This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
File: 5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json)
Hash identifier: ly94aeB5sINY3aB/x15WJ4jgh2+Tov53l9MxyQRUI1w=
Subject key identifier: 4F:38:AE:AF:02:26:BD:1D:6A:29:5D:1B:41:4B:F5:AF:B2:B3:61:20
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Certificate issuer: /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial: 04E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
Manifest number: 04C8
Signing time: Mon 22 Dec 2025 22:59:08 +0000
Manifest this update: Mon 22 Dec 2025 22:59:08 +0000
Manifest next update: Mon 29 Dec 2025 22:59:08 +0000
Files and hashes: 1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: Oku0fuVDGM3U6KRkV0tt6w66905wu8xpRc/P92fU65o=)
2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: OKD6dIXNlufXP/2KtQACOYy/fSTRLoZuLrkJHHyBmPs=)
3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: 03xQSZXfxDyCzRtWljLHUlOT109SCX3SLMxm27msFJQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 22:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Validity
Not Before: Dec 22 22:59:08 2025 GMT
Not After : Dec 29 22:59:08 2025 GMT
Subject: CN=6949cd3c-c213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:1d:d7:09:8d:d0:74:d3:b5:4c:89:2c:99:
88:83:49:bb:d4:d3:38:38:79:08:da:9f:6d:4c:6b:
15:ba:46:7b:9b:52:24:be:5f:2b:ab:6d:c5:6c:cb:
48:2b:ed:55:0c:86:e0:94:29:cd:22:07:89:74:de:
11:f0:c8:cc:5e:2f:55:16:a1:07:48:b7:41:ed:a6:
d6:da:5c:e0:bb:3e:fe:5e:d8:e9:2b:af:a3:e8:f5:
15:ae:b0:b3:d8:20:57:be:5b:1e:2a:03:d9:23:29:
ce:be:05:3f:24:2b:18:d5:53:fb:6b:36:54:bc:a5:
8e:7d:6e:6d:d7:33:3f:d0:34:99:1f:40:c4:8a:3d:
ff:ec:e7:99:93:a5:b4:17:b7:b6:0e:31:13:d0:05:
7e:36:51:dc:4a:2f:23:0e:a5:6f:74:e7:c9:3a:2d:
9d:72:11:af:23:68:59:2f:dc:fe:20:06:15:b9:aa:
08:e3:db:73:2b:39:60:65:0c:42:05:5e:4c:6c:7e:
8e:ea:e1:c5:b2:0d:ca:08:a9:f5:ad:21:00:2b:6d:
8e:24:31:c0:1a:0c:47:88:a3:1b:dd:73:15:78:1d:
49:ba:60:9e:2c:de:bd:b1:67:22:cf:84:5e:45:f8:
95:ab:0a:a6:f7:61:29:7a:a4:e2:bc:49:d3:8b:ab:
bc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:38:AE:AF:02:26:BD:1D:6A:29:5D:1B:41:4B:F5:AF:B2:B3:61:20
X509v3 Authority Key Identifier:
keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:16:0a:35:31:5b:58:36:a6:51:28:6c:b6:c2:96:8d:b7:2e:
2e:ff:ae:a4:80:69:6e:de:06:ac:1e:86:6b:3a:e9:c4:6b:35:
34:1c:98:b5:26:96:3a:3d:4d:61:27:c6:72:3c:f5:66:a1:ba:
d6:bf:4a:31:e0:c0:d7:48:40:7b:7a:31:e9:a7:53:a8:76:7b:
03:dc:94:c0:3e:46:18:c2:12:e6:d1:11:29:23:0c:2e:82:c0:
69:a8:7c:aa:1f:c3:f0:71:fc:0b:04:bb:34:f7:ed:99:f5:da:
2c:3f:d9:19:a8:47:5d:78:3a:d6:5f:a9:1b:7c:03:ba:0b:af:
9c:e0:f9:98:04:9c:b7:4e:eb:3b:e9:54:f0:ae:16:d0:6c:f9:
db:73:e5:6d:3b:d0:b9:57:73:ee:c5:17:10:04:b0:ef:9e:2d:
a6:7c:86:1f:9c:9d:b1:34:e9:5e:7f:50:08:7c:e7:03:41:aa:
c0:e0:70:e8:e8:ec:a1:32:ff:dc:1e:c8:e4:e4:06:c5:a9:cb:
14:73:8f:08:91:6b:87:4d:17:cd:eb:17:7e:56:48:4c:f4:53:
a1:c3:42:3b:79:09:5e:86:f2:73:37:72:32:0d:eb:fb:40:70:
bc:d1:c8:f1:9b:bd:18:9d:40:d7:fa:49:43:6f:7d:ea:67:ef:
35:26:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 05:54:22 2025 by rpki-client