This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
File: p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json)
Hash identifier: yiDuSMIUMKurxVyQSi/tKQjE65hI3ickRlY42wSvBeo=
Subject key identifier: 57:FD:2E:3F:F2:16:3F:B6:F5:A7:00:D6:1B:F5:2D:E3:66:51:AE:DD
Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014
Certificate serial: 0C1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
Manifest number: 0C14
Signing time: Thu 04 Dec 2025 18:11:18 +0000
Manifest this update: Thu 04 Dec 2025 18:11:18 +0000
Manifest next update: Thu 11 Dec 2025 18:11:18 +0000
Files and hashes: 1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: 2Q15WCSHXZUNvYbceOCSYZKjJMxapWRJQC7XIR+KwiQ=)
2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: bvU87sPankSR4y/0B0suj/VghvgnUkOI9EyFZQQUQyE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:11:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3100 (0xc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014
Validity
Not Before: Dec 4 18:11:18 2025 GMT
Not After : Dec 11 18:11:18 2025 GMT
Subject: CN=6931cec6-c01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:f5:9a:ce:54:68:b9:10:be:f7:90:a6:be:
af:69:9d:07:83:43:e2:66:1f:25:77:dc:17:52:78:
36:3c:5c:89:3b:1a:b7:8c:6b:74:a2:1e:3a:c0:07:
5e:a3:89:ef:12:c7:a7:c8:4d:01:ba:d6:d8:39:76:
df:49:2d:2a:12:2e:20:c1:b6:3e:2e:d6:58:ab:87:
81:28:92:94:9e:bc:d4:3d:a1:98:2a:4c:7c:e1:fc:
4e:20:6e:75:28:14:ee:bd:c0:a1:b6:a9:3e:38:e9:
ca:14:23:e3:12:fe:ad:cc:34:14:e1:a5:23:10:f3:
77:6c:5e:d3:7d:95:ad:0f:80:ab:33:81:d9:48:55:
c0:20:ff:82:fd:38:c2:cf:d3:7c:60:9a:90:6e:3b:
db:27:ef:fb:23:8c:5f:63:bc:b3:48:97:ed:31:87:
1f:8c:f0:c2:8a:a0:1f:62:42:bb:29:61:76:fe:a5:
23:b7:11:06:e3:92:3b:08:99:a3:62:ed:ad:4c:f0:
c9:ae:76:27:ba:c7:89:d4:b4:e3:45:6b:67:d1:ab:
d4:8d:e8:f1:d4:6b:00:09:51:51:f2:3c:5e:64:a6:
1f:96:f2:36:e0:d1:ab:0c:30:74:20:fe:1e:8d:ba:
ea:8f:d5:3f:81:4a:f3:cd:ec:b9:e5:51:db:2b:b8:
cb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FD:2E:3F:F2:16:3F:B6:F5:A7:00:D6:1B:F5:2D:E3:66:51:AE:DD
X509v3 Authority Key Identifier:
keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e7:99:ef:32:0b:e2:94:8b:94:b9:98:4e:8b:8e:54:44:e2:
61:32:c9:e9:90:f6:84:4b:09:a2:27:39:ee:68:61:bd:98:7e:
25:62:79:f5:9a:a2:ee:79:0a:cd:5d:50:17:bc:69:7d:19:0a:
d3:c1:5f:7a:c7:78:00:a6:85:80:6f:a3:ff:3b:cb:e7:73:d2:
8e:f5:f8:4b:3d:11:22:65:53:8d:3a:a7:51:c0:c1:2f:29:c6:
23:1b:db:dc:58:e1:8b:7d:35:f7:72:bc:8c:1f:3a:cc:01:70:
7d:36:1e:01:a8:b7:57:82:49:89:6b:6b:c3:23:99:51:fc:c2:
c9:5e:59:08:f8:07:d2:16:e1:2d:e8:05:6d:3b:2e:72:89:09:
e3:f0:30:52:6e:6a:15:98:c3:77:2a:f5:0c:34:b0:81:a5:c4:
bb:7d:dc:a1:31:72:8f:0c:ee:54:35:92:6c:d6:48:96:23:9a:
39:2c:1d:05:dd:2c:ca:23:ba:2c:de:44:0a:9a:14:b3:de:e3:
2c:6b:d1:b5:80:20:44:07:12:38:b5:f4:9c:41:fd:e5:0b:2a:
20:3f:02:17:62:d7:83:b5:40:24:a4:00:33:f1:e9:7b:71:d9:
09:09:cd:fd:d2:2a:8c:8d:9d:17:5f:23:23:e1:ee:dc:b7:e6:
27:75:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:37 2025 by rpki-client