This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json)
Hash identifier: MrW5TOuTxHKOmmDqFpNvGbDvIp5LYTldgkBdMxT01O4=
Subject key identifier: D1:45:26:75:51:77:23:A9:D0:D5:AB:E3:75:FF:0E:4B:3C:BB:6C:B7
Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Certificate serial: 34F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
Manifest number: 34F0
Signing time: Sun 28 Dec 2025 14:39:31 +0000
Manifest this update: Sun 28 Dec 2025 14:39:30 +0000
Manifest next update: Sun 04 Jan 2026 14:39:30 +0000
Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: C91+rVXc61hdmkCG0NkqO/1Ae1FtSlMY1Do1wmJ1K3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 14:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13552 (0x34f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Validity
Not Before: Dec 28 14:39:30 2025 GMT
Not After : Jan 4 14:39:30 2026 GMT
Subject: CN=69514123-6373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:de:84:84:cb:78:b3:56:ba:88:e1:f9:a5:
38:2c:48:b6:6a:a5:c2:3a:01:9c:9a:f4:f4:b8:51:
83:91:fd:8d:b9:58:82:2d:88:fb:b2:23:3e:6d:36:
06:ff:f8:6f:2a:cc:af:30:34:0b:98:7c:80:f3:09:
aa:5a:06:01:7f:5a:0d:82:29:9e:1c:d7:06:23:30:
75:20:a8:cf:1f:da:e9:c3:1f:d6:a2:a8:70:ac:40:
e0:cf:58:ff:89:73:e5:6a:35:9c:75:21:8f:c4:a3:
c3:2b:4a:49:71:e3:48:78:e9:11:b3:05:c0:30:e6:
30:a5:c2:52:da:f3:f3:ab:63:e6:8f:ec:57:a2:b3:
81:1e:cb:02:88:c2:25:b0:09:44:26:83:2f:3a:79:
7e:0e:5d:bc:f3:da:f6:be:a1:f8:7b:28:93:27:ca:
06:f7:ae:f7:62:a2:e9:ea:1c:8d:ab:dc:fb:c7:b5:
e8:3e:5b:31:6a:b9:5d:bb:7c:15:de:48:f9:df:fc:
23:2f:40:fd:47:21:e9:fc:08:df:84:2a:45:6f:c8:
2d:7b:90:6a:82:74:31:ad:50:76:f9:d4:b2:cc:16:
1f:c7:4a:90:55:f8:78:33:40:29:40:9e:24:8b:57:
85:a3:2e:bf:f3:ec:15:0e:e5:89:84:ad:4b:0a:e0:
4b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:45:26:75:51:77:23:A9:D0:D5:AB:E3:75:FF:0E:4B:3C:BB:6C:B7
X509v3 Authority Key Identifier:
keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:23:e8:49:27:dd:6e:1d:69:0f:48:95:fa:0f:0a:2f:2f:a4:
37:15:94:26:76:60:20:d9:4e:74:30:f1:f5:c5:b8:d2:09:b3:
83:de:64:9c:65:25:26:36:bf:20:41:5c:7a:73:81:0d:b9:84:
22:1e:b1:eb:6a:40:49:4a:4e:3e:66:7c:55:15:e3:70:b9:11:
eb:77:e7:45:95:61:17:1f:38:88:c3:2c:44:47:bd:ce:22:c6:
fd:35:72:2b:f4:87:25:03:87:c8:58:b3:6b:75:0f:cf:bb:a9:
49:b5:1e:d7:fd:46:9e:64:12:42:b9:9c:c9:77:c9:21:00:c6:
d5:0b:3d:3b:ee:69:52:4c:78:69:16:c6:a8:69:15:2c:0d:2f:
64:e7:a4:06:8d:2b:69:a7:03:38:44:f2:92:1c:37:26:ab:11:
e9:aa:d5:7a:15:64:89:9c:f9:fa:65:22:7b:8f:e5:80:b3:f9:
b0:0a:88:5a:cd:36:9e:fe:74:bb:5c:21:c3:d4:35:94:54:35:
c0:ee:3b:97:a2:f4:71:af:cc:32:4c:03:2b:8f:95:fe:c0:d9:
c2:2f:99:f1:1e:9a:a3:a4:75:3b:a6:d9:bd:44:6d:f3:33:e8:
fa:91:b1:78:6a:ea:e3:e2:4c:ad:69:90:03:c4:43:b0:7c:87:
8d:b8:2a:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdBMDMyQkVGQUVB
RDUzNzI3RDMwHhcNMjUxMjI4MTQzOTMwWhcNMjYwMTA0MTQzOTMwWjAYMRYwFAYD
VQQDDA02OTUxNDEyMy02MzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAytXehITLeLNWuojh+aU4LEi2aqXCOgGcmvT0uFGDkf2NuViCLYj7siM+bTYG
//hvKsyvMDQLmHyA8wmqWgYBf1oNgimeHNcGIzB1IKjPH9rpwx/WoqhwrEDgz1j/
iXPlajWcdSGPxKPDK0pJceNIeOkRswXAMOYwpcJS2vPzq2Pmj+xXorOBHssCiMIl
sAlEJoMvOnl+Dl2889r2vqH4eyiTJ8oG9673YqLp6hyNq9z7x7XoPlsxarldu3wV
3kj53/wjL0D9RyHp/AjfhCpFb8gte5BqgnQxrVB2+dSyzBYfx0qQVfh4M0ApQJ4k
i1eFoy6/8+wVDuWJhK1LCuBLdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFFJnVR
dyOp0NWr43X/Dks8u2y3MB8GA1UdIwQYMBaAFOSzrj7SMXoj4ZvXoDK++urVNyfT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThFMC9EQzFFRkI0QTFE
OTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVpUGhtOWVnTXI3NjZ0VTNK
OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVMT3VQdEl4ZWlQaG05ZWdNcjc2NnRVM0o5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVp
UGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcI+hJJ91uHWkPSJX6DwovL6Q3FZQmdmAg2U50MPH1xbjSCbOD3mSc
ZSUmNr8gQVx6c4ENuYQiHrHrakBJSk4+ZnxVFeNwuRHrd+dFlWEXHziIwyxER73O
Isb9NXIr9IclA4fIWLNrdQ/Pu6lJtR7X/UaeZBJCuZzJd8khAMbVCz077mlSTHhp
FsaoaRUsDS9k56QGjStppwM4RPKSHDcmqxHpqtV6FWSJnPn6ZSJ7j+WAs/mwCoha
zTae/nS7XCHD1DWUVDXA7juXovRxr8wyTAMrj5X+wNnCL5nxHpqjpHU7ptm9RG3z
M+j6kbF4aurj4kytaZADxEOwfIeNuCqe
-----END CERTIFICATE-----
Generated at Tue Dec 30 07:07:19 2025 by rpki-client