This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
File: 5wYdsiKDjeaKk84h7ykbBVQthyY.mft (raw, json)
Hash identifier: PdU+RDua0ph8ka7c1pXIdRipJWkYQP38UbuvyhSG0zI=
Subject key identifier: 29:4E:1B:CA:72:A5:34:B8:8B:4C:C2:B9:A1:39:D7:11:9B:2A:E1:C7
Authority key identifier: E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26
Certificate issuer: /CN=A919D3C2/serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726
Certificate serial: 1B65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
Manifest number: 1B5A
Signing time: Sat 20 Dec 2025 16:04:50 +0000
Manifest this update: Sat 20 Dec 2025 16:04:49 +0000
Manifest next update: Sat 27 Dec 2025 16:04:49 +0000
Files and hashes: 1: 5wYdsiKDjeaKk84h7ykbBVQthyY.crl (hash: IGnzTwkiqypXExAdRmfxdqsF82As0A7ocLLedRw/obM=)
2: A6B5F55C23F911E79BE44454C4F9AE02.roa (hash: F2ak73nonVZ20QRrcSfPPZHYy8EZQeLDHTDgpyvlwUk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl
rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7013 (0x1b65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D3C2, serialNumber=E7061DB222838DE68A93CE21EF291B05542D8726
Validity
Not Before: Dec 20 16:04:49 2025 GMT
Not After : Dec 27 16:04:49 2025 GMT
Subject: CN=6946c921-5a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:c3:c9:7c:93:22:7c:5c:e7:a7:ba:2c:3a:
cc:2a:50:e0:cd:f3:16:b8:39:0e:18:d5:cf:22:27:
25:ab:7e:fc:e4:7b:f8:42:11:7b:55:42:24:15:09:
b6:8f:cd:34:c3:fb:2b:67:8b:a8:2e:df:68:0f:b2:
8c:96:86:e4:51:5c:4a:08:6b:53:b1:9a:27:20:b1:
63:8b:69:5b:37:a0:aa:e6:ad:56:6b:f4:24:34:3f:
00:a7:88:9a:9a:c9:ab:56:6c:4f:3d:ff:44:ad:b2:
66:78:14:c2:be:47:3b:f6:b3:af:f1:e0:31:a2:8f:
9a:57:2c:e4:0e:cc:0f:b0:80:ec:27:3a:1c:0f:1d:
48:9a:97:c8:a4:43:22:49:53:da:0c:a6:32:1b:f4:
4b:66:19:49:48:5f:93:af:aa:be:af:9c:ad:b4:56:
cc:1e:88:72:25:45:1c:2e:0b:b0:35:3a:f1:bb:1b:
a3:bb:3d:79:d5:70:3d:ad:e7:20:ce:ab:ce:c0:3d:
57:45:1a:2c:5b:d3:38:0d:b9:55:7e:a6:f5:a8:27:
07:35:23:8b:0a:3d:d7:81:1d:40:ef:22:bc:83:74:
e0:02:2a:c7:8e:61:fa:a4:d1:0a:17:d0:49:4e:5f:
64:48:a4:63:96:24:dd:3f:5c:e4:93:be:68:64:49:
0b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4E:1B:CA:72:A5:34:B8:8B:4C:C2:B9:A1:39:D7:11:9B:2A:E1:C7
X509v3 Authority Key Identifier:
keyid:E7:06:1D:B2:22:83:8D:E6:8A:93:CE:21:EF:29:1B:05:54:2D:87:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5wYdsiKDjeaKk84h7ykbBVQthyY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D3C2/72D7CFD623F811E79589D752C4F9AE02/5wYdsiKDjeaKk84h7ykbBVQthyY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:08:ec:82:8b:57:e6:5b:9b:e7:88:68:e6:03:9f:7c:5b:fd:
c1:a2:f3:7e:47:62:9f:ed:c2:d7:4c:c9:76:c0:2d:49:fb:5d:
6a:a6:98:0c:af:d3:2d:b9:59:35:48:ef:bb:cf:ee:e9:42:33:
4c:a2:3b:bc:07:f4:b2:83:48:54:0e:3d:4e:df:b4:e1:c4:8b:
17:f7:ca:53:92:2b:4f:38:09:e5:5b:cf:d0:dd:6d:f9:9a:e1:
44:87:88:e4:4b:18:b5:62:f0:51:23:1d:de:57:48:32:dd:10:
85:0c:c7:9b:e2:c3:e1:49:67:15:5f:47:b6:64:56:99:3f:c7:
1b:41:b3:80:95:08:b9:1a:67:fa:a0:ff:fd:86:d3:fd:32:47:
b2:66:be:a5:08:07:1f:5a:cb:7c:b1:93:2e:50:7c:5f:6d:0e:
60:ea:c2:cb:dd:27:20:fa:4b:a1:cf:9d:be:31:dc:56:df:50:
10:15:64:f1:70:1f:5a:94:7e:e6:dc:13:73:d6:ce:6c:84:46:
71:f0:55:51:2d:2b:70:8f:51:35:55:f0:94:72:e7:49:77:75:
2e:cb:3e:d4:b4:c2:65:2a:29:a2:bd:87:1e:15:46:b0:2e:db:
5d:7f:28:b1:6c:2f:b4:26:f6:12:8c:9f:61:8f:2d:26:59:25:
25:a0:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 14:41:11 2025 by rpki-client