This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
File: aWYanwY1V84rVDewGIk9fZ_dvtA.mft (raw, json)
Hash identifier: nnMGfIqf3fmzl1BH/03kvOycLu20lCJgb3WASByzVpU=
Subject key identifier: CD:67:88:70:4B:B8:97:F3:C9:FC:68:6E:4E:D4:C0:C7:71:6A:16:48
Authority key identifier: 69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0
Certificate issuer: /CN=A91431A6/serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
Certificate serial: 06AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
Manifest number: 06A6
Signing time: Sat 06 Dec 2025 21:14:38 +0000
Manifest this update: Sat 06 Dec 2025 21:14:37 +0000
Manifest next update: Sat 13 Dec 2025 21:14:37 +0000
Files and hashes: 1: aWYanwY1V84rVDewGIk9fZ_dvtA.crl (hash: 4gXjC3ZhM55TopljQxFRm7YYevIeJ+dwUQdQmqsX9ow=)
2: DDCD4C168EC611EBAB7F3476C4F9AE02.roa (hash: Y2ugT7F/Nq9bo4RxO3pzLxKsvKtinv0AiQJTvZ2Vh+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl
rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:14:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1710 (0x6ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91431A6, serialNumber=69661A9F063557CE2B5437B018893D7D9FDDBED0
Validity
Not Before: Dec 6 21:14:37 2025 GMT
Not After : Dec 13 21:14:37 2025 GMT
Subject: CN=69349cbd-75f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c5:f8:4d:ea:cc:9e:ee:1c:21:09:47:39:99:
9c:71:f0:88:d8:38:02:fa:9b:52:68:3d:dc:6c:23:
96:0a:ea:92:2a:e7:cc:d5:b4:54:68:04:cd:bb:f4:
f7:32:8c:61:a1:96:a6:35:dd:d5:69:da:f2:e3:3a:
72:41:d6:60:52:09:ba:bf:a2:35:5d:8d:aa:6d:ad:
1d:5c:b7:f5:96:ef:3e:ea:d1:20:55:5b:de:b3:33:
b7:87:83:37:69:3a:eb:90:b3:00:a0:55:20:b5:35:
d2:95:aa:1d:5d:a7:ed:ed:ef:b7:0e:4b:81:bc:00:
71:93:8c:46:8d:64:af:a6:df:c3:99:d8:91:64:68:
67:5b:09:fe:3b:6d:d9:32:31:60:26:45:c2:32:d7:
da:7f:c1:09:d3:42:21:da:4b:e0:ef:f6:75:d1:e2:
56:24:7a:62:24:3b:ea:71:9a:79:8b:9a:01:b4:61:
39:22:f9:75:c2:93:83:bd:08:7e:f4:91:31:14:cd:
d3:df:d7:b3:a4:13:04:46:53:4e:8f:ca:a5:04:da:
75:47:df:ac:24:41:7d:6a:43:79:0f:f1:cc:1c:80:
4a:ff:47:eb:57:c6:e5:88:12:2b:c0:59:57:65:13:
93:1c:7a:e0:cf:3d:0b:ab:c8:15:e4:fd:98:96:6b:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:67:88:70:4B:B8:97:F3:C9:FC:68:6E:4E:D4:C0:C7:71:6A:16:48
X509v3 Authority Key Identifier:
keyid:69:66:1A:9F:06:35:57:CE:2B:54:37:B0:18:89:3D:7D:9F:DD:BE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWYanwY1V84rVDewGIk9fZ_dvtA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91431A6/44D890CA8EC511EB97B12074C4F9AE02/aWYanwY1V84rVDewGIk9fZ_dvtA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:be:13:11:ad:da:56:90:ca:0d:e6:41:23:ff:2a:68:d9:62:
af:12:66:f0:59:d4:77:16:37:d6:fe:88:91:3b:70:40:6d:a2:
7d:83:17:c4:0b:9e:32:e1:1c:c4:3c:56:ac:b1:55:5e:60:8f:
bb:7b:ba:e4:82:57:7a:75:28:42:23:2c:33:11:1e:0d:ee:e6:
24:d1:51:34:4a:55:17:43:31:00:f8:e7:0e:42:a1:7d:0e:d0:
df:2e:06:bd:99:fb:70:62:b6:9c:d6:f2:8d:d2:b8:2c:67:2c:
60:7b:d3:2d:38:a4:55:05:08:99:26:d7:94:5a:cb:7c:df:ae:
9d:08:96:a5:ac:05:90:9d:6f:d4:32:ad:6f:62:55:7d:af:9c:
ac:bc:b6:a2:d1:9f:47:1b:0b:19:82:2c:3c:19:a9:03:43:6c:
d5:c0:84:01:9f:d6:68:50:07:3e:2f:d6:25:82:64:a4:f4:4a:
27:1f:90:04:da:05:1f:62:8f:06:00:32:40:87:de:4a:e8:6f:
75:12:46:68:2e:e4:d0:3b:35:3f:a5:e3:79:3c:b8:13:c0:c4:
d4:f6:02:24:83:08:7a:78:ff:6c:50:e4:ce:d4:e1:cb:81:e9:
aa:1b:d9:eb:45:86:c4:30:8f:6a:b9:da:93:6a:b1:63:7b:da:
23:d9:01:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMxQTYxMTAvBgNVBAUTKDY5NjYxQTlGMDYzNTU3Q0UyQjU0MzdCMDE4ODkzRDdE
OUZEREJFRDAwHhcNMjUxMjA2MjExNDM3WhcNMjUxMjEzMjExNDM3WjAYMRYwFAYD
VQQDEw02OTM0OWNiZC03NWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8sX4TerMnu4cIQlHOZmccfCI2DgC+ptSaD3cbCOWCuqSKufM1bRUaATNu/T3
MoxhoZamNd3Vadry4zpyQdZgUgm6v6I1XY2qba0dXLf1lu8+6tEgVVveszO3h4M3
aTrrkLMAoFUgtTXSlaodXaft7e+3DkuBvABxk4xGjWSvpt/DmdiRZGhnWwn+O23Z
MjFgJkXCMtfaf8EJ00Ih2kvg7/Z10eJWJHpiJDvqcZp5i5oBtGE5Ivl1wpODvQh+
9JExFM3T39ezpBMERlNOj8qlBNp1R9+sJEF9akN5D/HMHIBK/0frV8bliBIrwFlX
ZROTHHrgzz0Lq8gV5P2YlmvXfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1niHBL
uJfzyfxobk7UwMdxahZIMB8GA1UdIwQYMBaAFGlmGp8GNVfOK1Q3sBiJPX2f3b7Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzFBNi80NEQ4OTBDQThF
QzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4NHJWRGV3R0lrOWZaX2R2
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FXWWFud1kxVjg0clZEZXdHSWs5ZlpfZHZ0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzFBNi80NEQ4OTBDQThFQzUxMUVCOTdCMTIwNzRDNEY5QUUwMi9hV1lhbndZMVY4
NHJWRGV3R0lrOWZaX2R2dEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnvhMRrdpWkMoN5kEj/ypo2WKvEmbwWdR3FjfW/oiRO3BAbaJ9gxfE
C54y4RzEPFassVVeYI+7e7rkgld6dShCIywzER4N7uYk0VE0SlUXQzEA+OcOQqF9
DtDfLga9mftwYrac1vKN0rgsZyxge9MtOKRVBQiZJteUWst8366dCJalrAWQnW/U
Mq1vYlV9r5ysvLai0Z9HGwsZgiw8GakDQ2zVwIQBn9ZoUAc+L9YlgmSk9EonH5AE
2gUfYo8GADJAh95K6G91EkZoLuTQOzU/peN5PLgTwMTU9gIkgwh6eP9sUOTO1OHL
gemqG9nrRYbEMI9qudqTarFje9oj2QE1
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:35:16 2025 by rpki-client