This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
File: 5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json)
Hash identifier: UZRmPLNM9K0ztHKYy9qdh364zNsi4ZDyNTwzy4o/QUI=
Subject key identifier: D4:60:3A:08:35:F9:4E:A4:35:A8:71:FD:BA:08:06:1D:24:2A:67:DA
Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
Certificate issuer: /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Certificate serial: 0365
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
Manifest number: 0361
Signing time: Sun 21 Dec 2025 00:09:16 +0000
Manifest this update: Sun 21 Dec 2025 00:09:15 +0000
Manifest next update: Sun 28 Dec 2025 00:09:15 +0000
Files and hashes: 1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: R72BGYacSUKvWogR8DxDDua6lFl6E2c61dZDoV5qXHY=)
2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: nd3BoBWmWncY6CXZjinblw8tRKQ0C9HJdvIgBJwhEHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869 (0x365)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Validity
Not Before: Dec 21 00:09:15 2025 GMT
Not After : Dec 28 00:09:15 2025 GMT
Subject: CN=69473aac-1eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:67:cb:dd:47:38:33:90:d6:3f:cf:df:e0:a5:
c8:89:06:f5:fb:36:d8:d2:ce:d4:a3:e0:d6:20:5c:
d3:11:b4:ca:80:59:d7:68:bf:08:da:e2:98:a1:0e:
c3:83:08:b0:81:ce:89:aa:ef:6c:ee:bd:85:0b:3f:
ef:c7:ca:46:9c:c4:75:e4:5f:30:09:86:d8:0c:24:
80:85:76:a4:8c:7e:a2:64:12:13:b6:e3:fe:3a:67:
83:48:69:63:0b:f5:50:c2:65:1a:c4:bd:30:55:26:
16:c7:c2:5d:9b:47:fe:be:2d:89:13:57:af:cc:c1:
71:2d:f6:e2:7f:56:cb:9e:14:95:42:70:cf:69:83:
f7:d3:e0:dc:cb:43:c0:59:97:c4:a5:30:9c:c5:55:
cf:67:6d:d1:5e:e8:24:51:61:31:45:cb:ea:a4:05:
b7:a2:12:b5:04:c5:84:46:4c:40:db:da:6b:f3:bf:
3b:ea:aa:b3:cc:3d:4a:b9:ad:09:8e:f7:48:58:ed:
7b:96:53:a4:5d:3a:89:fc:2b:2d:61:aa:93:47:f4:
c2:93:66:4a:d7:34:4e:5a:f0:be:98:4b:9f:15:09:
4f:49:aa:37:b0:27:be:72:c0:37:5a:a1:f8:ef:5e:
a1:8b:a6:98:27:98:68:4b:1d:2a:c0:c2:69:6a:b4:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:60:3A:08:35:F9:4E:A4:35:A8:71:FD:BA:08:06:1D:24:2A:67:DA
X509v3 Authority Key Identifier:
keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:39:4e:c9:3e:52:de:06:62:6c:6d:af:5b:8e:4c:9b:ba:bb:
82:cf:2e:ba:e4:7f:39:d1:df:3e:e2:98:1e:3b:12:5b:10:66:
68:45:7f:08:c4:fa:97:fe:4b:72:6f:47:23:55:6f:5f:03:5a:
cf:a5:10:4a:ff:c9:1a:c3:7c:07:2f:e7:ab:2c:3c:ff:c1:72:
f4:92:f4:29:e8:7e:ec:7d:72:ee:38:11:ce:be:5c:82:14:f2:
e8:a6:f6:6a:56:f7:87:ca:56:5a:03:39:36:dd:45:b2:0f:03:
7b:b4:d2:23:0e:5d:99:ba:f5:db:0a:81:bd:f0:af:05:73:04:
1b:1d:6c:2a:55:ed:b2:e7:80:e6:85:05:6d:ac:c5:75:0c:c4:
f4:42:17:ff:f8:22:f1:f8:0e:3e:75:30:71:79:6f:ac:a4:dc:
ea:a0:46:4e:af:a3:eb:71:a7:75:80:e4:74:30:a0:d3:8b:3c:
f7:93:3f:ed:d5:35:21:bd:02:2c:0e:12:ab:34:45:d8:f1:c7:
f1:d2:22:2e:02:ab:70:95:83:2b:ba:cc:71:72:24:b9:de:ca:
60:d2:93:59:65:a5:2e:c2:25:a8:d5:2a:f2:34:d3:94:0e:61:
8e:c9:c0:95:b0:63:47:13:63:93:c7:17:dd:69:3b:bb:60:71:
72:1a:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:34:22 2025 by rpki-client