This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
File: NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft (raw, json)
Hash identifier: 34a46hAvaQ66n/AIoxXGPWufLrzivB6Rnn2ahLgFMiE=
Subject key identifier: 85:B9:F7:F2:88:F0:0A:15:95:9E:4E:78:78:A5:D0:B6:AA:1D:4F:A9
Authority key identifier: 35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
Certificate issuer: /CN=A916714C/serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Certificate serial: 05E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
Manifest number: 05DB
Signing time: Thu 18 Dec 2025 22:21:49 +0000
Manifest this update: Thu 18 Dec 2025 22:21:48 +0000
Manifest next update: Thu 25 Dec 2025 22:21:48 +0000
Files and hashes: 1: NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl (hash: 7r9yvuqzQSmRyVx+/2y4f7JsYugA9CC+EdmfxjZjFMg=)
2: E50353FEDFED11EBA155C712C4F9AE02.roa (hash: IIVlt7G/+5szlJKKwOxccwy55c5N2K1rqxgqpnj4uFE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1505 (0x5e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916714C, serialNumber=353E48875376C6DB97E3426365CC7F18C9456877
Validity
Not Before: Dec 18 22:21:48 2025 GMT
Not After : Dec 25 22:21:48 2025 GMT
Subject: CN=69447e7c-6c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:94:65:d3:04:7a:b4:b0:79:38:1f:09:76:
bb:99:fc:b2:fd:81:e3:db:f1:5b:7d:87:e5:7d:88:
e5:d2:86:c8:04:40:29:e3:69:98:64:8e:13:22:5d:
7f:6f:fa:d5:fc:fb:7f:60:1d:48:cb:2b:3b:9b:30:
f2:0b:ff:69:ec:b5:9e:81:57:0c:93:bc:93:56:69:
de:10:6f:f8:4f:ae:ff:b6:34:0c:8e:09:f8:90:3c:
76:e5:b5:e9:5f:46:d9:c4:96:43:b5:83:2d:19:cb:
85:f3:97:33:72:50:3d:21:8a:d6:5c:b7:9b:e3:8a:
e0:4c:30:0f:d6:43:03:38:b2:cb:ff:26:41:10:31:
a0:a7:db:b5:73:8b:cd:f4:5e:1a:bc:60:02:84:6a:
5e:2f:66:2a:fa:7b:97:02:14:37:7b:ec:bd:f6:84:
77:91:0d:69:51:5b:45:eb:63:c6:2e:5d:40:de:6c:
fd:ec:dc:13:63:6f:04:58:ca:cf:95:f1:e5:40:12:
2d:8e:fa:ef:e5:bd:c7:cf:ae:ad:cf:67:08:9a:80:
4c:ef:69:95:81:7c:17:24:0d:9d:ee:9d:90:a2:98:
5d:8b:c1:94:62:6a:b4:6c:6e:c8:de:b5:d2:2b:47:
ce:1b:6e:68:b7:55:22:31:1e:22:b6:f2:04:72:4d:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B9:F7:F2:88:F0:0A:15:95:9E:4E:78:78:A5:D0:B6:AA:1D:4F:A9
X509v3 Authority Key Identifier:
keyid:35:3E:48:87:53:76:C6:DB:97:E3:42:63:65:CC:7F:18:C9:45:68:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NT5Ih1N2xtuX40JjZcx_GMlFaHc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916714C/3FED6608DFEC11EB8F704D12C4F9AE02/NT5Ih1N2xtuX40JjZcx_GMlFaHc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0f:31:be:c3:87:41:b2:25:d4:f6:fc:54:5f:c0:9c:b8:35:
90:ff:94:7d:e0:de:15:48:33:cf:66:e6:f5:da:e4:00:66:6c:
7b:e9:26:cc:3a:5d:07:cb:5d:06:d5:d0:e1:c3:38:90:64:9a:
3f:9b:68:70:d5:77:10:70:44:b9:81:e2:1d:64:04:e3:b0:f3:
b4:1e:11:a8:0e:2a:5c:4d:c0:7c:8f:2f:bb:54:7c:f1:e7:d9:
22:29:26:2a:ee:d9:b8:cc:fa:8e:b4:1f:cb:46:7d:05:a1:e1:
f4:18:dc:ff:ea:cb:f7:50:a2:2f:ef:32:f5:74:bb:d4:37:41:
fd:c6:69:19:1d:15:17:7e:20:88:a3:65:db:9e:96:c0:33:62:
2a:c0:f0:12:f8:e5:ca:1e:d3:dc:41:4b:d5:57:b8:25:22:a7:
01:25:67:3c:56:c8:35:9e:20:74:22:04:19:d7:3e:6f:8e:f5:
4a:e2:e4:5a:05:7b:49:55:4a:31:66:d5:62:56:39:bb:2d:4b:
6e:d9:4d:4c:57:2e:8c:91:59:44:60:1d:d0:16:f5:9a:5c:04:
e8:7d:2d:1e:dd:5d:26:15:0e:8a:58:d7:77:2a:5a:b4:69:4b:
89:af:c5:ee:b6:30:9b:b3:d7:09:fe:91:5d:4b:a0:4e:28:8d:
a7:7d:90:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcxNEMxMTAvBgNVBAUTKDM1M0U0ODg3NTM3NkM2REI5N0UzNDI2MzY1Q0M3RjE4
Qzk0NTY4NzcwHhcNMjUxMjE4MjIyMTQ4WhcNMjUxMjI1MjIyMTQ4WjAYMRYwFAYD
VQQDDA02OTQ0N2U3Yy02Yzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvtSUZdMEerSweTgfCXa7mfyy/YHj2/FbfYflfYjl0obIBEAp42mYZI4TIl1/
b/rV/Pt/YB1Iyys7mzDyC/9p7LWegVcMk7yTVmneEG/4T67/tjQMjgn4kDx25bXp
X0bZxJZDtYMtGcuF85czclA9IYrWXLeb44rgTDAP1kMDOLLL/yZBEDGgp9u1c4vN
9F4avGAChGpeL2Yq+nuXAhQ3e+y99oR3kQ1pUVtF62PGLl1A3mz97NwTY28EWMrP
lfHlQBItjvrv5b3Hz66tz2cImoBM72mVgXwXJA2d7p2Qophdi8GUYmq0bG7I3rXS
K0fOG25ot1UiMR4itvIEck1T8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIW59/KI
8AoVlZ5OeHil0LaqHU+pMB8GA1UdIwQYMBaAFDU+SIdTdsbbl+NCY2XMfxjJRWh3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzE0Qy8zRkVENjYwOERG
RUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0dVg0MEpqWmN4X0dNbEZh
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05UNUloMU4yeHR1WDQwSmpaY3hfR01sRmFIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzE0Qy8zRkVENjYwOERGRUMxMUVCOEY3MDREMTJDNEY5QUUwMi9OVDVJaDFOMnh0
dVg0MEpqWmN4X0dNbEZhSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPDzG+w4dBsiXU9vxUX8CcuDWQ/5R94N4VSDPPZub12uQAZmx76SbM
Ol0Hy10G1dDhwziQZJo/m2hw1XcQcES5geIdZATjsPO0HhGoDipcTcB8jy+7VHzx
59kiKSYq7tm4zPqOtB/LRn0FoeH0GNz/6sv3UKIv7zL1dLvUN0H9xmkZHRUXfiCI
o2XbnpbAM2IqwPAS+OXKHtPcQUvVV7glIqcBJWc8Vsg1niB0IgQZ1z5vjvVK4uRa
BXtJVUoxZtViVjm7LUtu2U1MVy6MkVlEYB3QFvWaXATofS0e3V0mFQ6KWNd3Klq0
aUuJr8XutjCbs9cJ/pFdS6BOKI2nfZB/
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:03:15 2025 by rpki-client