This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
File: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft (raw, json)
Hash identifier: 136+gopHZhyYI2hcXZ5urtQmA0qJauJY62NdMQkD8nE=
Subject key identifier: 23:7F:AA:6A:4D:08:54:ED:FF:60:F8:0B:05:96:CA:1D:88:1D:88:47
Authority key identifier: E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
Certificate issuer: /CN=A91652F7/serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Certificate serial: 0915
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
Manifest number: 0908
Signing time: Sat 20 Dec 2025 19:43:47 +0000
Manifest this update: Sat 20 Dec 2025 19:43:47 +0000
Manifest next update: Sat 27 Dec 2025 19:43:47 +0000
Files and hashes: 1: 5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl (hash: aL+hmWO23mDYt7qqTM1YV5jwQuchSRcovbxmsSq3EAo=)
2: A12DD18E2F1C11EDA3E29B09C4F9AE02.roa (hash: qDuXN79IYo1ayNnk4ZRYUkR9U2DK4zQbiGKyGGdoBrg=)
3: A29A66FE2F1C11EDA3E29B09C4F9AE02.roa (hash: bgNv+IqWCSXLvojk2Z7PhxXcctTDA8/7IvD4X7CUQGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:43:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2325 (0x915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91652F7, serialNumber=E502757C617C21D47B1B3559C09D6EA7C3AFE403
Validity
Not Before: Dec 20 19:43:47 2025 GMT
Not After : Dec 27 19:43:47 2025 GMT
Subject: CN=6946fc73-571a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:da:2c:47:6c:af:9c:94:d2:8f:ce:db:88:
93:b8:fc:d5:b5:16:10:7d:6e:2d:1d:52:e2:87:d6:
e6:42:bb:6a:73:1a:95:c5:fa:19:cc:26:21:b0:69:
6c:48:3c:1a:1a:07:c3:5a:7f:78:f9:77:29:00:38:
a9:f1:0b:94:23:f0:53:09:6b:21:d2:bf:89:3f:9d:
6f:f3:c1:a8:d7:89:46:57:d0:c2:13:8d:f0:18:d6:
67:64:94:23:30:d8:4f:5d:6e:18:f5:ec:20:8c:ce:
d4:99:25:a5:96:6b:59:bf:2a:47:c5:b4:1d:9a:4e:
31:12:1e:ae:f5:fb:53:fe:bc:f2:dc:6b:ac:69:de:
79:da:31:db:08:cf:0e:7c:73:c8:a1:24:7c:d6:4c:
d0:91:91:6e:b6:3b:2b:27:d5:e3:4b:29:5d:4f:b7:
96:df:03:75:05:dc:32:fc:11:ef:6f:b7:3b:fa:01:
fd:f4:17:78:01:bc:97:c5:97:51:82:56:c1:7a:4d:
f2:4f:62:cd:7f:66:a1:10:d6:f5:3d:32:a5:bb:53:
ec:56:95:04:8b:f3:7d:21:61:6b:7d:2e:c7:45:bb:
d8:82:e9:da:bd:29:2a:d3:eb:79:5a:f7:f8:d2:c5:
7a:1c:ee:4c:e8:1f:9c:65:76:a1:7f:94:28:7b:e6:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7F:AA:6A:4D:08:54:ED:FF:60:F8:0B:05:96:CA:1D:88:1D:88:47
X509v3 Authority Key Identifier:
keyid:E5:02:75:7C:61:7C:21:D4:7B:1B:35:59:C0:9D:6E:A7:C3:AF:E4:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91652F7/7CC45FAEBAAF11EAA6DD1A3DC4F9AE02/5QJ1fGF8IdR7GzVZwJ1up8Ov5AM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:29:ad:53:f0:e7:11:44:c3:c4:31:1d:02:db:78:1e:20:08:
32:84:3c:fe:8c:e3:bc:b9:19:35:ee:ab:68:a0:a3:1b:40:0a:
ba:0b:ed:d3:82:d7:4b:6f:3e:e8:4a:d0:e5:9a:ca:fd:71:77:
1c:b5:9e:46:1d:e0:a6:6f:ee:41:2f:ef:0f:21:2d:f3:9c:28:
cb:93:e4:b7:8c:33:04:e8:1f:32:3d:dc:87:e0:28:1d:71:fe:
21:86:98:48:32:97:4a:3f:21:90:4c:f1:fe:e5:86:af:c0:bb:
85:88:e5:c1:11:5c:75:97:d2:48:20:3d:64:93:15:2c:4b:71:
02:ec:ba:68:49:ee:ba:70:af:99:4e:68:1f:4b:9e:86:f5:15:
8a:50:dc:81:63:21:19:c6:36:4d:0d:0d:53:83:a9:06:1d:e1:
c8:ce:9a:f5:33:4d:f4:a9:20:32:e1:20:f1:c4:39:83:c0:fb:
2e:3e:00:72:aa:8c:a6:a5:cf:64:79:65:37:2e:0d:ab:88:d5:
8e:19:64:9e:9b:2c:0f:12:e5:fa:94:60:3e:a8:c1:f0:3e:a5:
58:a1:50:e5:6c:de:4a:bd:20:d8:27:bf:ac:44:92:67:c6:72:
29:0b:ac:75:1a:06:7f:a9:7f:15:b7:48:7c:97:c8:b1:fd:75:
32:8d:07:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUyRjcxMTAvBgNVBAUTKEU1MDI3NTdDNjE3QzIxRDQ3QjFCMzU1OUMwOUQ2RUE3
QzNBRkU0MDMwHhcNMjUxMjIwMTk0MzQ3WhcNMjUxMjI3MTk0MzQ3WjAYMRYwFAYD
VQQDDA02OTQ2ZmM3My01NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu3HaLEdsr5yU0o/O24iTuPzVtRYQfW4tHVLih9bmQrtqcxqVxfoZzCYhsGls
SDwaGgfDWn94+XcpADip8QuUI/BTCWsh0r+JP51v88Go14lGV9DCE43wGNZnZJQj
MNhPXW4Y9ewgjM7UmSWllmtZvypHxbQdmk4xEh6u9ftT/rzy3Gusad552jHbCM8O
fHPIoSR81kzQkZFutjsrJ9XjSyldT7eW3wN1Bdwy/BHvb7c7+gH99Bd4AbyXxZdR
glbBek3yT2LNf2ahENb1PTKlu1PsVpUEi/N9IWFrfS7HRbvYgunavSkq0+t5Wvf4
0sV6HO5M6B+cZXahf5Qoe+brewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCN/qmpN
CFTt/2D4CwWWyh2IHYhHMB8GA1UdIwQYMBaAFOUCdXxhfCHUexs1WcCdbqfDr+QD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTJGNy83Q0M0NUZBRUJB
QUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElkUjdHelZad0oxdXA4T3Y1
QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVRSjFmR0Y4SWRSN0d6Vlp3SjF1cDhPdjVBTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTJGNy83Q0M0NUZBRUJBQUYxMUVBQTZERDFBM0RDNEY5QUUwMi81UUoxZkdGOElk
UjdHelZad0oxdXA4T3Y1QU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADKa1T8OcRRMPEMR0C23geIAgyhDz+jOO8uRk17qtooKMbQAq6C+3T
gtdLbz7oStDlmsr9cXcctZ5GHeCmb+5BL+8PIS3znCjLk+S3jDME6B8yPdyH4Cgd
cf4hhphIMpdKPyGQTPH+5YavwLuFiOXBEVx1l9JIID1kkxUsS3EC7LpoSe66cK+Z
TmgfS56G9RWKUNyBYyEZxjZNDQ1Tg6kGHeHIzpr1M030qSAy4SDxxDmDwPsuPgBy
qoympc9keWU3Lg2riNWOGWSemywPEuX6lGA+qMHwPqVYoVDlbN5KvSDYJ7+sRJJn
xnIpC6x1GgZ/qX8Vt0h8l8ix/XUyjQcN
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:45:58 2025 by rpki-client