This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
File: 5P3k1jhc-jqHPsReepFHztMJvAI.mft (raw, json)
Hash identifier: DEFPYX1ORtuZiU/DK4bK+uyzgT9xUq6xOG6p1TwiDCk=
Subject key identifier: B6:08:A3:54:93:71:FE:54:5B:E8:D0:42:D7:FB:14:66:A2:4C:7D:A4
Authority key identifier: E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02
Certificate issuer: /CN=A91EC46B/serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02
Certificate serial: 06DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
Manifest number: 06D4
Signing time: Mon 22 Dec 2025 21:20:22 +0000
Manifest this update: Mon 22 Dec 2025 21:20:22 +0000
Manifest next update: Mon 29 Dec 2025 21:20:22 +0000
Files and hashes: 1: 5P3k1jhc-jqHPsReepFHztMJvAI.crl (hash: R4yzXzL5KCrTj0jdwrQWmN0P6XMTbjAECh2KubjNSAI=)
2: 18ED6F18862211EB99005123C4F9AE02.roa (hash: 90VtaliYuYSpWhN/aywXhHAjbblGVidwwylxbvYodJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl
rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC46B, serialNumber=E4FDE4D6385CFA3A873EC45E7A9147CED309BC02
Validity
Not Before: Dec 22 21:20:22 2025 GMT
Not After : Dec 29 21:20:22 2025 GMT
Subject: CN=6949b616-2116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:4f:02:35:e8:0c:1a:cd:5e:9e:35:8b:bf:
7c:f0:b5:f4:d4:46:16:d2:04:57:0f:0b:49:11:a7:
47:d1:0b:41:7d:83:c4:15:c6:99:00:01:65:42:d4:
9d:e7:7e:a2:74:6d:32:58:03:65:e5:47:54:a8:7f:
de:71:2f:ac:98:01:16:9c:f0:56:99:2d:3e:9c:49:
35:e4:04:fd:cd:3a:5c:bc:58:40:6b:4a:e6:9a:27:
87:e6:77:96:76:d2:63:7f:ac:8f:98:44:c9:8c:ae:
7d:05:d1:4c:b9:99:d2:32:86:15:af:10:38:8b:b2:
05:a0:57:34:0a:60:2f:20:89:43:db:c4:84:4a:eb:
59:d4:c8:8d:37:3b:f3:98:dc:b1:db:4f:e4:3e:0b:
7d:b9:6d:df:81:d1:20:19:3e:1f:68:d7:27:94:91:
96:8b:c1:c7:ee:5c:80:29:91:15:fb:9f:27:d1:e1:
d3:6c:e9:5b:e6:c8:c4:6b:64:13:3f:0e:65:84:23:
e8:6d:63:ea:40:f0:ce:f9:e9:22:3d:63:8e:54:17:
2f:9f:5c:ef:4f:31:b1:85:29:2a:e9:94:33:0a:cf:
34:24:ba:34:0a:e6:12:b0:63:b9:c3:6b:92:61:ae:
3e:f8:1c:ce:b6:79:1a:46:94:76:f6:c3:85:f7:6f:
6f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:08:A3:54:93:71:FE:54:5B:E8:D0:42:D7:FB:14:66:A2:4C:7D:A4
X509v3 Authority Key Identifier:
keyid:E4:FD:E4:D6:38:5C:FA:3A:87:3E:C4:5E:7A:91:47:CE:D3:09:BC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5P3k1jhc-jqHPsReepFHztMJvAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC46B/F685BC9C7FC211EBA714542AC4F9AE02/5P3k1jhc-jqHPsReepFHztMJvAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:a8:9f:39:32:8d:41:38:f5:0f:34:a1:26:00:e5:13:87:62:
e7:b7:f2:4d:4f:76:aa:9d:f1:a6:7f:ba:df:fe:a7:a7:43:cd:
73:42:f7:65:af:4e:cc:fb:e0:22:ce:fd:55:85:0f:fe:46:7f:
8e:3b:dc:b2:e7:0e:e6:72:51:25:27:1a:f2:05:91:6d:0d:1a:
24:49:83:bc:4b:f1:f4:54:15:00:cd:72:cd:d3:3b:49:07:1c:
04:3b:6f:a7:f6:f0:5f:d0:41:18:70:90:66:a1:97:05:ec:75:
94:8d:01:d5:1e:dc:8e:53:1f:a5:ee:2a:2f:74:57:cd:f5:06:
99:60:b6:74:4d:fd:f1:04:91:86:aa:d7:20:b5:cb:b1:3b:05:
e9:4c:01:4c:00:74:c6:3d:b1:6c:a3:04:ee:fa:ad:fc:3d:55:
df:dd:71:32:31:65:f6:1e:5b:34:ee:0c:a1:af:11:e6:8c:11:
d6:d9:49:ab:45:98:ad:02:97:6d:d8:f4:74:36:e7:f1:75:94:
75:b0:de:4d:3d:fd:b7:69:1a:6d:e5:f5:6d:a1:7d:bf:90:2b:
a4:22:36:d9:5a:31:a0:21:00:a3:be:6c:7f:35:ab:eb:a6:aa:
28:59:4d:b0:19:b4:9e:73:6b:d1:58:67:4c:d3:e1:4c:9c:26:
c4:fc:9e:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM0NkIxMTAvBgNVBAUTKEU0RkRFNEQ2Mzg1Q0ZBM0E4NzNFQzQ1RTdBOTE0N0NF
RDMwOUJDMDIwHhcNMjUxMjIyMjEyMDIyWhcNMjUxMjI5MjEyMDIyWjAYMRYwFAYD
VQQDDA02OTQ5YjYxNi0yMTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsxZPAjXoDBrNXp41i7988LX01EYW0gRXDwtJEadH0QtBfYPEFcaZAAFlQtSd
536idG0yWANl5UdUqH/ecS+smAEWnPBWmS0+nEk15AT9zTpcvFhAa0rmmieH5neW
dtJjf6yPmETJjK59BdFMuZnSMoYVrxA4i7IFoFc0CmAvIIlD28SESutZ1MiNNzvz
mNyx20/kPgt9uW3fgdEgGT4faNcnlJGWi8HH7lyAKZEV+58n0eHTbOlb5sjEa2QT
Pw5lhCPobWPqQPDO+ekiPWOOVBcvn1zvTzGxhSkq6ZQzCs80JLo0CuYSsGO5w2uS
Ya4++BzOtnkaRpR29sOF929v+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYIo1ST
cf5UW+jQQtf7FGaiTH2kMB8GA1UdIwQYMBaAFOT95NY4XPo6hz7EXnqRR87TCbwC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzQ2Qi9GNjg1QkM5QzdG
QzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpoYy1qcUhQc1JlZXBGSHp0TUp2
QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVQM2sxamhjLWpxSFBzUmVlcEZIenRNSnZBSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzQ2Qi9GNjg1QkM5QzdGQzIxMUVCQTcxNDU0MkFDNEY5QUUwMi81UDNrMWpoYy1q
cUhQc1JlZXBGSHp0TUp2QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQqJ85Mo1BOPUPNKEmAOUTh2Lnt/JNT3aqnfGmf7rf/qenQ81zQvdl
r07M++Aizv1VhQ/+Rn+OO9yy5w7mclElJxryBZFtDRokSYO8S/H0VBUAzXLN0ztJ
BxwEO2+n9vBf0EEYcJBmoZcF7HWUjQHVHtyOUx+l7iovdFfN9QaZYLZ0Tf3xBJGG
qtcgtcuxOwXpTAFMAHTGPbFsowTu+q38PVXf3XEyMWX2Hls07gyhrxHmjBHW2Umr
RZitApdt2PR0NufxdZR1sN5NPf23aRpt5fVtoX2/kCukIjbZWjGgIQCjvmx/Navr
pqooWU2wGbSec2vRWGdM0+FMnCbE/J6L
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:48:42 2025 by rpki-client