeJCjWHd7MjYuTT0=)
3: 512CFEFE68BD11EE87942B4EC4F9AE02.roa (hash: gKVY9Tkyoe7JpZ2Ns6DuXF5YeZ0XK7VkjCLkvTfUu9c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 02:55:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Validity
Not Before: Dec 17 02:55:31 2025 GMT
Not After : Dec 24 02:55:31 2025 GMT
Subject: CN=69421ba3-c66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:06:ca:f2:39:67:85:d1:92:ce:ba:f7:b0:72:
c0:a8:9b:7b:c1:a4:11:48:e0:a1:79:6b:9c:52:6d:
ec:c4:59:c0:24:ca:72:23:b5:92:a5:d8:2d:1e:72:
19:c5:20:81:b7:15:f5:37:ab:98:22:a5:23:e7:5a:
84:72:5b:0b:45:b1:4c:d1:a1:11:cd:76:7b:e6:d8:
bf:e0:45:bd:5d:e9:f3:13:c2:a9:f4:ae:6c:c2:f7:
01:aa:e5:e7:7d:bf:85:76:1d:17:36:15:b3:e0:af:
91:fb:8c:bc:a4:d8:24:c7:1d:cf:97:03:91:94:e6:
bf:dd:78:d9:0e:fb:9e:ca:1e:17:7e:48:d0:a9:c8:
78:f8:95:5d:05:eb:4d:50:29:5a:8f:8f:7b:78:68:
ee:99:6e:bc:43:22:08:5c:e8:f4:25:0f:a3:42:42:
8f:73:51:96:e7:55:8e:58:91:98:40:76:7c:cb:b7:
b8:dc:a0:45:8b:0e:1a:12:38:7e:b1:5b:01:60:8c:
1e:d1:06:c4:f8:4a:c3:14:5a:b1:ea:0d:12:e0:ea:
6d:df:30:72:8b:bc:d2:98:58:47:f8:fd:b6:8d:23:
a0:28:d3:a5:7e:2a:e0:71:7d:40:46:a3:83:23:c2:
8d:a4:d0:7e:88:8f:c1:8c:56:86:eb:a0:df:68:a3:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DA:BD:62:AB:99:2D:79:D2:5F:FB:8C:82:09:7C:78:A2:08:DB:E1
X509v3 Authority Key Identifier:
keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:30:94:51:38:17:ab:b8:e3:84:6b:92:9d:a8:34:80:83:f7:
27:f8:70:2e:a2:3b:46:2c:b1:9b:e5:72:d1:73:1e:c6:34:ed:
3e:83:d5:ec:32:df:a5:07:f5:b4:ec:5b:98:cc:62:19:20:dc:
ef:22:5a:f1:6d:af:66:32:76:e4:5c:9d:5d:9a:21:a6:fe:bf:
89:09:5e:93:9c:ef:72:84:e2:27:46:13:72:cc:39:39:8f:7f:
9a:e2:d4:29:28:bf:c5:b4:89:49:b7:d5:50:53:ae:b3:77:11:
d6:36:f8:59:d9:b5:5c:a5:64:21:bc:d6:74:b3:2c:e6:8c:a6:
c3:54:b9:78:3e:82:fb:ad:1a:44:35:71:76:12:db:a1:5e:34:
60:6f:82:ce:0a:00:f0:ea:41:a8:76:a2:91:1d:a9:b3:0a:de:
6a:a1:2e:e6:88:b2:67:1e:1e:b7:57:4d:a2:9e:6a:28:17:a2:
6e:f7:f5:41:b0:98:ed:a7:b4:b2:4e:8b:9e:4f:79:d5:18:13:
57:01:a6:8a:78:8b:22:38:58:2a:36:5c:69:a8:13:ce:81:57:
8e:5d:8a:98:9f:f7:79:aa:90:b5:a3:15:c2:8f:a7:6f:11:31:
7f:cf:e8:65:06:23:3d:55:3b:bd:18:21:fe:fa:cb:da:ee:6b:
bf:3a:b2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 23:33:20 2025 by rpki-client