This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
File: 6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft (raw, json)
Hash identifier: 4z9t/T+7J3sfmnWmevLhAjB7xHukCMqdm4xtoWpjxW4=
Subject key identifier: 60:40:5E:B0:DC:4B:25:E0:32:CC:A1:FD:2C:63:D9:D4:70:F4:29:64
Authority key identifier: E9:8E:EC:B7:30:F1:A9:4A:66:A9:B5:12:FC:77:57:78:C6:00:83:0D
Certificate issuer: /CN=A911954F/serialNumber=E98EECB730F1A94A66A9B512FC775778C600830D
Certificate serial: 0186
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
Manifest number: 0293
Signing time: Fri 05 Dec 2025 01:57:23 +0000
Manifest this update: Fri 05 Dec 2025 01:57:22 +0000
Manifest next update: Fri 12 Dec 2025 01:57:22 +0000
Files and hashes: 1: 6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl (hash: 71Z11+XKlhcry3mVX8cTPj0jpTJnI9tLf6NRvtZ+eRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl
rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:57:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 390 (0x186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911954F, serialNumber=E98EECB730F1A94A66A9B512FC775778C600830D
Validity
Not Before: Dec 5 01:57:22 2025 GMT
Not After : Dec 12 01:57:22 2025 GMT
Subject: CN=69323c02-23a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:64:a1:5a:ae:11:2d:51:4e:5a:59:0f:c6:
50:f6:bb:e8:99:9b:fa:39:94:40:d9:2c:4e:31:84:
1c:59:b9:6c:fd:57:78:9f:9a:a3:e7:c2:c7:4b:45:
48:ca:d9:71:76:c1:de:0f:4e:5d:15:82:bf:a6:24:
f9:69:70:63:6d:bd:00:82:68:e2:62:8e:e3:85:15:
f4:24:46:78:e1:35:36:16:5f:cd:fe:91:40:50:23:
12:b2:f7:6c:e9:58:d2:7d:ab:b1:2a:a3:1f:7a:ff:
85:00:1e:ce:22:40:0f:88:db:8d:a7:ce:57:94:42:
e8:d3:62:a9:0f:0c:6d:93:42:b0:39:fb:96:04:08:
78:2b:0c:f3:0c:f1:f0:92:a3:a1:3a:ed:52:2b:3f:
6a:11:00:4d:89:19:0b:ff:f6:85:19:25:f6:d1:3f:
ce:74:78:2b:0c:1a:e0:ba:0f:a1:59:d2:bc:e5:27:
71:eb:51:2f:57:9e:54:84:f5:40:48:54:a0:d9:c3:
03:32:aa:ea:72:cf:e2:26:5d:6a:4a:14:65:af:9d:
66:d8:76:83:26:ce:dc:0a:2d:cd:da:ca:28:19:49:
75:0b:f0:d6:67:01:4c:e3:e7:4c:9f:65:c8:21:b1:
0b:cc:e1:84:e7:ba:28:d8:8b:65:17:25:58:b8:a8:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:40:5E:B0:DC:4B:25:E0:32:CC:A1:FD:2C:63:D9:D4:70:F4:29:64
X509v3 Authority Key Identifier:
keyid:E9:8E:EC:B7:30:F1:A9:4A:66:A9:B5:12:FC:77:57:78:C6:00:83:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8f:e5:d4:28:b3:22:bb:f5:0c:13:83:c4:f3:6d:6e:70:1b:
7a:29:dd:f1:56:66:35:fa:4d:52:33:81:ab:d2:df:3d:e1:7c:
f9:ed:6f:3c:85:14:0a:bd:ff:af:44:06:b2:cd:17:a9:e7:b4:
1a:c8:ca:98:a3:63:77:6e:37:35:de:71:62:ab:fa:75:7b:76:
d5:34:2f:20:cf:3f:d8:13:cd:1c:93:bb:e1:1b:84:60:50:30:
6b:e3:43:48:36:df:bc:d2:60:49:43:d8:56:4f:da:91:1f:77:
97:c9:5d:23:0c:31:7f:b7:98:1e:3e:e8:38:2f:23:62:b9:71:
8b:58:83:2c:dc:e2:6a:0f:dd:7a:04:bb:dc:eb:83:14:00:51:
83:49:9b:00:26:42:8f:55:3b:0f:9c:95:00:a2:d8:e7:bf:06:
21:51:94:97:1e:0d:ee:4d:8a:17:c5:0e:90:1c:6f:28:e1:54:
67:70:3b:32:c5:53:2c:d0:3f:35:1b:72:b6:2c:49:f9:10:8b:
ac:84:bf:f7:f4:ed:10:a4:c5:74:4b:09:83:5d:21:8e:6b:14:
1d:46:ed:18:f8:de:6b:a9:dd:42:a2:83:35:fd:d0:ee:27:f4:
3c:ec:e6:9f:c0:bc:43:aa:db:15:e4:7d:6e:bd:05:fb:a7:8a:
40:53:36:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:14 2025 by rpki-client