This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
File: xHI5__XPeIUhf8bKkBt6MngIMfA.mft (raw, json)
Hash identifier: p8fF+fOLm5SGjYznkCIC9GerKRaCDwfw4AJjh07HFKM=
Subject key identifier: 0D:58:94:BE:29:12:23:07:1E:8C:8A:DE:46:52:BE:74:97:45:64:78
Authority key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0
Certificate issuer: /CN=A91761A9/serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
Certificate serial: 04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
Manifest number: 03
Signing time: Tue 23 Dec 2025 06:59:39 +0000
Manifest this update: Tue 23 Dec 2025 06:59:38 +0000
Manifest next update: Tue 30 Dec 2025 06:59:38 +0000
Files and hashes: 1: xHI5__XPeIUhf8bKkBt6MngIMfA.crl (hash: iKxBrAwTKqppYZPRO2awC3EtKO8hFR1BHl5+fR/yrHM=)
2: A9AB917CDF2A11F092E976D2656F56BC.roa (hash: hFybGfFrMHjkE0yROGxNrNMcjfr38O9Z4PJhiWuMpCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl
rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:21:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0
Validity
Not Before: Dec 23 06:59:38 2025 GMT
Not After : Dec 30 06:59:38 2025 GMT
Subject: CN=694a3ddb-61d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:68:b3:ef:c9:f0:2d:26:08:21:d8:78:96:
7d:15:e2:d4:97:00:05:3d:c6:b0:ae:a2:68:ef:4e:
7d:f0:3c:bb:cd:d8:d5:61:9f:01:c1:e3:a1:c1:74:
99:81:e5:dc:e4:29:93:57:f6:c8:7a:1a:57:94:db:
89:78:c5:81:ef:81:ed:48:fd:a7:4b:f0:d4:c2:49:
3a:ae:42:cf:b7:d3:50:28:18:82:8b:97:bb:85:08:
71:03:e8:75:85:32:cc:12:87:1d:f0:f6:00:99:60:
c5:50:5e:59:26:4c:65:7d:d1:d3:b6:a7:e5:bf:b8:
b3:6e:07:02:0f:d9:81:ec:7e:d6:d7:c4:e2:d4:bf:
b7:61:c9:76:71:b9:fe:6c:70:1e:44:0e:89:ab:fc:
a9:16:99:05:bb:b6:66:f8:df:63:ea:e4:77:52:85:
fa:38:fa:4d:53:30:08:f7:bf:49:e9:e1:10:85:dc:
58:23:83:36:fc:fa:47:55:ac:2b:a2:1f:75:3e:7c:
3b:0d:1b:e6:7c:d6:d0:9e:f8:3b:d0:44:cd:fc:cd:
5b:b1:7c:31:34:dc:2c:20:a1:ae:ae:17:77:eb:18:
b0:a4:47:e0:a9:76:a3:6a:54:9e:58:63:88:97:34:
77:c8:1a:87:3c:55:dc:12:65:88:54:4b:54:4f:f9:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:58:94:BE:29:12:23:07:1E:8C:8A:DE:46:52:BE:74:97:45:64:78
X509v3 Authority Key Identifier:
keyid:C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:10:8e:9c:91:14:3a:db:c2:77:36:f2:3d:9a:69:b6:28:37:
ad:29:d4:eb:1c:64:44:b1:18:00:55:9d:8f:53:4d:8f:fe:d8:
da:ee:bb:70:d1:9b:d8:8f:1a:9d:1d:e5:43:03:c3:a5:01:b5:
ad:dd:6d:df:a9:21:25:d8:2a:ca:79:67:25:74:57:cd:f5:4f:
19:ee:9c:35:43:93:8f:54:75:6f:cf:a3:14:21:9e:83:67:96:
e3:2d:6b:a7:21:88:e2:4a:d4:eb:19:b7:f9:8c:65:c7:bd:84:
1f:18:c3:4e:a7:b4:71:c7:09:d7:aa:b7:03:f4:a2:91:1d:e4:
63:4b:01:91:35:7e:0d:04:5f:70:7d:ee:6f:b2:74:0e:7a:11:
cb:b8:15:72:4f:25:b6:4b:dc:cc:10:57:0a:33:35:17:5d:50:
8c:7c:75:ce:95:7c:18:00:fe:c2:5b:73:5c:2e:20:8e:ad:f1:
2c:de:3f:87:da:d3:7e:8f:35:6c:17:b9:26:9a:6a:81:34:f0:
5b:6f:e8:74:46:14:31:60:ea:b1:60:f1:a9:06:99:3a:24:4a:
34:e4:2e:dd:bb:15:67:92:0e:a8:38:bf:0a:b8:47:15:c1:a0:
b3:49:3a:c0:6d:c0:38:e0:bb:c4:93:fe:59:c0:12:a5:8a:d9:
16:da:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:02:16 2025 by rpki-client