This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
File: t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft (raw, json)
Hash identifier: bkQhzWr8r09QeWnKU6XNxz6zZSM2+rbeIIPgOw2ZxwU=
Subject key identifier: 13:EF:A1:3E:E3:A5:88:9B:05:B3:95:26:07:4A:3F:76:56:1F:7C:B3
Authority key identifier: B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5
Certificate issuer: /CN=A91B4E11/serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
Manifest number: 0126
Signing time: Sun 21 Dec 2025 03:49:56 +0000
Manifest this update: Sun 21 Dec 2025 03:49:55 +0000
Manifest next update: Sun 28 Dec 2025 03:49:55 +0000
Files and hashes: 1: t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl (hash: 307d3xOy2jGDsZuTy9DVtdgLweCsumo0Us2a8FBOq8A=)
2: A2939A381CB711EF8F98240CC4F9AE02.roa (hash: h1iGqKYaoNj3rvyh2GNyWQUuRTq6Az6gkGmiqF75xZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl
rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 03:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4E11, serialNumber=B794F99733EEFC3FA0003F688F64C9C3539266B5
Validity
Not Before: Dec 21 03:49:55 2025 GMT
Not After : Dec 28 03:49:55 2025 GMT
Subject: CN=69476e64-6156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:11:8d:54:7f:66:0d:7a:d3:ab:c5:8b:10:
12:2d:41:c4:e4:d8:aa:3f:5a:e8:37:cf:a4:d4:8a:
13:68:4c:d1:fb:e3:a2:d1:91:18:32:03:7b:14:68:
67:9c:3c:a9:4e:61:ae:93:b5:95:99:3e:ec:72:c5:
70:c1:75:2f:0b:02:b7:7a:f5:cc:44:b4:81:95:dc:
3b:65:c6:64:3b:ad:99:a6:59:3f:55:24:74:a8:60:
73:c0:b6:cb:84:a0:4c:88:bb:17:6a:e5:24:8d:4b:
35:7e:3e:5c:4f:5b:79:40:0b:c1:17:e7:87:b2:7b:
e9:3d:67:9c:0d:52:50:3d:7c:ad:76:db:d8:78:95:
15:0b:78:ae:5f:92:d0:d3:1d:a6:fa:82:44:7d:bf:
aa:a4:81:c0:ab:a0:75:06:82:8f:af:78:6e:00:22:
52:67:c4:95:5c:10:ff:aa:4f:4c:92:92:0d:ff:f2:
25:06:a6:74:32:aa:12:b4:86:e2:b0:80:d1:14:72:
24:17:ec:61:15:63:ab:3a:1d:2b:40:44:d4:a7:9d:
53:92:9f:c4:df:ba:b2:a1:07:7c:4a:fb:aa:1d:91:
f1:ac:3a:ce:48:0d:46:b7:81:ff:5b:b6:17:ed:bf:
fb:25:18:22:f2:48:cb:c1:1f:5e:b0:88:47:f0:6a:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EF:A1:3E:E3:A5:88:9B:05:B3:95:26:07:4A:3F:76:56:1F:7C:B3
X509v3 Authority Key Identifier:
keyid:B7:94:F9:97:33:EE:FC:3F:A0:00:3F:68:8F:64:C9:C3:53:92:66:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t5T5lzPu_D-gAD9oj2TJw1OSZrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E11/7BCF81281CA811EFA5030B4DC4F9AE02/t5T5lzPu_D-gAD9oj2TJw1OSZrU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:83:54:f7:ad:d9:d3:69:c7:6c:83:69:79:b6:8f:39:af:c7:
9f:2d:44:d3:25:0a:f2:8d:37:7d:6a:51:a2:0e:8f:1f:25:5e:
5b:b3:ef:5c:bf:03:fc:71:e0:93:e7:d3:b8:ac:c5:3a:8e:bc:
62:39:93:5d:4b:62:bf:05:d4:9c:8f:38:6a:4e:90:53:4d:db:
ab:5d:1f:b4:ea:7d:78:77:85:bb:fd:3d:38:22:0b:67:08:ee:
8b:68:fb:6e:fa:40:99:ee:a0:d2:83:ab:51:5c:72:ca:d8:5e:
9c:f2:8a:3a:2b:04:5d:91:1d:a7:a0:67:d9:95:3e:89:b6:ee:
ae:42:21:b6:36:ce:a1:53:c2:76:c6:74:b5:75:6f:f0:79:04:
a8:1f:98:e4:53:ba:40:36:a9:e8:fd:3c:7c:58:30:0f:34:a7:
e9:76:e6:ca:85:c4:20:08:a9:1a:58:a9:8e:f1:44:81:ad:e9:
e2:d2:e7:49:3a:3e:e0:d3:44:3f:00:4a:46:6d:70:b5:1d:dc:
e3:92:15:a6:db:21:f7:fc:c5:a0:f0:e0:7a:10:cb:78:34:4f:
0b:f4:62:53:f8:1d:2f:93:74:4e:3b:12:71:58:7d:79:81:1b:
b7:af:d5:ed:d9:5a:5b:51:f3:9c:a1:34:57:7a:3d:fa:08:14:
d5:d4:c1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:37:53 2025 by rpki-client