This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File: D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier: iv2ZysFH+UXfW9tbEcomtvrOGMUv3qasPGZ40KH9tfw=
Subject key identifier: BD:BC:65:EA:8B:A6:31:20:89:1F:E4:06:76:28:34:6C:F8:91:3E:E1
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer: /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial: 0C89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number: 0C72
Signing time: Sat 06 Dec 2025 17:55:51 +0000
Manifest this update: Sat 06 Dec 2025 17:55:50 +0000
Manifest next update: Sat 13 Dec 2025 17:55:50 +0000
Files and hashes: 1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: kvizuDy1pcj0UBsPPg3bfv17ImNlcUi3vYTTjGFCpIM=)
2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: hANV6ERnDblIoU8kPVg1/VC/XygDNvVoYUOvd3sESZc=)
3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: FO7phPYzfDla6aPOyvXALwSuyaWj8a9hgRlX/QWvNY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3209 (0xc89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Validity
Not Before: Dec 6 17:55:50 2025 GMT
Not After : Dec 13 17:55:50 2025 GMT
Subject: CN=69346e26-33a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:d6:cc:3d:de:f1:04:13:24:b8:b6:e6:67:
0b:43:89:78:df:bd:44:f4:87:13:27:fc:82:66:48:
78:67:26:5d:3d:9b:31:6b:f2:32:1e:bc:e8:95:85:
6f:18:ed:fe:09:4f:cf:5f:65:75:5a:e6:94:88:da:
e0:d0:d8:54:7c:3d:38:e9:5f:19:39:02:3c:60:ca:
f6:f0:fd:59:62:b4:7c:3f:fd:fc:62:a8:a9:24:9a:
28:0f:36:17:f4:20:08:b3:a5:3e:90:7f:6e:3c:ce:
c3:58:95:1e:d3:c4:ce:40:27:d0:66:2e:22:ba:73:
92:3a:45:df:a7:05:7f:5f:10:44:b9:47:34:e6:94:
b8:95:87:ff:cd:9c:fc:47:e3:0e:43:ca:87:95:ea:
3b:a4:b1:4a:34:2e:0a:09:e0:37:d6:75:44:c0:d9:
13:48:72:34:01:3d:18:cf:c5:ca:83:7b:20:01:d4:
c8:5e:2b:18:17:4d:72:24:44:f6:aa:55:3e:49:f0:
76:f2:29:44:28:1a:ea:30:53:d3:56:b2:7a:9b:54:
6f:79:bc:e8:dd:5d:3e:b7:c3:43:07:3f:f9:09:7e:
fc:3c:e0:6e:96:71:b4:30:db:60:cd:9e:fa:8a:07:
b9:c2:b9:fb:67:ef:60:0a:4e:64:9c:58:a8:71:48:
e0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BC:65:EA:8B:A6:31:20:89:1F:E4:06:76:28:34:6C:F8:91:3E:E1
X509v3 Authority Key Identifier:
keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:d1:83:59:fd:03:2f:d3:b0:ee:cb:1f:64:38:60:24:03:4d:
f5:f5:9a:b5:f4:9d:17:56:17:5e:32:17:d2:ef:5a:c9:61:cd:
0f:70:1f:86:80:ed:89:34:c9:dc:72:5d:1e:5b:18:77:f8:8d:
cd:75:52:4d:9c:38:b2:61:ad:ac:a7:b1:ea:0e:38:b6:1b:7c:
01:03:71:ee:9f:f1:a2:da:ac:5a:45:45:92:f3:e9:db:c5:fa:
f0:cd:ab:b8:40:84:b2:8e:89:eb:dc:c4:83:7b:8f:4a:a8:83:
71:e9:42:4f:4a:18:03:f8:15:3c:63:e0:51:20:d5:86:9d:2d:
74:90:a5:e3:8a:17:18:bd:a2:f1:3d:6f:f6:22:7b:77:4a:20:
ef:6c:77:ea:2c:5d:9c:fb:7d:03:a6:54:c8:11:5b:5e:af:59:
a1:e1:e9:75:98:1f:66:7a:91:55:aa:17:71:bc:16:ca:c3:ed:
2a:c7:e1:6a:1a:19:fa:d8:6a:8d:c4:23:3a:2f:f5:0f:8c:fd:
8f:49:49:cb:8b:9a:3a:3e:e3:d0:97:7b:3d:38:dd:ba:44:65:
41:fb:5b:da:8c:07:28:3d:57:19:b9:46:d9:a5:52:a9:52:03:
7d:2a:d3:91:9f:3e:aa:cb:48:df:7d:7e:ee:8f:49:c3:51:f8:
71:c2:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:58:25 2025 by rpki-client