This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
File: 5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json)
Hash identifier: ptR6SiK1QXmVQS4tyZCizv3lSniWSF5I5D3kLDGl44Y=
Subject key identifier: 49:F6:95:0D:53:52:A3:24:94:5D:1B:42:AA:8E:B7:97:C3:83:62:0A
Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
Certificate issuer: /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Certificate serial: 34EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
Manifest number: 34EB
Signing time: Thu 18 Dec 2025 14:40:14 +0000
Manifest this update: Thu 18 Dec 2025 14:40:13 +0000
Manifest next update: Thu 25 Dec 2025 14:40:13 +0000
Files and hashes: 1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: QQc8LJW0mtxrIRCebY5OCcXiZpOCTxDVkU/Mowv262g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:40:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13547 (0x34eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Validity
Not Before: Dec 18 14:40:13 2025 GMT
Not After : Dec 25 14:40:13 2025 GMT
Subject: CN=6944124e-d72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3b:a2:9f:43:7b:d3:42:98:c9:8d:11:1f:85:
c2:18:5b:e3:9e:22:28:44:7b:a0:8c:85:f0:e5:e2:
02:12:b8:fb:29:a4:93:23:db:9d:39:91:45:9d:8c:
71:d5:eb:1d:62:59:64:a7:16:33:2e:e5:c6:cd:df:
f6:a3:e3:48:84:5c:c0:b7:b8:d9:a0:25:73:31:22:
72:f7:30:bc:27:95:46:27:00:7e:44:65:c0:ce:68:
ab:80:02:84:a4:2e:55:1f:1b:81:45:75:90:62:6a:
dc:17:35:7e:7e:7e:55:92:8b:6c:74:97:13:3d:33:
34:4f:a7:9d:e8:1d:08:37:e5:c6:00:ad:94:f0:e5:
6e:da:cd:9f:97:df:6c:30:4c:c7:c5:5d:9a:bb:cc:
1e:78:d1:c7:c6:f0:19:a9:52:19:dc:95:87:f6:57:
55:f8:20:db:11:1b:70:19:12:a0:ab:3f:23:b7:e5:
0f:de:62:f8:fc:a7:7b:eb:31:40:55:21:00:24:ac:
86:90:12:22:a6:eb:64:23:94:25:70:91:7d:5f:50:
9b:82:d6:38:2a:51:12:bd:4a:91:38:7b:f4:60:02:
9d:fc:a8:e1:6c:5b:38:bd:91:a3:2b:03:47:94:c5:
1d:b0:7c:f6:15:5a:90:e5:a6:44:81:0a:8f:97:34:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F6:95:0D:53:52:A3:24:94:5D:1B:42:AA:8E:B7:97:C3:83:62:0A
X509v3 Authority Key Identifier:
keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b0:0b:ce:79:c0:13:2d:ee:80:81:e0:37:fb:2e:3f:cb:e5:
f6:00:35:0c:73:9f:a1:84:d0:fa:e1:ac:50:9e:11:fa:38:9a:
08:11:5a:fe:92:5b:59:92:31:0f:f5:76:ec:24:b1:51:d9:20:
e1:64:a2:f0:f8:0a:ae:70:35:44:3c:31:dd:e1:1c:91:4a:62:
84:31:51:29:d8:73:e5:5e:65:7d:38:b9:ab:01:5b:fd:f6:04:
17:de:6c:7a:10:96:35:ff:51:bc:fa:89:c1:55:10:22:3f:32:
89:00:91:51:07:2a:af:07:4d:6c:ab:41:49:8f:ca:20:6b:f8:
91:f8:38:d0:7b:0c:fc:9a:e6:51:77:4a:fc:e4:f0:f4:41:07:
d6:ae:40:53:14:a7:bd:03:48:f2:36:83:a2:1d:03:05:32:b6:
b3:24:26:43:0d:46:a7:e6:7e:70:e9:75:76:ed:16:ca:9c:3f:
45:40:2c:6c:7e:bb:86:64:f9:3d:0e:09:cd:09:af:3e:18:ab:
2f:0c:c4:17:26:03:ef:4c:8d:fe:5c:bb:05:ba:03:cf:a9:92:
d6:2c:c2:d0:0e:02:9f:90:8f:86:aa:c1:99:94:87:3a:eb:c3:
93:2e:62:08:a6:00:46:3f:a4:ff:1e:5d:24:d2:d9:75:c4:47:
4b:76:88:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:48 2025 by rpki-client