This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
File: v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft (raw, json)
Hash identifier: XAPNQjttln2y7EdsBQC9SV+HjKRa1iaVj3I5YseMtnQ=
Subject key identifier: 36:91:6E:2A:56:BD:58:23:DB:E1:38:80:B1:00:5F:C3:9F:E2:2C:93
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Certificate issuer: /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial: CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
Manifest number: BC
Signing time: Sat 27 Dec 2025 05:09:31 +0000
Manifest this update: Sat 27 Dec 2025 05:09:30 +0000
Manifest next update: Sat 03 Jan 2026 05:09:30 +0000
Files and hashes: 1: v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl (hash: x2sb8k2DmIXmJECbRFBKwh4CLtRTz4Kq/8VGiJyOY4g=)
2: 2A7B4C14C51511F0B6CAF70BC4F9AE02.roa (hash: q8d/T1oeGTAAj8I/vFpzngulLnjhXuMa8KZmfC7sm8w=)
3: 339F0FFA9D9D11F0981B7A12C4F9AE02.roa (hash: YDUGJInCxGYNvztq3dbMwJMAM402KtbRyKKGjQJtcPg=)
4: 46602E62E99D11EFB8E6881DC4F9AE02.roa (hash: N2mU+Nf+OkWsydJNTigowac6C/kadZEo42ZXOPhaxXU=)
5: 465DA74CEE4C11EFBBD5275FC4F9AE02.roa (hash: SPPv4eq5g0hLSyvOMf5eiY3618RcXXiv7J3/H4BO4L4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 05:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Validity
Not Before: Dec 27 05:09:30 2025 GMT
Not After : Jan 3 05:09:30 2026 GMT
Subject: CN=694f6a0a-a472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:21:13:46:11:76:58:54:ab:0a:41:81:d8:
da:13:d1:78:c0:b5:fd:3f:0c:75:91:f9:5d:8b:a9:
fc:43:53:c0:49:22:3a:cb:79:f1:ac:c0:8d:c5:7f:
c6:c8:ee:6f:98:2d:40:3d:43:53:c7:0c:d6:5b:08:
d3:3e:95:00:1b:0c:2e:4e:73:3d:4b:f2:5c:d1:13:
20:b7:a3:c1:82:70:e0:a1:27:8a:48:1b:f6:f0:a3:
04:bc:f6:e8:ec:6d:ba:67:bf:0e:95:0d:ad:ec:c4:
74:5f:e2:56:b7:09:a2:a1:24:c8:3c:0e:d5:74:b8:
f8:ea:71:62:f2:3b:1f:f5:5b:e7:78:f9:de:aa:84:
da:30:b2:da:9c:99:33:60:2a:c3:b6:ff:d2:63:45:
f5:80:59:5e:7d:78:1a:d6:31:86:57:3a:f0:54:8e:
ba:4d:1d:aa:9a:02:01:43:72:95:27:66:f2:34:fa:
8a:e4:75:ff:23:65:98:04:59:4c:c5:f1:1c:22:9f:
12:65:ec:24:10:8a:dc:43:99:aa:d0:d4:dc:af:44:
87:8e:86:ff:35:1c:57:32:61:ff:d9:a7:82:9e:59:
18:90:83:53:4f:39:5c:d9:d3:a1:38:8e:06:66:2c:
78:10:12:54:8e:56:9f:93:84:a3:a2:9c:89:19:0b:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:91:6E:2A:56:BD:58:23:DB:E1:38:80:B1:00:5F:C3:9F:E2:2C:93
X509v3 Authority Key Identifier:
keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:de:4b:58:8d:c4:ef:2a:27:5e:08:c8:00:d7:f6:8e:47:09:
4d:91:20:45:c0:8b:0b:75:88:d4:a3:66:29:3b:cc:5d:81:b2:
2c:b4:65:f9:52:78:bb:38:be:7b:68:31:99:bd:1c:89:55:65:
ed:fa:28:7a:c2:e6:b5:ff:f9:bb:52:44:5f:b6:8e:1b:15:d8:
3e:90:d4:ae:80:6e:6a:7e:eb:c6:ad:b3:51:15:c2:5e:57:94:
8d:80:8c:1f:33:bd:be:86:bc:07:1d:6f:78:eb:c5:05:31:01:
db:a0:d8:0b:97:7f:9e:48:0b:53:77:b7:5b:02:fd:0f:2b:ed:
4c:dc:95:a6:04:62:20:65:fa:78:e5:c7:cb:94:4a:ed:21:c0:
c4:dc:a3:61:ec:44:c5:c9:ef:da:d0:92:1f:4d:fa:d4:06:24:
1f:40:28:cc:a6:90:f7:57:55:a8:98:12:6d:54:15:dd:fd:99:
d6:eb:02:55:0d:19:05:0a:7e:e5:ab:03:85:70:58:67:85:04:
38:47:7f:84:67:e4:62:5a:76:77:98:0e:73:c6:74:26:9f:83:
c6:c0:d9:12:4a:80:76:d1:8c:3e:3d:8a:ff:15:39:45:cf:a2:
07:12:84:ae:e2:8a:15:37:55:a0:9f:b3:60:f2:48:9d:8e:63:
25:67:26:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 17:48:02 2025 by rpki-client