This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
File: 6tZGNV11k2y5Pta623kKh_4VN0o.mft (raw, json)
Hash identifier: huAelbtKV+zvqXbSNhA/RYrxbr78kw9iLX25ETncdE0=
Subject key identifier: 90:37:E6:91:54:B9:8D:20:9C:1C:E1:40:F9:8E:56:7D:76:E9:DC:ED
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
Manifest number: 017C
Signing time: Sun 25 Jan 2026 03:04:18 +0000
Manifest this update: Sun 25 Jan 2026 03:04:18 +0000
Manifest next update: Sun 01 Feb 2026 03:04:18 +0000
Files and hashes: 1: 6tZGNV11k2y5Pta623kKh_4VN0o.crl (hash: hZMmndke7RoPxupRNHbBBpXjf/VrkrzQpQOiQTnWPDM=)
2: DCE2A830EC3A11EE8CC3B820C4F9AE02.roa (hash: wVAgrqCE/Wj+Oq7c+aZ97qsJSVe62sCRsRf4hdQIDT4=)
3: DD555A9CEC3A11EE8CC3B820C4F9AE02.roa (hash: IYbwvT3qmzwsASPi9gEwkFkjfys+ZxVpssJBjkvN+uw=)
4: DC3455AAEC3A11EE8CC3B820C4F9AE02.roa (hash: lkljamiAGuWTdMNk035Kt/plV9Fx0R6Faku03HPbg7U=)
5: 85F80AF6EC3011EE92FDDE25C4F9AE02.roa (hash: tLt6JDfDub8DNFZW2G3EMTsxDiFDr62JlgmUF1Jhoi8=)
6: 836FCA52168411EFB6BDB96BC4F9AE02.roa (hash: TAOed49FFqoRHgKFy+Jz2KuJalrMPjm52i7KeouMhd0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Validity
Not Before: Jan 25 03:04:18 2026 GMT
Not After : Feb 1 03:04:18 2026 GMT
Subject: CN=69758832-8080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:8b:85:12:43:42:be:c1:be:36:9b:9c:b4:
6d:63:12:6d:d8:6d:3f:c4:bb:3d:b3:34:67:00:d4:
af:78:bc:38:fe:e4:ab:16:81:be:c7:44:34:19:3e:
d2:0f:90:74:99:de:21:6a:46:d0:06:fd:34:fe:db:
4b:8a:2d:e9:cd:cd:59:2b:98:c9:1a:fc:18:1a:31:
47:e4:d3:2e:77:72:34:ff:e6:dd:42:f0:68:db:68:
d3:0c:6d:c1:b5:61:23:05:a6:6f:59:85:45:2e:5d:
1f:d2:ef:38:5e:38:db:76:23:41:ee:19:e6:08:22:
09:d0:fe:ad:5b:1d:4c:ed:53:68:9e:99:c4:86:46:
0e:1b:26:5e:24:9c:3a:d4:a3:71:4d:99:0c:9b:8d:
3e:6d:1d:a2:98:3c:2b:c5:c7:e4:8d:d1:85:eb:23:
c3:e6:08:8f:39:b8:04:6a:0b:25:1b:3e:4f:82:ba:
f1:7a:12:16:c9:c2:0e:aa:7c:15:a6:bb:28:d4:f8:
e0:1e:02:4e:e1:1c:ef:6e:d1:bb:93:e7:90:0e:e1:
f2:d3:77:29:4a:76:68:29:3a:78:06:af:9b:94:86:
6c:f3:0b:79:e7:cc:03:c5:c9:70:b1:df:a2:72:32:
71:44:86:ea:a4:65:c8:eb:a8:e2:43:d9:41:66:fa:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:37:E6:91:54:B9:8D:20:9C:1C:E1:40:F9:8E:56:7D:76:E9:DC:ED
X509v3 Authority Key Identifier:
keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:f4:57:e2:9e:8b:65:09:4a:17:86:4d:61:f6:d3:f7:c1:bb:
01:b1:df:90:63:ed:0e:0f:b7:86:8d:be:46:89:11:04:33:80:
30:c4:94:4a:56:bd:dc:02:9b:6a:cd:1a:ab:97:7a:62:c7:d8:
13:fa:9f:40:83:14:d0:46:c4:98:7c:88:6f:15:a8:87:cf:94:
a0:4a:e2:c2:dc:68:5a:7e:72:14:81:c6:32:56:91:b7:94:38:
d0:c3:3e:cc:42:fc:d6:eb:09:68:ad:1d:92:d3:3b:83:50:6a:
c3:2a:9b:90:09:94:77:0f:06:03:e0:94:13:04:e3:68:d2:c5:
df:6d:fc:e2:ba:c7:fc:fb:90:05:cc:65:df:78:a5:97:78:70:
10:e4:df:66:bd:45:fa:68:f0:2e:09:2f:88:5c:05:57:11:a5:
7d:4b:b8:ff:3e:ec:cd:c0:dd:a8:03:f1:4a:fd:b9:80:60:ba:
85:47:3c:23:c5:4d:25:13:6d:ae:f8:05:0a:c9:50:01:06:96:
36:9a:5e:35:b3:51:06:e9:16:10:7b:dd:90:8f:2a:1b:ba:d6:
09:24:3d:44:19:6e:c2:aa:9c:ba:ce:d2:4b:f7:87:5e:cd:02:
be:fe:17:21:88:ec:d6:09:1c:a1:12:d5:fe:7c:f5:6d:58:0c:
e4:70:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:58:56 2026 by rpki-client