This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
File: sg6f5krzzoyYJyXQEqFCknJjzvA.mft (raw, json)
Hash identifier: KJylvwwW14psi8YaynNeCGIB7Hb8I6intPuf58QndEQ=
Subject key identifier: EE:AB:2E:AC:02:AB:C7:08:6F:0A:4C:6A:96:9D:E7:CE:97:F3:05:84
Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0
Certificate issuer: /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
Certificate serial: 086C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
Manifest number: 085E
Signing time: Sat 06 Dec 2025 19:50:08 +0000
Manifest this update: Sat 06 Dec 2025 19:50:08 +0000
Manifest next update: Sat 13 Dec 2025 19:50:08 +0000
Files and hashes: 1: sg6f5krzzoyYJyXQEqFCknJjzvA.crl (hash: qQL4TC4/EXPNmTOn19cCRfE3JZgjDMiS4ynR9ts9UkU=)
2: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (hash: 4EbGKeFdURg1erPWSPKY/29bASejNm7sStafQa8KWis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl
rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:50:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156 (0x86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
Validity
Not Before: Dec 6 19:50:08 2025 GMT
Not After : Dec 13 19:50:08 2025 GMT
Subject: CN=693488f0-6903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:35:94:91:de:8a:f2:d1:c8:cd:c8:2c:88:
24:0b:31:a9:4e:40:86:24:c3:b2:e4:c0:52:03:7f:
f2:af:f9:fa:85:de:78:42:c9:7f:59:b9:ca:3c:77:
d4:31:99:65:52:66:08:ef:44:63:83:81:75:9b:db:
c3:7c:3c:0a:e7:6e:99:0e:32:f0:d3:71:dd:dc:4d:
b1:d1:dd:98:16:1f:c7:47:40:c8:48:ef:94:fb:20:
a2:29:b8:b3:93:5d:c1:03:c1:0c:e5:14:c9:13:c4:
75:fa:bb:14:17:2d:18:67:cb:b2:ee:2e:22:ae:fc:
11:6a:2c:23:42:4b:5c:0a:e0:c7:97:ca:d7:84:37:
dc:df:90:af:7f:4a:ea:19:b3:96:ec:31:7c:4a:dd:
02:31:79:43:ae:79:cf:dd:93:35:4a:f1:4c:e7:ad:
4b:31:e9:31:e0:06:5b:bf:8b:14:43:4b:79:69:05:
60:d0:f3:12:25:e7:0d:c3:46:15:31:b7:3f:49:e6:
1f:47:cb:0e:5e:3b:05:67:08:da:5a:1c:e5:96:ca:
29:87:fc:31:7a:e9:70:df:8e:fb:dc:70:0d:f2:b5:
6c:04:64:93:8e:d4:7c:23:9c:69:94:ce:4c:18:80:
8c:ae:52:87:9c:73:01:04:f0:2f:79:05:2e:ae:0c:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AB:2E:AC:02:AB:C7:08:6F:0A:4C:6A:96:9D:E7:CE:97:F3:05:84
X509v3 Authority Key Identifier:
keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:da:21:79:4b:6c:0d:73:d7:1d:86:b8:4e:f9:bd:3f:01:57:
7c:dd:4c:40:29:01:56:3c:14:0b:71:d9:a1:3b:19:47:a8:31:
15:1e:75:77:26:1c:ab:4f:54:71:93:b8:d5:a6:fd:d4:cb:a8:
e6:47:0d:76:b2:ca:47:6f:ff:06:dc:f8:8e:1b:d0:03:14:bb:
ea:5b:61:6f:f8:67:5d:b8:67:d1:1e:6b:55:11:6b:bc:a7:e3:
92:b5:42:7b:4f:6c:0d:09:42:c9:79:fd:c8:1e:fb:21:5b:40:
66:89:3f:4a:01:20:5c:4d:7d:01:0d:ee:2b:fd:12:f9:9a:c7:
11:98:d1:28:f3:46:2e:be:dd:50:82:ae:6b:e4:98:a4:ca:88:
18:db:87:95:39:e5:73:6d:4a:75:e6:f3:d6:2d:75:ec:76:c3:
e7:b4:0a:24:17:c2:54:61:01:13:f5:50:bb:49:62:15:f8:75:
79:b1:63:49:b6:f1:14:fd:6a:b4:44:dd:de:fc:18:c8:f8:31:
fa:8d:0c:30:58:03:54:a6:82:08:eb:b7:98:db:d2:0d:75:9a:
54:56:98:f3:4b:e7:c5:d0:69:98:b9:99:72:b1:dd:76:60:df:
f6:db:68:d8:b7:b7:6d:d6:b7:d9:c5:67:ae:7d:66:a8:b8:c9:
8f:8c:38:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc3QzMxMTAvBgNVBAUTKEIyMEU5RkU2NEFGM0NFOEM5ODI3MjVEMDEyQTE0Mjky
NzI2M0NFRjAwHhcNMjUxMjA2MTk1MDA4WhcNMjUxMjEzMTk1MDA4WjAYMRYwFAYD
VQQDEw02OTM0ODhmMC02OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvkM1lJHeivLRyM3ILIgkCzGpTkCGJMOy5MBSA3/yr/n6hd54Qsl/WbnKPHfU
MZllUmYI70Rjg4F1m9vDfDwK526ZDjLw03Hd3E2x0d2YFh/HR0DISO+U+yCiKbiz
k13BA8EM5RTJE8R1+rsUFy0YZ8uy7i4irvwRaiwjQktcCuDHl8rXhDfc35Cvf0rq
GbOW7DF8St0CMXlDrnnP3ZM1SvFM561LMekx4AZbv4sUQ0t5aQVg0PMSJecNw0YV
Mbc/SeYfR8sOXjsFZwjaWhzllsoph/wxeulw34773HAN8rVsBGSTjtR8I5xplM5M
GICMrlKHnHMBBPAveQUurgz+CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6rLqwC
q8cIbwpMapad586X8wWEMB8GA1UdIwQYMBaAFLIOn+ZK886MmCcl0BKhQpJyY87w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzdDMy81REE0OEMyMEU3
NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpveVlKeVhRRXFGQ2tuSmp6
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NnNmY1a3J6em95WUp5WFFFcUZDa25Kanp2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzdDMy81REE0OEMyMEU3NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpv
eVlKeVhRRXFGQ2tuSmp6dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB62iF5S2wNc9cdhrhO+b0/AVd83UxAKQFWPBQLcdmhOxlHqDEVHnV3
JhyrT1Rxk7jVpv3Uy6jmRw12sspHb/8G3PiOG9ADFLvqW2Fv+GdduGfRHmtVEWu8
p+OStUJ7T2wNCULJef3IHvshW0BmiT9KASBcTX0BDe4r/RL5mscRmNEo80Yuvt1Q
gq5r5JikyogY24eVOeVzbUp15vPWLXXsdsPntAokF8JUYQET9VC7SWIV+HV5sWNJ
tvEU/Wq0RN3e/BjI+DH6jQwwWANUpoII67eY29INdZpUVpjzS+fF0GmYuZlysd12
YN/222jYt7dt1rfZxWeufWaouMmPjDgv
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:21:38 2025 by rpki-client