This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
File: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft (raw, json)
Hash identifier: +Kx/ahmAAzJI0sjP3tTR8H2gc2TpxLVZgqos5janyVU=
Subject key identifier: 55:05:FE:AD:02:FC:CA:C5:EC:76:73:E5:D5:92:55:2D:A2:C7:87:E0
Authority key identifier: B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04
Certificate issuer: /CN=A91A9197/serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
Manifest number: 01DD
Signing time: Fri 19 Dec 2025 01:57:30 +0000
Manifest this update: Fri 19 Dec 2025 01:57:29 +0000
Manifest next update: Fri 26 Dec 2025 01:57:29 +0000
Files and hashes: 1: t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl (hash: 8Sr31UAjaUB6HwK/L20fF+33u+sIKFBbpnD5FTiQIOs=)
2: F4260C1C68DC11EE842D825BC4F9AE02.roa (hash: Bs60NAJODIvyPbTdOei+RIwraizPMP8YmkDLpLSSqzI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl
rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9197, serialNumber=B7FE6A424DB565261B473A71231D59E218DC4504
Validity
Not Before: Dec 19 01:57:29 2025 GMT
Not After : Dec 26 01:57:29 2025 GMT
Subject: CN=6944b109-cded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:d3:d8:ac:91:d7:1c:a7:b8:be:c9:af:b7:
39:07:4b:29:8a:4f:cc:81:e5:6c:17:a5:d0:95:5e:
75:d7:9b:96:59:9c:77:2c:a0:9b:8b:f0:b2:0f:98:
40:89:40:72:31:43:61:5c:84:26:cd:d7:08:d1:e4:
d3:ed:f1:48:9d:53:22:dc:9b:1a:66:ae:cc:b7:db:
12:80:03:d2:61:eb:88:39:51:3e:3c:e9:5d:78:db:
89:40:ed:f0:e2:36:e1:ce:05:e6:87:e1:5e:3f:ed:
74:a9:70:37:73:0b:b0:7a:5a:bf:91:a2:f6:ae:45:
26:35:26:67:92:f6:af:3b:39:79:36:26:92:63:1c:
3c:32:3d:04:72:e3:4a:2f:03:6f:8d:e1:ba:3d:14:
73:ff:b8:01:92:79:a5:68:79:52:76:f7:b4:f3:4a:
66:7a:d8:c2:28:1a:9f:f3:a5:49:03:da:95:c8:cf:
2f:fc:b4:6a:14:05:71:2b:b1:36:7e:cf:93:eb:b5:
cc:ff:fe:91:ae:ea:03:23:b1:ab:73:9a:1a:96:48:
18:80:29:b3:99:c4:45:7e:6a:00:cb:68:09:47:db:
7d:3f:11:df:8b:26:7e:17:69:0a:2f:d9:46:48:c2:
7d:0a:8f:88:6d:d5:4b:86:a2:e2:df:86:e1:33:55:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:FE:AD:02:FC:CA:C5:EC:76:73:E5:D5:92:55:2D:A2:C7:87:E0
X509v3 Authority Key Identifier:
keyid:B7:FE:6A:42:4D:B5:65:26:1B:47:3A:71:23:1D:59:E2:18:DC:45:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9197/4F3C798A069D11EEB8798D14C4F9AE02/t_5qQk21ZSYbRzpxIx1Z4hjcRQQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d6:66:c3:96:21:10:24:af:a3:db:37:84:08:12:b8:64:d1:
36:2e:82:2d:08:03:1a:2f:67:89:a2:ef:a6:6a:a6:e9:4a:5e:
27:b8:9b:61:17:e7:7a:eb:86:c4:c9:35:25:3e:b3:4c:a1:cf:
74:e3:bf:f6:b6:db:dc:64:23:f4:d3:7d:c0:20:8f:b1:00:df:
75:99:22:3c:8d:63:4d:a9:39:1f:e3:68:23:0f:4c:da:7d:36:
2a:70:d1:f2:24:ec:54:c5:ee:d8:93:23:4e:e7:69:3a:f7:d8:
a0:26:ae:5f:cc:15:cb:e0:f0:68:99:a5:ec:1f:0e:45:2c:53:
1a:fe:b2:54:cd:34:76:10:07:a7:5a:cb:4c:e5:44:b7:a7:61:
f8:94:5d:43:62:95:0f:fd:95:f5:c7:74:99:6d:4b:5f:f6:3c:
3b:46:4e:a9:fd:b1:38:f1:a9:01:4c:b3:ad:20:a4:68:eb:d9:
39:8d:62:3f:eb:fb:71:05:52:d9:ea:4a:a8:f9:d9:bc:d1:17:
bb:78:28:0a:2d:0d:94:5b:93:1a:48:6c:c5:f8:6b:de:cd:12:
55:62:05:69:50:4a:12:51:63:e0:7c:32:93:9e:18:78:d2:78:
ae:78:02:9d:61:0f:00:85:55:af:c8:f8:22:5b:b2:3f:81:03:
b9:11:01:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:46:59 2025 by rpki-client