This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
File: 6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft (raw, json)
Hash identifier: /oR13GsaCP4T3ZefS8zhz0Es9npUS4um0x1m33czewg=
Subject key identifier: 33:9A:FC:B8:3F:F3:C8:B6:65:F7:FE:8E:5B:12:43:1A:42:6B:8B:A8
Authority key identifier: E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
Certificate issuer: /CN=A915EFDF/serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Certificate serial: 08C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
Manifest number: 088D
Signing time: Thu 04 Dec 2025 19:50:14 +0000
Manifest this update: Thu 04 Dec 2025 19:50:13 +0000
Manifest next update: Thu 11 Dec 2025 19:50:13 +0000
Files and hashes: 1: 6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl (hash: h2FjpOSxWejD5+sjkqURrZV6f2LAZD9AmKnx/Q9oDyg=)
2: C183E63077FD11F0A656FC44C4F9AE02.roa (hash: AiISmBi6EMkVxRTqMrgNjL5g/knPETuoOjLISKxyAhk=)
3: 4500A5A669BD11F0A024565FC4F9AE02.roa (hash: MSC30OoLQMQEjzk3rRCJ2ikbFlmuhuMgNqW5DTRWJu8=)
4: 87448EFE3D1D11F0A469B051C4F9AE02.roa (hash: HgipkMBuwoWvuAFvEe44spWPZ3CIisx74k8F29IRrNc=)
5: 03476D523FB011F097B5F864C4F9AE02.roa (hash: nR7G1WKVHgoejOczmztbNWOPg/UYf5k0nHYsKAHUYQo=)
6: 54148F06C43C11F0AA77C422C4F9AE02.roa (hash: PLEUvfD92JY9LnVGJtkTw/WyNLvrl5kTRePmdGJIwyM=)
7: 75811E2EBAC911F08C6E545FC4F9AE02.roa (hash: vXdS7qeIAdiU+avCvD24p9d5iJX/nSjkZpM37825RbY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2247 (0x8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915EFDF, serialNumber=E8C21B03B65083B21BFA37526D12B341F249CC8B
Validity
Not Before: Dec 4 19:50:13 2025 GMT
Not After : Dec 11 19:50:13 2025 GMT
Subject: CN=6931e5f6-3098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:be:7e:de:02:e2:06:04:c7:6b:77:4d:70:
b3:1c:eb:00:91:09:f9:bd:42:49:e8:6b:e7:a1:61:
84:af:0a:db:dd:0e:58:26:8f:c5:cf:16:7f:b6:7a:
14:16:9c:cb:6a:79:ee:a7:19:f5:38:e0:b7:35:34:
d4:61:51:a9:08:70:4e:48:7b:1f:26:61:7c:c6:59:
96:65:03:b6:b4:6c:f0:fd:fe:4c:b0:b5:e9:34:98:
30:75:bb:bf:e4:b5:cb:61:03:1d:26:7b:81:38:5e:
4b:ea:c9:f5:d7:9a:8e:3c:31:4b:4e:82:27:0b:60:
7b:b0:cf:0b:75:54:e4:d7:89:5c:ac:b6:23:fa:04:
a9:a7:c6:df:2e:25:48:41:c6:4b:48:9b:98:48:81:
32:8c:b9:db:34:35:08:c6:42:d0:d3:31:6a:a6:64:
a8:fb:98:d0:3f:b4:7b:1d:7f:0b:db:99:75:56:41:
a6:b9:be:90:25:80:dd:74:4b:db:08:52:70:ca:03:
ba:12:38:e9:b9:86:3a:91:c7:7d:63:66:b7:93:cf:
fa:d1:61:1c:51:5e:8f:80:ac:03:47:b4:08:b7:6b:
4c:16:d0:2f:8d:50:2d:55:b4:34:91:72:36:31:63:
11:fa:19:45:6a:45:32:8f:79:34:79:c1:d9:e6:73:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9A:FC:B8:3F:F3:C8:B6:65:F7:FE:8E:5B:12:43:1A:42:6B:8B:A8
X509v3 Authority Key Identifier:
keyid:E8:C2:1B:03:B6:50:83:B2:1B:FA:37:52:6D:12:B3:41:F2:49:CC:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EFDF/0BDD7EA2E90C11EA965C2A2FC4F9AE02/6MIbA7ZQg7Ib-jdSbRKzQfJJzIs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:e6:04:b6:c6:f5:6d:1c:ff:15:d3:cd:de:35:2e:ba:7d:65:
c8:15:bb:0a:a5:c9:ba:5f:ff:83:44:a1:c4:61:23:28:4f:c0:
b0:38:ce:fd:e2:7c:90:38:4f:46:b2:e4:d2:eb:3c:b8:3d:7c:
69:96:a7:14:3b:a5:2c:88:5e:90:47:2a:ba:62:f6:65:8b:66:
12:9f:cb:1e:42:67:fa:2c:db:46:5f:49:07:36:f5:77:99:c2:
cf:a6:22:90:b3:91:3f:c9:03:2f:00:6b:d1:76:8f:02:16:ec:
1f:ae:7b:db:d3:50:1d:93:d5:d7:fc:76:b8:0a:95:a2:bb:80:
a2:57:2a:57:14:98:3c:04:31:9d:89:3b:11:c7:4b:ec:a7:62:
3d:81:1b:a1:70:23:3a:64:93:64:88:4a:07:f0:7b:b8:69:b8:
1a:88:92:50:11:bf:66:a3:bb:40:57:97:0b:5a:7e:87:ab:8b:
c8:91:a6:b5:d9:84:92:a2:32:73:07:fb:19:87:57:94:69:45:
31:43:b6:91:e5:7f:be:86:d4:29:9b:f7:9e:d8:fe:be:99:9a:
ad:33:71:a6:df:61:e1:02:7a:16:30:45:83:9c:9c:7d:03:82:
d2:b6:55:ec:01:2f:fb:e6:76:3b:89:71:0b:e7:2a:eb:97:93:
27:1a:4f:63
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVGREYxMTAvBgNVBAUTKEU4QzIxQjAzQjY1MDgzQjIxQkZBMzc1MjZEMTJCMzQx
RjI0OUNDOEIwHhcNMjUxMjA0MTk1MDEzWhcNMjUxMjExMTk1MDEzWjAYMRYwFAYD
VQQDEw02OTMxZTVmNi0zMDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAloq+ft4C4gYEx2t3TXCzHOsAkQn5vUJJ6GvnoWGErwrb3Q5YJo/FzxZ/tnoU
FpzLannupxn1OOC3NTTUYVGpCHBOSHsfJmF8xlmWZQO2tGzw/f5MsLXpNJgwdbu/
5LXLYQMdJnuBOF5L6sn115qOPDFLToInC2B7sM8LdVTk14lcrLYj+gSpp8bfLiVI
QcZLSJuYSIEyjLnbNDUIxkLQ0zFqpmSo+5jQP7R7HX8L25l1VkGmub6QJYDddEvb
CFJwygO6EjjpuYY6kcd9Y2a3k8/60WEcUV6PgKwDR7QIt2tMFtAvjVAtVbQ0kXI2
MWMR+hlFakUyj3k0ecHZ5nPokwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOa/Lg/
88i2Zff+jlsSQxpCa4uoMB8GA1UdIwQYMBaAFOjCGwO2UIOyG/o3Um0Ss0HyScyL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUZERi8wQkREN0VBMkU5
MEMxMUVBOTY1QzJBMkZDNEY5QUUwMi82TUliQTdaUWc3SWItamRTYlJLelFmSkp6
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZNSWJBN1pRZzdJYi1qZFNiUkt6UWZKSnpJcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RUZERi8wQkREN0VBMkU5MEMxMUVBOTY1QzJBMkZDNEY5QUUwMi82TUliQTdaUWc3
SWItamRTYlJLelFmSkp6SXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJ5gS2xvVtHP8V083eNS66fWXIFbsKpcm6X/+DRKHEYSMoT8CwOM79
4nyQOE9GsuTS6zy4PXxplqcUO6UsiF6QRyq6YvZli2YSn8seQmf6LNtGX0kHNvV3
mcLPpiKQs5E/yQMvAGvRdo8CFuwfrnvb01Adk9XX/Ha4CpWiu4CiVypXFJg8BDGd
iTsRx0vsp2I9gRuhcCM6ZJNkiEoH8Hu4abgaiJJQEb9mo7tAV5cLWn6Hq4vIkaa1
2YSSojJzB/sZh1eUaUUxQ7aR5X++htQpm/ee2P6+mZqtM3Gm32HhAnoWMEWDnJx9
A4LStlXsAS/75nY7iXEL5yrrl5MnGk9j
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:37:20 2025 by rpki-client