This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
File: 5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft (raw, json)
Hash identifier: zfZcHQxgk54lS33Ec8J6LEpeWE41HSbWOEKmUDHEoho=
Subject key identifier: 01:9D:82:41:C0:EC:C1:D0:16:91:76:DC:A2:23:EF:AF:5E:D6:26:67
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Certificate issuer: /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial: 01F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
Manifest number: 01A5
Signing time: Fri 19 Dec 2025 03:31:03 +0000
Manifest this update: Fri 19 Dec 2025 03:31:03 +0000
Manifest next update: Fri 26 Dec 2025 03:31:03 +0000
Files and hashes: 1: 5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl (hash: CREV3BBM/XexV9mj/30nAXsPTtkc6f7YutEIvV0IT6M=)
2: 6D3C9D30195F11F08408FA45C4F9AE02.roa (hash: FZ/NGu+pR0tkuSwwrhipfnsWVH/uq5q1NIY0pCw+nnw=)
3: CF7CE212796211F08A60430EC4F9AE02.roa (hash: QSCP1VXGjOsAkF+YaOH9ee+5sgn/k8qDj+R2Y6lzkEw=)
4: C27C0758916B11EF81BBB521C4F9AE02.roa (hash: knvAEFQICzy9UWNTf7//TLhnGWTxbYH6LZgck2OeM7A=)
5: 6C8EAC7A195F11F08408FA45C4F9AE02.roa (hash: MiCHEEQJ2f3wRqKaenNbVNwcE/3dX2pDAlgvDrmpfeE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 498 (0x1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Validity
Not Before: Dec 19 03:31:03 2025 GMT
Not After : Dec 26 03:31:03 2025 GMT
Subject: CN=6944c6f7-ba60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:3c:7f:0d:57:fa:91:59:bd:c1:c4:b8:f2:
d5:b6:89:18:bd:d4:eb:22:7b:02:46:cd:65:f2:ae:
5e:10:a9:2c:4f:8d:03:0b:a1:75:23:e9:a3:da:af:
82:17:62:01:41:96:c8:7e:6b:cc:a3:ce:7b:ff:b3:
0b:12:53:74:71:ff:81:53:04:d0:35:e2:1c:3c:f8:
8d:97:f6:ed:68:8b:55:a2:09:c6:b7:84:4f:e2:33:
ef:e5:65:d6:96:8d:05:a3:3f:b5:b9:0d:4f:48:87:
e5:c4:89:88:27:70:0b:b0:2a:24:4e:8f:69:31:e7:
66:dd:dc:e7:4a:e3:a1:3b:3a:5d:05:6d:1c:72:52:
45:3c:09:6b:c3:31:57:55:cb:8b:07:7a:a2:1c:7c:
9b:74:a2:d6:38:ec:a3:32:61:6c:c3:8a:c1:c8:26:
d3:2a:67:12:04:90:3b:7a:09:8f:09:6e:8c:9e:ec:
1f:a2:15:f5:75:12:af:7d:39:ac:24:7a:60:77:5d:
28:fb:c8:63:6c:fa:df:86:c7:fd:81:5e:68:18:d0:
76:03:62:7c:c8:a7:71:6e:27:0e:2c:b8:cc:1d:b2:
09:37:51:67:6a:a7:16:f8:31:0b:b3:a8:a8:c0:90:
7a:e6:d6:f1:2d:09:e4:5b:92:d0:92:90:e7:14:38:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9D:82:41:C0:EC:C1:D0:16:91:76:DC:A2:23:EF:AF:5E:D6:26:67
X509v3 Authority Key Identifier:
keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:44:05:c8:2b:9c:c7:61:11:30:73:e8:8c:67:23:d5:24:d7:
f5:ae:85:f0:c2:79:6c:5d:a2:84:37:55:f1:e6:49:e6:56:9b:
a0:f7:ea:f7:ab:86:9c:f5:b6:3d:b0:2a:d8:fc:c6:47:46:11:
a5:3a:e9:9c:8c:d2:c7:3e:42:7b:f6:6d:98:0f:c4:38:7f:71:
0c:2a:47:31:86:80:2a:26:36:be:19:b2:30:6a:f4:3e:d5:61:
0c:63:b5:bd:85:42:e1:07:56:68:a4:1e:d3:33:78:39:79:72:
d6:bf:8a:d1:52:1a:d7:7d:0e:d4:2b:3c:24:c0:f0:3a:3d:71:
71:a5:c7:e8:5e:ed:90:ab:4e:85:1f:63:6d:d9:a4:26:b4:b3:
64:b2:8d:47:dd:7f:c3:96:8a:f9:b9:ca:08:48:94:c5:ec:06:
23:4d:ae:6a:a1:da:be:e7:41:30:3b:c8:a5:93:f5:90:85:3c:
89:0d:53:5f:80:85:5d:66:1d:54:2a:7f:e8:21:53:20:c0:9c:
09:d8:7a:6b:d2:c2:56:63:89:e7:f8:27:de:f7:83:0e:45:68:
8a:a0:24:71:9c:a0:b5:59:51:18:fc:c2:c0:2c:1a:5f:e0:47:
07:02:be:41:0a:cd:0c:2f:f5:bf:c0:c6:3a:09:d8:2d:de:c8:
52:48:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:24:33 2025 by rpki-client