This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
File: XlEJvjS4HAy74OQ1mneBpGJLn80.mft (raw, json)
Hash identifier: 4eLAXp5FoC27bqpAFxo8M0wT3PB+EqVQVUht7eT7r0E=
Subject key identifier: 41:1C:65:65:D1:1D:4F:17:FC:55:77:AB:72:3B:9C:1A:45:B8:23:3F
Authority key identifier: 5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
Certificate issuer: /CN=A91E5D61/serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Certificate serial: 133D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
Manifest number: 4876
Signing time: Thu 18 Dec 2025 14:20:38 +0000
Manifest this update: Thu 18 Dec 2025 14:20:37 +0000
Manifest next update: Thu 25 Dec 2025 14:20:37 +0000
Files and hashes: 1: XlEJvjS4HAy74OQ1mneBpGJLn80.crl (hash: 8ooC1QgQ6/sQXURmNuyuGRZKimPPyGjwPbkSOsV2Db4=)
2: 792023A8E0DD11EE86DB926AC4F9AE02.roa (hash: GOy9OboZpKQbKQnVi7OFhab7NMhnYhuV2h2uNtdNUpY=)
3: 12300E80ECD911EEB21F7B7FC4F9AE02.roa (hash: hei/cgFAUZIGCHaatDAW34u7WoWx8+SizsC0TsbKAW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:20:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4925 (0x133d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D61, serialNumber=5E5109BE34B81C0CBBE0E4359A7781A4624B9FCD
Validity
Not Before: Dec 18 14:20:37 2025 GMT
Not After : Dec 25 14:20:37 2025 GMT
Subject: CN=69440db6-ac4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:3c:bb:96:4e:fa:af:dd:5f:7d:f1:0b:38:
ea:71:b3:b9:10:fc:87:ff:8e:b1:d6:3d:75:15:85:
ef:1d:f8:a1:e8:51:99:eb:a6:62:33:b6:08:04:b6:
83:16:ab:b8:c7:d7:5a:06:ce:1f:f6:96:1a:3f:72:
fb:54:01:63:85:15:e9:5b:4d:5c:f1:ae:b2:bc:de:
48:a8:7b:ab:75:50:d0:c5:7e:fd:b6:ba:11:64:fe:
19:5c:a3:1c:20:e8:3b:75:63:a7:bf:dd:05:20:c0:
8a:a2:97:56:dc:f8:f3:e1:f1:62:2c:97:05:d0:b6:
06:6b:20:2a:63:25:1f:f1:6f:b2:24:ce:d4:40:40:
39:17:63:89:61:6c:5f:7e:10:ac:8a:46:61:d4:f3:
ab:76:f1:2a:41:73:8f:90:00:91:af:b5:9e:9c:8a:
c2:6b:19:e0:36:55:fe:8f:b7:1d:39:b6:df:9c:a3:
45:76:38:c4:e4:be:3c:30:af:26:43:79:58:ef:26:
28:c9:0b:a9:ab:e3:e6:c0:cf:02:fe:b1:8e:a2:90:
cc:54:74:ad:01:ff:20:92:78:4e:49:38:6c:5a:22:
36:e0:13:0d:5a:7f:f1:21:bf:a5:bc:5d:a7:72:c8:
80:7d:83:cd:35:96:d8:0e:63:bb:81:0d:c6:67:92:
dc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1C:65:65:D1:1D:4F:17:FC:55:77:AB:72:3B:9C:1A:45:B8:23:3F
X509v3 Authority Key Identifier:
keyid:5E:51:09:BE:34:B8:1C:0C:BB:E0:E4:35:9A:77:81:A4:62:4B:9F:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XlEJvjS4HAy74OQ1mneBpGJLn80.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/XlEJvjS4HAy74OQ1mneBpGJLn80.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:28:ed:5a:bb:46:09:7e:8c:f0:77:25:0a:a9:a2:23:73:17:
3b:e8:85:b4:07:fb:b8:33:d8:dc:a1:43:dd:ff:93:2d:7a:a8:
70:a3:60:6d:cb:61:1c:a4:ba:8f:bd:89:60:54:a0:75:30:fe:
09:47:3b:37:7b:33:ad:b1:0a:5f:6c:91:da:85:cf:3f:08:27:
50:52:73:77:38:f2:97:cc:72:fd:0d:99:4a:52:8a:1b:f6:61:
3b:55:42:9f:34:cb:a6:01:0e:0b:bb:0c:2c:af:21:98:b0:b2:
6e:c5:5f:46:77:8a:9a:bd:e7:9c:9e:96:2d:bd:ab:c5:6d:1e:
ae:b3:68:ff:3c:7b:c8:10:6a:83:96:28:5e:25:12:ec:4d:a6:
d7:cf:80:90:d4:3a:93:7d:f6:9e:03:e3:11:9a:6e:2d:f5:51:
0c:36:a1:20:bd:3f:79:53:72:2b:48:e7:68:7d:1f:6f:97:52:
8a:70:5a:6e:48:0a:fb:b5:41:d0:8d:c7:90:40:ee:60:a0:a5:
27:07:ef:65:59:94:8f:c5:92:6c:f2:74:72:26:32:10:92:b5:
e7:bf:50:76:6c:6f:2f:1f:0f:c7:03:11:33:24:50:49:fc:9b:
cc:8c:78:e7:9a:d4:4b:da:1e:6d:ad:44:17:7e:cd:f0:d0:11:
0b:fe:72:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:24:06 2025 by rpki-client