This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File: u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier: Od09CU0niVxQfWuKpV6ldNWpf+yM9mWpZRly763aOXs=
Subject key identifier: F4:A4:F0:C7:04:7E:26:9B:EE:49:C9:26:84:A3:29:5D:24:CE:9E:C5
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer: /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number: 023A
Signing time: Fri 05 Dec 2025 00:13:10 +0000
Manifest this update: Fri 05 Dec 2025 00:13:09 +0000
Manifest next update: Fri 12 Dec 2025 00:13:09 +0000
Files and hashes: 1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: 9cSKligy2HqkkhVtgxRhFLHppQfyZxSr5jl+MLiVXbg=)
2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: RTJgvsbwzmrs85A6QasoAHRw5V84DsstoScVFoVQEIM=)
3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: rtm7vvm7OiRTQ81QyLkzE6dolT8d+wgU5NT1/xcizMs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:13:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Validity
Not Before: Dec 5 00:13:09 2025 GMT
Not After : Dec 12 00:13:09 2025 GMT
Subject: CN=69322396-9070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:d7:55:f8:05:b5:b1:67:a3:1f:5b:06:bf:
14:3e:0c:d7:a4:5e:b2:bf:d1:17:dd:e6:b0:dc:dd:
83:9d:08:3b:fb:9f:27:58:4b:23:e1:4e:c6:60:ee:
45:32:53:0d:80:20:d9:e3:10:84:2b:a8:7e:f4:a7:
c0:2b:0d:43:ae:1b:e7:a1:d0:78:24:ec:29:e5:be:
13:61:6e:44:15:5e:9e:ff:f2:fb:7f:34:e0:4b:48:
af:73:cf:51:41:a9:c1:94:fa:ea:21:22:9a:ce:ad:
33:00:9e:34:b4:92:ef:bb:19:14:d1:53:aa:00:4c:
a8:4a:85:7c:19:2c:02:9c:c8:e5:68:c7:09:4f:ae:
ad:dc:bc:37:f8:e0:58:2c:43:78:05:e1:d7:51:c6:
61:91:78:f8:24:34:32:fb:89:0e:5a:9e:f8:ba:a6:
c6:99:45:97:60:7b:40:c0:03:37:83:11:bd:9e:e7:
08:f2:d2:6d:d6:be:a4:db:da:34:b9:78:8e:3f:e5:
db:40:a3:5d:59:a3:59:63:42:f2:4d:96:f9:26:8a:
3b:6c:1b:b8:9c:bb:3a:f4:65:a7:50:9a:4a:8c:bb:
6e:be:6f:af:35:c3:ca:6a:51:c4:85:10:93:dd:ba:
73:ec:8a:5e:d6:cb:8a:9d:69:48:12:32:f5:7d:19:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A4:F0:C7:04:7E:26:9B:EE:49:C9:26:84:A3:29:5D:24:CE:9E:C5
X509v3 Authority Key Identifier:
keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:52:63:53:79:9c:21:bc:0e:aa:67:12:2c:f8:54:56:3c:61:
28:51:27:7f:d1:98:ef:aa:56:32:f7:e2:6b:d4:8d:39:54:0d:
66:fa:8d:ff:db:91:af:6f:af:91:e6:7a:e8:5f:a2:95:8c:d0:
a3:63:5f:0e:7c:d1:67:c0:70:a1:59:64:5e:bf:f6:8a:50:42:
e5:87:6c:91:3e:58:a0:c6:f3:f4:18:a2:e4:91:46:e3:4d:54:
b5:da:0a:71:34:c3:3a:51:12:50:fc:a9:3e:fa:91:3e:8a:50:
9b:e6:1c:de:ab:2a:15:0a:a2:b5:ac:8f:f9:c5:46:09:c4:de:
7f:42:c6:96:ab:96:63:30:f7:bc:cb:fd:80:dc:c9:b4:08:74:
73:c7:26:bf:75:c9:4d:ba:c4:55:c3:2f:e6:e7:dc:17:6e:99:
8e:2c:14:34:49:88:28:a6:53:f6:af:80:86:76:b4:86:c5:8c:
f9:b8:7f:35:a2:77:92:93:ed:d8:2f:22:57:1b:47:7e:77:55:
dc:bc:0d:e0:3c:bd:4c:cc:b9:ff:c6:ee:54:86:2c:d5:59:2c:
12:55:ca:5a:50:03:19:6e:6c:dc:d2:a9:5c:e3:78:74:df:ec:
94:13:43:b7:f7:0e:78:43:66:78:5a:d1:04:2e:7f:8b:9c:be:
78:4e:e3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:59:57 2025 by rpki-client