This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
File: u5MlbmB9QutuNCDcxxN_ILhNDIo.mft (raw, json)
Hash identifier: jlo4T61ZXDgoBtLRd/EuH1gDjQN9O7v143V1Yit7+Zw=
Subject key identifier: F4:21:DB:80:E6:07:55:A5:14:E2:65:A1:12:AD:DE:A7:F0:95:F8:A4
Authority key identifier: BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
Certificate issuer: /CN=A91DF3CA/serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Certificate serial: 1840
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
Manifest number: 1832
Signing time: Sat 20 Dec 2025 16:18:47 +0000
Manifest this update: Sat 20 Dec 2025 16:18:47 +0000
Manifest next update: Sat 27 Dec 2025 16:18:47 +0000
Files and hashes: 1: u5MlbmB9QutuNCDcxxN_ILhNDIo.crl (hash: 7NukMoMGsRJH83gHHx7lUga8s5d5JUgtTOmKqlme71E=)
2: 0EB22CD66BBE11EDBF717818C4F9AE02.roa (hash: gFLbFRy/ivjEl0Dcp/t/VXs92pwAJ2tSip4UwHoVC3M=)
3: 7D4E6EDCC3A511E78971975FC4F9AE02.roa (hash: b8auFL+OGTstQHyewNvl2CDT74Oau9yNM7VkRWGDuEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:18:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6208 (0x1840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF3CA, serialNumber=BB93256E607D42EB6E3420DCC7137F20B84D0C8A
Validity
Not Before: Dec 20 16:18:47 2025 GMT
Not After : Dec 27 16:18:47 2025 GMT
Subject: CN=6946cc67-1850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:e5:1e:09:fd:26:46:83:6e:d7:c7:c1:04:
ed:bd:ec:93:d0:e6:25:31:d8:f3:c0:f5:19:01:2b:
42:c2:6d:e4:e9:67:68:18:6a:34:40:a4:86:a8:fb:
59:67:a5:05:a4:46:b2:3b:15:7c:b0:67:a1:00:97:
29:4c:80:70:bf:49:23:2f:23:5b:ab:64:0f:20:84:
18:a0:bf:ee:c1:84:63:07:2e:69:49:a0:b5:f2:60:
59:b3:30:2f:23:3a:dd:79:b6:d7:9a:33:6f:59:95:
16:00:87:0f:13:28:be:2c:13:8c:99:2e:54:5f:40:
c7:65:ff:b4:bf:d1:af:d1:2b:a9:fd:4b:8f:16:96:
60:df:1d:c6:4b:07:26:f7:ab:06:a6:50:26:23:f2:
db:cb:9e:5e:c1:4d:b7:20:9e:46:e2:7b:dd:d9:95:
a1:bc:2f:0b:b3:0d:f1:3c:ff:92:6d:25:98:08:e6:
6c:28:0e:4e:5e:41:c3:d0:b8:a6:22:8b:88:9c:3a:
43:7c:23:11:d7:51:72:c2:8e:1a:4d:22:66:9c:70:
61:81:94:13:c1:69:d7:a1:68:d4:31:9a:10:40:cf:
ed:ba:44:bb:fc:22:b3:46:b3:d3:11:9f:d8:72:3e:
bd:2a:36:32:2e:69:69:cc:2d:e6:3a:55:ae:35:89:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:21:DB:80:E6:07:55:A5:14:E2:65:A1:12:AD:DE:A7:F0:95:F8:A4
X509v3 Authority Key Identifier:
keyid:BB:93:25:6E:60:7D:42:EB:6E:34:20:DC:C7:13:7F:20:B8:4D:0C:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5MlbmB9QutuNCDcxxN_ILhNDIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF3CA/EF4F937CC3A411E797BBF15EC4F9AE02/u5MlbmB9QutuNCDcxxN_ILhNDIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:78:99:5a:09:17:1b:10:19:44:ee:fd:c5:2b:5d:7f:86:1d:
b5:73:d4:45:e7:1f:bf:22:49:b4:31:1f:43:fa:cf:31:46:48:
7c:36:24:2e:d7:17:58:3a:66:8b:20:e0:84:60:42:50:37:a2:
d6:58:c2:de:a0:84:dd:d9:d9:0e:67:ac:e8:ee:b6:21:15:b3:
87:f3:d8:a6:0d:0f:02:d9:a3:5e:1c:c5:a5:b6:ab:11:5e:ca:
c3:a1:e2:35:20:dd:79:5d:d0:1c:a5:2b:ce:17:2b:bf:a6:13:
22:9a:4e:33:6c:a4:83:fa:8c:64:b1:5f:9f:74:21:55:c5:66:
82:ea:84:a7:da:b0:44:3d:77:bf:88:d6:0b:5f:37:22:78:af:
07:25:c6:da:8a:29:cb:fa:39:9c:3d:de:a6:23:41:93:e7:55:
7c:98:5c:54:bf:76:b9:1b:bc:4c:94:e0:1e:94:99:0c:9c:b4:
03:30:9a:e0:4e:b1:2a:53:d2:15:11:12:8f:f6:a3:23:7e:14:
30:de:d2:33:d0:e8:3a:0f:5e:1b:14:6a:4b:a9:7e:3b:2f:59:
70:68:d3:24:56:24:dd:3c:7d:ce:35:22:3b:c6:a4:5f:06:f0:
5f:10:a1:56:78:08:b6:62:de:55:b1:98:21:f7:82:a5:e7:a1:
b7:e6:39:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:58:19 2025 by rpki-client