This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
File: 6qKbMnjqfy5or_PZQPu17Kn41WA.mft (raw, json)
Hash identifier: DA/fvxn4/h2uNY7VKTF9/YjM0yeWrgcBWyyFmius4Oc=
Subject key identifier: D2:E2:8B:EB:7A:19:81:14:84:26:44:5E:4F:3B:95:6A:50:A8:62:BD
Authority key identifier: EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
Certificate issuer: /CN=A9185339/serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
Manifest number: 0148
Signing time: Fri 05 Dec 2025 02:26:22 +0000
Manifest this update: Fri 05 Dec 2025 02:26:21 +0000
Manifest next update: Fri 12 Dec 2025 02:26:21 +0000
Files and hashes: 1: 6qKbMnjqfy5or_PZQPu17Kn41WA.crl (hash: pZ5/TWtaCgGSIQL5s3HnxRORio+1m97V8Qs1yNt649c=)
2: 57410984DB6811EEA3A06625C4F9AE02.roa (hash: PjA6/y3/URFKtBBGqwXOyXSRNtGtQief3EK0IMYpEOs=)
3: 68005612A19211EF9444186DC4F9AE02.roa (hash: I8WaXI8yHGLpuVw4P8ETRUbWjO9zaTONFtyBe4x2ewE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185339, serialNumber=EAA29B3278EA7F2E68AFF3D940FBB5ECA9F8D560
Validity
Not Before: Dec 5 02:26:21 2025 GMT
Not After : Dec 12 02:26:21 2025 GMT
Subject: CN=693242cd-b89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:15:24:a4:eb:c3:8f:3b:49:f8:fb:66:12:
0a:df:88:01:90:01:50:3d:1c:d1:7a:a7:6f:6d:a5:
a7:1f:45:f7:38:67:88:52:00:1f:8c:1b:4b:f6:d2:
3c:f6:cc:09:85:31:27:a7:5c:37:9a:49:2d:9b:14:
c6:84:5f:83:cb:52:ba:e6:9d:dc:bf:43:7e:bd:87:
82:9b:2d:9c:55:fa:bf:fe:0f:cc:33:03:4c:64:e0:
b2:31:7e:fc:02:15:2c:cf:20:9a:a4:ca:21:a5:6f:
56:f2:20:86:2d:d4:fa:bb:28:1c:d3:8e:60:1b:b9:
e5:b2:64:e5:80:8b:ef:cc:e4:f7:fe:bb:0e:69:92:
cd:b8:02:83:63:0a:09:6f:a5:89:d6:3f:18:5a:6b:
79:f4:b4:30:48:99:a5:98:a8:ea:55:fd:83:f9:64:
3c:f4:ad:1c:95:5a:cc:1f:0e:a0:02:4b:3e:51:a5:
f2:ab:bc:7b:5c:20:5a:db:27:6e:78:57:71:e6:02:
bb:eb:c5:1d:4d:ba:13:bf:cd:10:33:c3:ab:9e:26:
45:d0:06:64:0c:42:28:0c:ad:f5:79:94:21:8e:29:
6c:cf:6d:87:2c:b9:e6:73:30:7c:91:69:cd:8e:b2:
f3:1a:e3:18:15:d5:6d:ba:b2:39:9c:d6:e6:cc:dc:
ec:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E2:8B:EB:7A:19:81:14:84:26:44:5E:4F:3B:95:6A:50:A8:62:BD
X509v3 Authority Key Identifier:
keyid:EA:A2:9B:32:78:EA:7F:2E:68:AF:F3:D9:40:FB:B5:EC:A9:F8:D5:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qKbMnjqfy5or_PZQPu17Kn41WA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185339/DACDB38EDB6711EEA6178924C4F9AE02/6qKbMnjqfy5or_PZQPu17Kn41WA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:e3:77:23:af:8c:5c:00:0b:2f:0f:e4:c8:18:3f:52:81:41:
33:62:94:94:6f:a2:3c:e3:5b:ae:85:53:28:5b:a7:d7:cf:c4:
1a:49:88:8d:17:f8:db:b8:61:56:04:ed:08:55:67:14:a4:89:
d5:53:c6:f0:da:df:bf:96:1f:69:c3:7e:bb:d7:4c:02:3c:6e:
4a:97:20:32:c6:74:48:56:e2:25:6b:bf:c4:c2:c3:45:8b:09:
02:73:ac:22:97:65:89:8b:3b:b4:7c:97:bb:5d:cd:8d:db:b9:
9b:6e:22:d4:eb:51:c2:4b:48:ae:9c:bd:6a:0b:a3:19:04:48:
04:0d:ee:13:9a:bc:f5:c0:65:7a:69:97:c0:0b:a7:a2:e8:59:
f7:da:da:3f:58:e0:10:93:2d:b8:dc:a3:f9:c5:8b:ad:73:33:
21:d7:a3:bd:a6:24:86:c9:ab:5a:6f:f9:77:77:ae:9c:63:e9:
11:23:ad:d4:45:87:bb:1b:d8:bd:40:1e:14:37:2b:3d:4e:dd:
a4:f3:2f:2d:5c:2c:d6:a4:df:da:9c:ad:ca:e3:c8:5e:b1:6e:
29:29:ca:50:2f:f8:60:8b:38:54:c9:c4:c8:b9:b3:85:e7:b1:
67:13:39:84:32:a9:d7:6c:85:16:ec:88:c9:7d:05:2c:2e:6c:
a2:64:77:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:39:45 2025 by rpki-client