This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
File: 5iRBKkJ5WJuewvqzIiurBibTElo.mft (raw, json)
Hash identifier: 7qhmVnvne77yx4iXTtV2fV2FkooI2x0ziNpz3ypPbAU=
Subject key identifier: E3:18:1B:34:6D:6D:99:07:FD:EF:56:00:C1:42:A8:FF:C7:EF:DF:36
Authority key identifier: E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
Certificate issuer: /CN=A9168336/serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Certificate serial: 0CE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
Manifest number: 0CD4
Signing time: Thu 18 Dec 2025 17:59:40 +0000
Manifest this update: Thu 18 Dec 2025 17:59:39 +0000
Manifest next update: Thu 25 Dec 2025 17:59:39 +0000
Files and hashes: 1: 5iRBKkJ5WJuewvqzIiurBibTElo.crl (hash: YKkNqB29yblTsclJFHdgVQf4CaYBdmxrMqC+64fCuN4=)
2: 6B6223B294D011F08FAC1420C4F9AE02.roa (hash: CYogDkkcuThBt0m18SN49Ve4wWE9zs9AU2x6u6Qm/Cc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:59:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3302 (0xce6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168336, serialNumber=E624412A4279589B9EC2FAB3222BAB0626D3125A
Validity
Not Before: Dec 18 17:59:39 2025 GMT
Not After : Dec 25 17:59:39 2025 GMT
Subject: CN=6944410c-0233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:a1:09:84:92:84:19:42:a0:88:ae:73:ae:
1a:04:06:3f:55:c2:36:70:b1:cc:8c:da:3c:2b:99:
8f:f7:92:85:f4:08:56:a1:13:07:69:47:64:9f:fd:
6a:f2:81:c4:48:e7:cc:b9:f8:e3:c5:a2:f8:f4:12:
72:ed:1c:b7:e0:08:62:03:6d:c0:20:f5:19:c8:a1:
54:ca:3e:66:d8:cd:f3:74:81:88:89:e3:00:c4:3c:
21:d9:23:8c:00:ca:f7:06:c0:cc:1b:05:32:ee:bb:
7c:b8:3b:de:16:c9:5e:fa:20:3d:9b:07:d5:3e:f0:
5b:7f:f7:9e:34:6f:a1:5e:34:86:2b:a3:44:96:50:
d0:67:87:2f:be:af:01:2e:00:75:4c:45:8d:14:d1:
dc:08:83:d6:d1:e9:4d:1b:3e:52:7e:f2:2a:ef:3b:
b2:69:9f:8f:3f:d6:d1:4d:ed:cd:6b:f3:d1:bb:30:
71:68:d6:01:a5:c7:76:b7:3e:32:29:cb:55:b6:e6:
0c:4e:f1:9f:da:c8:eb:49:a7:a4:23:be:d8:17:6f:
37:08:07:8a:0e:ee:e2:fe:ae:a1:22:fb:56:4b:77:
3d:92:45:f8:ff:d8:88:69:b7:45:b8:fa:ea:31:5d:
da:02:75:d7:f0:af:c5:b7:74:20:93:06:7b:71:75:
0d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:18:1B:34:6D:6D:99:07:FD:EF:56:00:C1:42:A8:FF:C7:EF:DF:36
X509v3 Authority Key Identifier:
keyid:E6:24:41:2A:42:79:58:9B:9E:C2:FA:B3:22:2B:AB:06:26:D3:12:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iRBKkJ5WJuewvqzIiurBibTElo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168336/19F75A6601CD11EAB865EA22C4F9AE02/5iRBKkJ5WJuewvqzIiurBibTElo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:ad:de:ea:2f:23:5b:72:44:bd:53:7e:af:87:3b:bf:ab:16:
fb:36:dc:88:3d:80:b1:63:b7:62:a9:36:e2:71:42:bf:68:97:
e3:4d:f6:38:2c:6f:de:92:ba:af:32:5e:d6:6c:78:f8:d9:e2:
46:01:8f:40:e2:42:27:21:d3:07:0e:08:6a:f8:6d:7c:84:f5:
67:47:9e:43:6e:73:f4:9c:3f:95:70:28:7b:52:c4:98:81:38:
ee:f2:5e:a7:c1:55:0e:70:2e:0a:d8:13:7c:80:4a:41:49:e9:
35:a7:05:c7:36:69:79:97:1d:39:00:50:c9:e4:a8:2a:fa:63:
8d:8d:e3:66:d5:34:eb:98:7c:26:a1:2e:d7:ce:3a:4c:75:21:
3f:44:35:e1:6d:08:bc:96:7f:58:26:cd:82:75:d5:9e:3a:a0:
f4:11:ed:2c:8c:c8:57:7e:1a:1c:e6:7f:32:ef:fa:f2:fa:f8:
68:58:a8:4a:39:29:b5:01:ce:94:e1:4d:55:c1:d0:78:be:c2:
30:9d:46:bf:45:a4:35:96:12:74:35:4f:20:ce:28:94:48:b9:
7b:a4:65:44:ec:5e:23:87:1f:c6:54:ec:14:43:1a:fb:4d:98:
10:7e:32:38:21:67:83:86:7b:ac:4e:76:a5:49:fd:7a:d8:5c:
38:48:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:19 2025 by rpki-client