This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
File: b5rATOWscafCt6-xpVcnoQ5bBu4.mft (raw, json)
Hash identifier: hTVtJagolXanZX63aDPHI+Z+8LZIIdFx2lRE5UAEy04=
Subject key identifier: CD:1B:E3:05:DC:27:B7:51:91:76:10:FC:2A:95:73:B9:38:24:14:E1
Authority key identifier: 6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
Certificate issuer: /CN=A91BD9C2/serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Certificate serial: 0BA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
Manifest number: 0B98
Signing time: Thu 18 Dec 2025 18:40:54 +0000
Manifest this update: Thu 18 Dec 2025 18:40:53 +0000
Manifest next update: Thu 25 Dec 2025 18:40:53 +0000
Files and hashes: 1: b5rATOWscafCt6-xpVcnoQ5bBu4.crl (hash: wxiOGPl9R5MgY3dobChRPhXo0b+K3D2EP8D02xa4pxc=)
2: 1A0B540E3AA711EA83682876C4F9AE02.roa (hash: aPhIlaax2BlOuwZfkwHVyHDwMsLRzjqBCMCDNEm2/F8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:40:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2978 (0xba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD9C2, serialNumber=6F9AC04CE5AC71A7C2B7AFB1A55727A10E5B06EE
Validity
Not Before: Dec 18 18:40:53 2025 GMT
Not After : Dec 25 18:40:53 2025 GMT
Subject: CN=69444ab5-5458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:cb:75:b8:2f:97:5a:63:30:67:41:58:38:
5e:91:87:24:78:ba:04:12:f7:58:5c:d5:2e:4f:b9:
86:cd:4c:0c:93:20:52:bd:48:ca:0b:99:c4:62:6b:
cc:3f:ae:56:3d:b4:8f:26:3a:4f:81:2f:9b:2b:44:
00:82:e7:5a:51:f1:c2:46:06:ff:98:82:ce:38:f4:
73:b9:a0:0d:bf:0d:66:1f:a9:32:b3:2d:3b:d8:fd:
41:03:e6:ee:09:25:c4:06:88:da:4e:5c:ef:a5:b6:
13:10:20:d5:77:50:f8:aa:bc:b7:73:d3:69:ed:a8:
9c:16:98:a2:6c:21:62:c2:70:5c:55:43:5d:1e:a5:
51:d5:d2:ec:a2:ff:6b:eb:4f:fb:82:62:de:b4:30:
4a:d8:d5:64:70:93:67:d7:e8:5e:81:68:d5:cc:32:
dd:bd:e0:3e:66:48:2f:1b:98:1d:f0:1b:58:f8:dd:
ea:69:ac:ec:a3:e1:2a:ce:90:c4:32:c3:50:c8:98:
8d:7b:8e:78:12:bf:1b:f0:bf:b9:f6:64:f1:51:81:
42:1b:f2:9a:24:1c:30:21:9f:03:5b:c2:7b:1b:27:
f1:4b:e2:55:8d:76:30:ce:e9:73:41:97:ed:ac:fc:
1a:f6:7d:57:8a:ac:b2:91:1b:fb:d0:73:40:7d:52:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1B:E3:05:DC:27:B7:51:91:76:10:FC:2A:95:73:B9:38:24:14:E1
X509v3 Authority Key Identifier:
keyid:6F:9A:C0:4C:E5:AC:71:A7:C2:B7:AF:B1:A5:57:27:A1:0E:5B:06:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5rATOWscafCt6-xpVcnoQ5bBu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9C2/AB0DF4F23AA211EAA79E6A69C4F9AE02/b5rATOWscafCt6-xpVcnoQ5bBu4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:51:5d:76:a9:2c:89:ae:ac:f8:ad:c0:4f:99:4c:0e:b9:1b:
97:71:da:e2:c7:44:44:c2:cd:48:50:5f:99:3c:be:13:8a:04:
39:e0:fc:70:68:dc:25:b6:9c:44:7b:87:c5:ab:dd:28:4c:f5:
02:f2:a6:48:70:7d:72:61:2d:1d:a5:2e:cd:e0:13:04:3c:4c:
71:a2:ce:c1:f4:15:96:86:32:e7:c0:45:16:61:d5:c7:01:46:
2c:c8:5d:51:d5:9f:1c:a9:5f:1b:53:6e:2f:87:c9:ff:16:9e:
2e:89:d1:97:18:9b:da:69:1a:90:8d:eb:d2:b6:7c:d2:c0:5a:
05:5d:28:d5:d8:26:c4:99:7f:0f:54:01:d0:35:a0:fe:15:58:
fc:d7:81:04:88:32:30:92:4e:1b:60:4a:ba:b3:8d:3c:c8:09:
5d:79:72:95:1d:a9:2e:05:11:c0:f6:21:e4:49:02:92:0a:fe:
bc:a3:a1:55:45:c5:09:c1:7c:5e:de:f5:cc:51:d0:d9:47:18:
df:6c:5e:59:79:4b:c7:6a:69:d8:80:d7:36:79:f0:86:76:9b:
cf:5d:69:aa:18:45:a9:46:32:3c:d4:b9:21:68:f8:7c:85:90:
f6:1c:ec:48:8e:6a:e0:a6:76:49:e3:7a:0e:87:20:96:0a:e8:
21:bc:45:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:57:24 2025 by rpki-client