This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json)
Hash identifier: ZN/Geb81shqKlDRoo+8RRxky0YvUeK+pJ3pDzkGSex8=
Subject key identifier: 4A:5B:01:48:A0:8B:E9:EF:83:B9:23:BA:EF:AF:13:93:9D:03:4A:0E
Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Certificate serial: B9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
Manifest number: B3
Signing time: Fri 05 Dec 2025 04:12:58 +0000
Manifest this update: Fri 05 Dec 2025 04:12:58 +0000
Manifest next update: Fri 12 Dec 2025 04:12:58 +0000
Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: eMLbhB3kFuVzy/j12L35blFuaPBDBkxB09R0VdtbYY4=)
2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: O2sOyXmqjvHQRFXHDN9/2VaFE/Jt3cl3xRc7QIeiwA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185 (0xb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA
Validity
Not Before: Dec 5 04:12:58 2025 GMT
Not After : Dec 12 04:12:58 2025 GMT
Subject: CN=69325bca-877b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a8:0a:bf:16:af:66:c7:5d:91:e3:c0:d0:34:
e8:27:c5:90:6c:29:3f:ec:49:a6:d9:0e:9d:26:c8:
88:2f:cd:44:37:e8:2a:45:bc:fb:a1:af:b2:2a:0c:
63:57:14:d0:c3:e5:9c:70:7f:de:2d:59:cd:e0:48:
b3:2e:52:b0:3e:93:ef:2d:92:68:0f:f2:e4:ce:aa:
48:86:76:d5:02:ca:d9:a1:e4:a4:79:a6:37:60:fd:
45:d6:70:18:85:96:a5:f9:5d:c3:94:e6:9d:3c:a3:
fa:d9:d2:72:19:22:e3:f0:d9:3f:68:45:fb:5a:af:
70:0b:b6:72:95:ac:5a:b3:19:a3:25:ae:92:cf:71:
27:84:93:63:90:f9:8a:36:32:ef:b6:6d:8d:71:75:
81:b6:89:04:21:b1:fb:2c:bb:e7:f3:ec:e8:28:37:
af:02:19:e3:b3:aa:77:01:6c:dd:fb:d9:a9:48:05:
f6:74:5f:6f:8e:9c:9d:ee:5c:e8:c1:a9:9d:0a:ca:
38:90:c3:bf:89:de:8b:50:c0:90:29:a2:03:52:eb:
bd:87:e1:98:a6:d5:c6:7f:cf:01:e1:66:e1:6f:4a:
4f:42:51:2b:37:31:18:2b:a8:5d:ca:e9:55:20:0d:
f9:a8:fa:aa:df:a2:be:a5:15:16:c5:10:af:e7:5c:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5B:01:48:A0:8B:E9:EF:83:B9:23:BA:EF:AF:13:93:9D:03:4A:0E
X509v3 Authority Key Identifier:
keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:5c:80:fb:cc:9e:23:d3:06:44:f9:31:d7:ed:8c:c8:6e:39:
9c:37:f2:e5:f7:8c:75:dd:79:27:37:b4:1f:2c:5e:7b:58:78:
52:67:49:ac:e8:66:bd:e8:33:11:0f:10:9f:53:b9:81:3e:ba:
e4:05:84:83:ae:a5:d8:01:01:ad:03:af:8e:7f:4b:3e:30:ae:
43:42:b7:77:1b:01:20:1e:a2:3c:aa:51:7b:be:60:55:dc:e2:
13:bb:fc:13:93:32:2f:fb:24:70:82:d1:9d:fa:eb:d6:3e:ae:
6a:85:98:57:7e:84:e1:e6:a6:9d:ea:39:7c:00:1b:1a:e7:17:
6d:73:59:75:0d:38:41:03:ab:86:bf:7e:31:70:ac:a3:8a:ea:
32:8f:7d:d0:12:23:bd:b0:1f:a7:77:64:26:f2:c4:e5:56:24:
0c:eb:86:d4:9b:c1:cb:ed:9d:ee:ef:74:b5:32:f9:06:49:98:
4b:51:d9:e4:c3:06:30:c2:15:c5:d1:5b:2d:06:60:2d:d1:5d:
38:f2:3d:45:3a:e8:2c:17:eb:21:34:4e:29:fa:48:db:39:cc:
cd:bd:98:81:2e:a4:aa:7a:95:32:7b:b4:70:4b:ce:1f:a4:99:
80:70:e9:ff:14:90:02:de:02:b1:06:f7:5d:fa:6c:50:85:58:
47:9f:d4:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkwODMxMTAvBgNVBAUTKEU4Q0YyMkEwOEU0MzkxQ0FEMTUwRkEzMUI0NERDOTND
OEFCODI1RUEwHhcNMjUxMjA1MDQxMjU4WhcNMjUxMjEyMDQxMjU4WjAYMRYwFAYD
VQQDEw02OTMyNWJjYS04NzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6agKvxavZsddkePA0DToJ8WQbCk/7Emm2Q6dJsiIL81EN+gqRbz7oa+yKgxj
VxTQw+WccH/eLVnN4EizLlKwPpPvLZJoD/LkzqpIhnbVAsrZoeSkeaY3YP1F1nAY
hZal+V3DlOadPKP62dJyGSLj8Nk/aEX7Wq9wC7ZylaxasxmjJa6Sz3EnhJNjkPmK
NjLvtm2NcXWBtokEIbH7LLvn8+zoKDevAhnjs6p3AWzd+9mpSAX2dF9vjpyd7lzo
wamdCso4kMO/id6LUMCQKaIDUuu9h+GYptXGf88B4Wbhb0pPQlErNzEYK6hdyulV
IA35qPqq36K+pRUWxRCv51x5GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpbAUig
i+nvg7kjuu+vE5OdA0oOMB8GA1UdIwQYMBaAFOjPIqCOQ5HK0VD6MbRNyTyKuCXq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTA4My9DMDZGMkU0MkQx
QjAxMUVGODgzM0M5MzNDNEY5QUUwMi82TThpb0k1RGtjclJVUG94dEUzSlBJcTRK
ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEplby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTA4My9DMDZGMkU0MkQxQjAxMUVGODgzM0M5MzNDNEY5QUUwMi82TThpb0k1RGtj
clJVUG94dEUzSlBJcTRKZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCUXID7zJ4j0wZE+THX7YzIbjmcN/Ll94x13XknN7QfLF57WHhSZ0ms
6Ga96DMRDxCfU7mBPrrkBYSDrqXYAQGtA6+Of0s+MK5DQrd3GwEgHqI8qlF7vmBV
3OITu/wTkzIv+yRwgtGd+uvWPq5qhZhXfoTh5qad6jl8ABsa5xdtc1l1DThBA6uG
v34xcKyjiuoyj33QEiO9sB+nd2Qm8sTlViQM64bUm8HL7Z3u73S1MvkGSZhLUdnk
wwYwwhXF0VstBmAt0V048j1FOugsF+shNE4p+kjbOczNvZiBLqSqepUye7RwS84f
pJmAcOn/FJAC3gKxBvdd+mxQhVhHn9RM
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:35:03 2025 by rpki-client