This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
File: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft (raw, json)
Hash identifier: 4pKhT+0mBueLzsY/xBi/qwBlNVzMwOhQQP2jhFhseGo=
Subject key identifier: D9:61:2B:40:2F:81:E0:44:72:55:F8:B2:1D:8A:F1:D7:84:29:E0:D3
Authority key identifier: BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
Certificate issuer: /CN=A9186B80/serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Certificate serial: 0573
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
Manifest number: 0567
Signing time: Tue 30 Dec 2025 22:34:33 +0000
Manifest this update: Tue 30 Dec 2025 22:34:33 +0000
Manifest next update: Tue 06 Jan 2026 22:34:33 +0000
Files and hashes: 1: vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl (hash: ADR3LUU3gqJwzhxaAXy0IX2wFvNNs9pAP8MSroHpjm4=)
2: 37FE553E5CAB11F08FCD0029C4F9AE02.roa (hash: GLm2AKslZ/503xaJdyFMTW6e2t7uEKz1XmKi3aW5E9E=)
3: 9B741CFE0C3411EDB8619843C4F9AE02.roa (hash: EaQ615UaoSlbYGe5kp9Ft1URPJxHKbUFtgfGcBgBPeU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 22:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1395 (0x573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=BD1E7E641FFD96D5746155FC421B17DDC1AA7762
Validity
Not Before: Dec 30 22:34:33 2025 GMT
Not After : Jan 6 22:34:33 2026 GMT
Subject: CN=69545379-114a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:0a:26:2e:94:9e:04:6e:00:cb:11:d2:42:
72:ef:5b:f2:2c:6c:de:22:0e:ba:6a:33:23:e2:8c:
bd:11:dc:56:c2:fc:78:e0:0b:f1:2b:a0:38:e0:00:
ad:ae:42:e0:f8:9c:a2:fb:3d:0f:c9:89:72:cb:a8:
61:18:b5:c9:9d:db:38:c5:7e:46:46:5d:19:a6:bf:
95:e7:a2:25:65:95:30:8a:38:7a:40:33:0d:8e:77:
ff:e7:89:1a:ee:5b:9c:9f:1c:17:c6:d4:51:4b:d5:
1b:7c:d2:a6:70:51:01:0c:aa:26:de:f3:d9:e7:3b:
d0:d9:69:3a:16:37:40:1c:4c:45:eb:2a:ea:f5:4a:
a9:87:90:03:e2:8f:08:63:45:a4:09:de:ec:a1:c7:
b6:a1:5c:6d:cf:a5:76:7d:a1:61:f8:f5:a6:07:a3:
9e:b0:9e:29:9a:37:8a:97:d7:93:48:bf:67:4e:5f:
18:e9:47:ea:24:ae:14:7e:89:28:36:11:91:72:43:
d9:f7:c3:93:9b:3f:bc:37:b8:0d:e9:c6:0a:4c:ca:
52:7e:69:20:c4:fa:d8:0a:5c:0e:2c:e3:f3:2b:ef:
39:a4:b0:76:b0:f9:9d:3a:12:c9:b7:8a:1a:53:8a:
90:28:eb:3e:20:f9:f9:57:fa:f5:a8:2f:ba:cc:fd:
88:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:61:2B:40:2F:81:E0:44:72:55:F8:B2:1D:8A:F1:D7:84:29:E0:D3
X509v3 Authority Key Identifier:
keyid:BD:1E:7E:64:1F:FD:96:D5:74:61:55:FC:42:1B:17:DD:C1:AA:77:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/AE6AA1B4123B11EC8A135F42C4F9AE02/vR5-ZB_9ltV0YVX8QhsX3cGqd2I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:71:b1:d2:b0:aa:27:23:5c:e8:1c:98:50:f8:6a:96:53:1e:
73:d5:f2:65:98:ac:fb:ee:13:25:9f:6b:4c:92:f5:27:15:c8:
6a:c9:82:53:9a:70:ee:d7:56:88:bd:1b:5f:02:91:24:76:dd:
6a:7d:d5:19:99:ac:ac:8a:7f:a5:19:51:f4:17:84:62:45:96:
08:6f:20:5c:8c:47:84:6b:c5:7b:ce:b7:0e:f1:c7:09:00:ab:
be:a2:c4:21:5a:a9:76:66:6a:4d:d1:42:da:83:76:de:0f:8c:
d6:21:5e:58:d2:13:2c:be:a9:65:b1:f4:cc:ea:fc:96:02:93:
6a:06:9f:18:75:f5:11:5c:72:2b:c3:c2:6e:ec:7c:1b:62:11:
45:64:99:fd:0a:70:0e:63:c7:8b:d7:9c:7d:09:80:cf:2e:4d:
51:64:75:68:34:05:22:46:c7:2b:95:f1:bc:4b:08:59:8c:f6:
64:57:b0:75:1c:20:08:4a:72:87:11:d6:3f:25:79:7c:e4:cf:
fb:87:e8:a3:aa:c4:67:0e:3e:42:0d:9d:4b:8f:d8:72:09:57:
2d:d2:43:67:80:33:51:2f:c3:a4:58:62:9a:cd:0b:87:a4:a1:
08:93:ab:e1:fb:8e:b4:49:ba:57:39:8f:4e:d5:f7:e2:27:bd:
a9:bd:f6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:41:18 2025 by rpki-client