This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
File: 5pLFtgs-8cIERDn8OQrVbcPLzWM.mft (raw, json)
Hash identifier: lUVO5LMh0YmgY/6ptI57x3J6VEq1clBbbErobjhG6Is=
Subject key identifier: CF:79:A7:C1:33:85:A6:DF:C8:E6:53:CC:68:C7:09:F0:B9:18:9C:08
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 0910
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
Manifest number: 0888
Signing time: Tue 06 Jan 2026 20:35:32 +0000
Manifest this update: Tue 06 Jan 2026 20:35:32 +0000
Manifest next update: Tue 13 Jan 2026 20:35:32 +0000
Files and hashes: 1: 5pLFtgs-8cIERDn8OQrVbcPLzWM.crl (hash: i+ltj/8uuGU/SEKH7dIHbP54B7M/COtWrSOI4FH/CTc=)
2: 215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (hash: 3KAXB0y77UEXT0NSmBqRqJYol3EdpUOQESEbjqAUowo=)
3: 79986EE8FE3D11EFB763F62EC4F9AE02.roa (hash: bA19Y+YseTfcXQaXEUZi3q3mODfpiIfKTPYCQNkXISs=)
4: F3643AD6089C11F09BB44535C4F9AE02.roa (hash: /nLaGI3z1xCPylElkOX2xhje5D3mGsOohSwIv2xzDUQ=)
5: 244B9D1874CB11EEB3C0267DC4F9AE02.roa (hash: D4/4gO/cbJfEP5wlYW+iiyf7YJHeT+1Ir2WyIsZ62e8=)
6: 9765FB988A5D11EE9E6AA223C4F9AE02.roa (hash: VzbPsPGLDl5f/oFOZ9NpXnSyLExyEIRw6V+vhyTevuk=)
7: C34D8010A7D311F0A3E6E75EC4F9AE02.roa (hash: E/cmWCt7wJm7XfYKnd6uTnnMTRXprrckSYOl8rNGMiw=)
8: 311C494286CC11F09348D16BC4F9AE02.roa (hash: +BsmD54GLCQa0LnHgyrHw492ycZW9i6yM0KqljFRK2Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Jan 2026 20:35:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320 (0x910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Jan 6 20:35:32 2026 GMT
Not After : Jan 13 20:35:32 2026 GMT
Subject: CN=695d7214-8dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:fe:a8:00:42:1d:53:5c:85:bb:d1:19:e3:
76:63:69:df:64:65:27:74:73:d5:94:03:f6:e7:1d:
fd:2f:ee:ae:6e:3b:4f:d9:ba:ac:93:52:87:5a:39:
58:02:3b:3f:fa:3f:33:e5:d7:a5:8f:70:dd:0a:2a:
dc:b8:3f:22:42:16:76:14:32:ce:0f:02:56:e8:8a:
e6:cc:26:d5:8b:5b:55:1e:54:4c:07:4e:c4:9f:f1:
67:b2:99:41:d9:ed:6c:b1:9f:a0:87:c4:5f:8f:b5:
9d:2a:ac:cc:c6:62:f6:b9:48:20:b7:d2:48:55:87:
88:8d:1d:df:a1:0d:34:47:40:25:dd:98:52:e5:5e:
b4:48:ba:58:8f:5c:9f:1f:5c:4c:12:f1:38:07:47:
5f:42:8d:6d:11:dd:a8:62:cf:9b:e4:16:9a:41:28:
fd:3b:3c:f9:45:f5:b1:a1:3b:71:b9:19:90:04:77:
63:16:a0:44:b4:7b:19:79:4d:ba:3b:44:a1:1e:45:
fd:6b:af:51:0d:40:36:41:62:13:8c:56:00:9f:29:
a7:2c:80:56:d0:82:ec:7e:7d:9b:6e:d5:04:f3:c4:
9e:2a:cb:ac:e6:c3:04:fb:bd:e1:ca:84:06:81:2e:
b6:a4:99:18:32:54:1d:6d:ae:86:6e:4f:e8:09:66:
ed:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:79:A7:C1:33:85:A6:DF:C8:E6:53:CC:68:C7:09:F0:B9:18:9C:08
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:e6:bb:cf:c0:73:9a:ee:9a:c0:f2:c7:aa:87:eb:6b:2d:11:
96:f4:47:1a:bf:83:c6:0b:69:65:a8:49:56:93:0d:16:10:ad:
f3:43:79:9b:d5:d8:6e:f0:49:a4:ad:01:42:1c:13:57:33:d9:
ca:a9:48:5a:85:a3:34:6a:3c:0c:41:29:a4:2f:1a:9e:6b:12:
04:68:fd:d4:a3:61:3a:b6:67:32:7c:e0:af:da:51:0f:53:b6:
a5:6c:89:82:62:d1:2a:07:38:37:60:67:31:aa:5f:1a:be:30:
86:98:92:2e:21:a5:37:cd:a7:53:24:06:48:20:93:dc:b4:5e:
4c:b5:5b:1e:84:df:6c:71:f0:cd:1d:c0:a7:c8:ab:ed:e2:d5:
21:25:8b:b6:89:18:0f:ea:79:af:24:64:21:d1:64:18:12:1f:
01:85:27:b1:cd:4a:fc:9a:c5:12:e1:31:9c:1b:32:b6:f7:64:
68:12:00:c6:da:73:02:4e:92:e8:b5:c5:2c:3e:1d:22:94:48:
db:a8:9f:86:a7:8a:ee:dc:19:55:18:2f:5d:94:3d:03:9b:aa:
79:57:c3:ce:fc:4f:55:8d:06:55:a2:7b:cc:cf:c6:b8:04:ff:
a5:cb:45:a4:2d:df:0c:48:2c:72:c9:83:84:91:55:2e:64:27:
55:03:3f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 7 22:12:14 2026 by rpki-client