This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
File: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft (raw, json)
Hash identifier: f5Oh83oHjTnuBXViUT71H9Tt6v9NcISF/Lq0yVSlYuc=
Subject key identifier: 6E:B2:DA:C4:5B:DE:67:36:B1:F6:CB:07:B4:98:7E:03:0F:20:10:FC
Authority key identifier: E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0
Certificate issuer: /CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
Manifest number: DF
Signing time: Fri 19 Dec 2025 04:37:20 +0000
Manifest this update: Fri 19 Dec 2025 04:37:19 +0000
Manifest next update: Fri 26 Dec 2025 04:37:19 +0000
Files and hashes: 1: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl (hash: ogASN1J6QGTcwM2y0bDg88wMetmZexOFoWIq7OzBYS8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl
rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:37:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B633, serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0
Validity
Not Before: Dec 19 04:37:19 2025 GMT
Not After : Dec 26 04:37:19 2025 GMT
Subject: CN=6944d680-2a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:da:d6:0f:39:ca:e1:e9:4f:1f:18:e2:75:
f2:19:04:55:84:26:93:e0:22:53:43:2a:4e:1d:56:
62:c3:95:96:d2:9b:04:3d:14:f4:7b:6a:e1:6d:a4:
98:df:d9:1d:80:7f:97:4f:c9:88:c4:eb:30:18:0c:
1d:e8:32:21:7d:ec:64:ff:61:b8:94:72:24:00:7c:
64:22:15:e1:b4:9f:fb:70:b2:bd:1f:bb:d1:67:96:
bd:c8:25:8d:06:0f:5a:ad:6f:9f:08:c5:42:6b:df:
d0:1c:ef:85:3f:eb:d5:a9:53:59:66:4d:5a:5e:64:
59:3a:5c:b8:a9:b6:60:e2:c4:dd:76:d2:34:b0:e0:
23:d7:db:96:3a:ec:84:5d:b7:ac:ba:a4:0c:48:85:
51:56:67:6a:49:bd:90:60:42:06:18:02:f1:a0:ef:
1e:21:aa:f7:c4:24:d9:a1:05:32:bf:64:e1:e7:83:
8e:eb:52:5e:fe:39:3b:99:cb:62:ee:da:14:a5:e2:
14:28:6b:dd:7f:b8:a6:43:9c:1f:d3:1b:31:38:62:
2f:2f:47:e1:1f:b4:1e:0f:1e:0f:08:6a:46:a1:dd:
d6:9b:29:11:cb:3d:ba:25:e4:99:03:73:df:d9:0f:
9d:d8:a4:24:e7:1a:a3:44:c7:24:fb:72:54:a1:bc:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B2:DA:C4:5B:DE:67:36:B1:F6:CB:07:B4:98:7E:03:0F:20:10:FC
X509v3 Authority Key Identifier:
keyid:E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:83:6c:93:3f:f3:8c:d3:3f:94:4c:64:ac:bf:11:a7:e6:74:
74:00:ad:e0:79:f6:9f:8c:66:e2:90:75:3b:bd:ee:16:31:af:
21:59:e4:44:1d:6b:f0:74:ca:69:53:d9:10:97:2f:b5:5b:0b:
91:e4:b3:66:7c:1a:29:7b:54:f2:ec:a5:2c:65:c6:2d:5c:aa:
76:9a:6f:00:7a:d5:03:24:82:05:36:0c:22:ea:06:f2:55:43:
74:f5:08:f2:c5:7a:d2:58:37:5c:d4:71:6f:de:1d:f2:85:bb:
04:5e:27:1c:98:4b:ae:a9:99:d3:2d:e6:f3:73:dd:ce:38:e0:
b5:a8:03:c0:f3:ef:b1:3a:a9:ab:40:f2:ea:b7:c0:78:35:44:
0b:72:58:de:66:67:db:52:46:e0:df:5f:d0:dd:55:2f:4a:b0:
1c:f3:0c:a7:ac:88:4d:8c:f4:0d:01:92:70:29:2f:05:b9:ca:
a6:45:b3:70:1d:4e:85:48:bd:1a:f1:28:53:9c:51:4a:f0:b4:
ac:c1:93:34:dc:97:a7:8b:c7:30:24:a5:3f:0b:44:cf:b8:26:
14:8e:1b:b5:9c:8f:3b:49:ea:a6:c0:82:9e:9a:5a:0c:f6:ac:
7c:f2:2a:82:49:eb:9b:bf:94:05:ec:26:3b:fc:48:19:00:c1:
1d:fa:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:51:05 2025 by rpki-client