This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
File: 5nG8sr6VpsiFJxIdiBXovPGKoeI.mft (raw, json)
Hash identifier: EkZ9VgbZPoIUGbaMJT5Mvzo5e40tTEYAqEjDwxPAewo=
Subject key identifier: 65:03:91:46:D2:95:56:76:F8:7A:A6:DF:E1:67:C8:98:1B:5E:C7:E7
Authority key identifier: E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2
Certificate issuer: /CN=A9124926/serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
Certificate serial: 0A32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
Manifest number: 0A29
Signing time: Thu 18 Dec 2025 19:20:25 +0000
Manifest this update: Thu 18 Dec 2025 19:20:25 +0000
Manifest next update: Thu 25 Dec 2025 19:20:25 +0000
Files and hashes: 1: 5nG8sr6VpsiFJxIdiBXovPGKoeI.crl (hash: n3JM6ne0zFIMC2MtFun3Ca3WgziQ6mvUHZ0edzQd4pk=)
2: 209BA8B682DF11EAABBC5018C4F9AE02.roa (hash: BPcITeixSaXAriwkv0vsDzYrlqCAlvQdRZ4cRFHy1EA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl
rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:20:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2610 (0xa32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124926, serialNumber=E671BCB2BE95A6C88527121D8815E8BCF18AA1E2
Validity
Not Before: Dec 18 19:20:25 2025 GMT
Not After : Dec 25 19:20:25 2025 GMT
Subject: CN=694453f9-68f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:35:9c:c8:14:71:92:40:a2:fa:f8:ab:dc:
69:77:b0:e9:0f:07:cf:ac:4a:57:6f:d2:ab:f8:da:
97:a5:78:44:d5:36:11:2d:50:a3:bf:c4:5b:e2:0c:
6c:e0:ce:fe:03:a0:2e:ae:e1:a0:9c:1b:22:34:e3:
2a:6a:57:58:2c:98:15:fa:26:2b:a6:7f:80:13:0f:
b6:ad:ab:5f:d0:f9:ff:78:fc:89:a0:a8:27:04:e2:
e1:06:b9:6c:ac:71:b4:16:88:66:84:e5:e5:4e:6e:
b0:f3:9b:6c:28:36:15:3f:d1:2e:95:4f:76:35:55:
11:8e:4f:78:32:f7:21:34:19:d4:7b:fe:90:bf:4d:
3b:3e:e8:af:57:0c:9c:4f:24:0a:56:5a:35:1c:8e:
43:46:33:48:49:24:f6:68:ab:d7:dc:d0:7d:5e:a4:
47:c3:6d:35:37:84:b2:43:0c:a0:72:1c:a4:e6:0a:
42:46:b4:f1:5a:19:67:fe:f2:e2:c4:c2:ba:31:15:
03:21:af:da:85:51:6c:dd:ab:10:54:cb:35:72:23:
24:d1:3e:95:9e:a9:4c:bd:d6:66:a3:9e:df:be:af:
49:f3:f7:ed:f5:c9:06:a9:3c:fd:35:f0:4a:a9:87:
e2:6f:d3:74:30:be:81:0f:04:30:a0:f9:41:62:5f:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:91:46:D2:95:56:76:F8:7A:A6:DF:E1:67:C8:98:1B:5E:C7:E7
X509v3 Authority Key Identifier:
keyid:E6:71:BC:B2:BE:95:A6:C8:85:27:12:1D:88:15:E8:BC:F1:8A:A1:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5nG8sr6VpsiFJxIdiBXovPGKoeI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124926/B38578C482D911EAB9FCD285C4F9AE02/5nG8sr6VpsiFJxIdiBXovPGKoeI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:c3:ad:f2:07:99:33:03:2f:35:91:31:78:a6:ba:77:4e:87:
be:d3:e2:16:24:fd:0a:20:75:d9:1b:c6:db:8e:11:f5:b6:89:
90:97:ff:47:18:9f:88:c7:ff:90:65:fe:43:3a:df:8a:18:12:
dd:ac:18:20:61:70:b0:26:10:8f:61:c2:9b:93:78:94:a2:c6:
a4:64:a9:ee:ce:7b:48:61:96:96:9c:d3:87:d4:32:bf:15:47:
82:66:46:d6:8e:a9:66:0a:58:d4:ec:97:9c:45:7e:ea:0d:11:
54:1a:20:2f:25:55:ef:b8:c0:3d:49:cd:4b:be:a5:1f:cd:4c:
b9:b4:a0:d1:96:87:8a:3f:68:42:22:3f:d1:a4:40:0a:8c:23:
6e:b1:4f:ed:c6:3d:1d:ef:b9:46:ef:f1:1d:3a:4f:cd:80:7a:
a8:f4:29:12:64:77:05:ea:d0:79:7f:ae:b8:a0:d6:20:29:cf:
2d:20:17:d5:2a:bf:d9:ef:15:96:bc:4f:1d:73:cf:69:1e:6b:
a2:52:30:50:c4:35:78:e8:99:ca:cd:ce:38:cd:8a:41:30:20:
1e:f8:58:ce:2d:d1:01:07:e7:6d:34:18:44:4e:ec:63:b2:24:
ad:b6:c5:67:9b:7f:cc:7c:bc:69:ad:cb:44:1e:8b:41:fd:c7:
19:94:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:01:00 2025 by rpki-client