This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
File: A6AuL12r8P85OGKLxP9fthZT8EU.mft (raw, json)
Hash identifier: MiCwajMK2RIwpGM/tgnfo7nRWMZblvI5jAS6buayqmg=
Subject key identifier: 6D:F4:7C:83:7E:C7:63:83:E0:74:DE:3A:39:36:60:D0:C5:FD:25:C2
Authority key identifier: 03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45
Certificate issuer: /CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045
Certificate serial: 0155
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
Manifest number: 013F
Signing time: Fri 05 Dec 2025 02:44:37 +0000
Manifest this update: Fri 05 Dec 2025 02:44:36 +0000
Manifest next update: Fri 12 Dec 2025 02:44:36 +0000
Files and hashes: 1: A6AuL12r8P85OGKLxP9fthZT8EU.crl (hash: F/EmCoXD+h0v/4YG4CxbyqzQ1uInO4z2S7XEbWGImYc=)
2: 4335BE9C0D0611EFA3ECB057C4F9AE02.roa (hash: Qm9GDIA0MPfeF1zwxNI3C0uw4KiP3Msw73zwSjWGIiA=)
3: 42D4C3BC0D0611EFA3ECB057C4F9AE02.roa (hash: BaadRVMd203ZlkXjv1gzJD81QItI8JySCJYtPr9WisE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl
rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 341 (0x155)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161099, serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045
Validity
Not Before: Dec 5 02:44:36 2025 GMT
Not After : Dec 12 02:44:36 2025 GMT
Subject: CN=69324715-3410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:1f:bc:c9:99:03:cb:91:fb:ad:f0:ce:25:
60:20:4c:83:cc:1a:a6:3c:50:d7:83:71:57:55:f4:
9f:89:27:00:95:70:fb:a3:bf:07:a0:01:52:3e:31:
8f:a4:12:00:5b:75:84:44:31:f5:a3:40:57:48:4a:
32:b7:19:d5:2d:cc:05:2c:95:60:6f:6d:ae:96:b6:
8e:1e:ea:fe:2b:bc:28:27:af:1a:59:3a:49:d4:70:
55:95:e8:5d:bc:99:b1:6c:f8:75:00:81:b2:26:6f:
5c:a8:97:48:a5:c4:05:61:1a:73:46:23:90:12:74:
95:5f:20:39:b0:8f:37:c1:7d:2f:10:96:54:f1:3e:
a1:7e:c4:a7:72:15:29:0f:a7:8e:0b:85:35:5a:e8:
2a:9e:ba:64:74:85:4f:fe:68:7e:ca:bd:6b:0d:23:
32:d4:e8:19:e6:f4:f4:fd:f5:18:7c:8d:1c:92:38:
0b:a3:d7:0c:5d:e9:2f:d0:68:86:2e:ff:69:6f:dc:
09:58:78:1f:74:12:a5:18:36:4c:a9:8c:bc:a5:27:
94:6e:02:20:67:5a:3e:a3:b9:7b:30:96:c3:8d:c0:
fa:40:13:41:8d:65:79:8c:a6:2a:36:ea:d2:6e:0d:
1b:89:0b:31:cb:12:67:a0:4d:f8:8c:48:7e:60:ff:
42:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F4:7C:83:7E:C7:63:83:E0:74:DE:3A:39:36:60:D0:C5:FD:25:C2
X509v3 Authority Key Identifier:
keyid:03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:27:3a:da:a6:51:ee:2e:35:db:06:16:8a:2f:ba:52:8f:0a:
4b:db:e8:57:3c:be:74:9b:c6:dc:91:9c:78:9a:49:d8:66:46:
53:6c:52:07:0a:6d:9a:d9:c6:82:1d:dd:4d:93:94:0f:49:15:
53:6a:41:61:dd:90:0e:24:5a:48:ff:85:00:2b:55:41:2e:96:
16:73:e4:6a:60:81:d4:cf:0a:a4:ff:28:f0:70:3f:18:7c:29:
e6:9b:6a:b9:d3:e3:e9:ae:1e:8b:8e:3f:c8:0a:68:3c:b5:e7:
68:71:7b:27:5a:90:a4:25:75:d7:83:5f:30:af:0c:3b:2b:bc:
81:71:1f:6b:a0:f6:64:59:e7:3c:fd:83:1e:3f:62:43:27:e1:
8e:df:1c:ea:0a:57:8e:ec:f9:d2:18:11:aa:b6:e7:c4:c9:49:
25:3e:77:34:cb:cd:d1:26:61:4f:48:d2:fa:77:3b:5f:e7:8e:
40:a0:68:66:d3:0f:09:5b:71:c8:7a:a9:5e:9b:e8:da:e5:fc:
05:54:63:2b:4a:36:63:38:31:15:8d:27:de:9f:55:94:2a:0e:
b7:89:c2:a0:1a:1e:59:fc:c5:bb:4b:e9:e8:4d:ba:84:ea:47:
6c:f4:58:45:94:d5:db:af:ea:06:7e:61:c9:da:67:4e:3c:55:
56:81:44:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:23:48 2025 by rpki-client