This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json)
Hash identifier: ws/BUMKPfSzj+GSzHLI0a4o+upuinBAjvJfTD3mAti8=
Subject key identifier: AF:03:7F:93:E8:29:69:6E:27:A5:E5:33:99:F4:E5:0B:CA:2E:6F:00
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial: 2A98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
Manifest number: 2A72
Signing time: Thu 04 Dec 2025 15:24:44 +0000
Manifest this update: Thu 04 Dec 2025 15:24:43 +0000
Manifest next update: Thu 11 Dec 2025 15:24:43 +0000
Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: a/flKsnX4SVEeKFCDYB3BQYBxIzraTXYTX/4m+nRzZg=)
2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: nsCF4rGbw9XGs9CgJZKLcahJ7vZuzL6jjWzwGBe2QfI=)
3: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: xkr6cXGQ/p7K1jYKezf1z+xt8LJrbP87Z5GaO3mC9Iw=)
4: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: dA0s4TToOxTxCGWPhL3CMsQZBEq0Isrnu6dBhBWPJ8w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:24:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10904 (0x2a98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Validity
Not Before: Dec 4 15:24:43 2025 GMT
Not After : Dec 11 15:24:43 2025 GMT
Subject: CN=6931a7bb-f1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:4f:1d:98:62:7f:77:33:01:be:ae:e1:0d:
38:a5:23:8d:ab:57:bb:d4:6f:10:38:0e:51:97:5c:
84:3a:7a:88:6d:24:9f:e6:5a:ae:be:49:fc:3c:cc:
42:c0:a7:9a:2d:ce:dd:b5:88:0a:e1:2a:2d:6b:1a:
1c:93:23:29:5c:8d:93:5e:b0:50:35:e2:90:9a:2c:
91:2e:70:30:35:43:cc:60:c6:bb:db:0e:5f:da:a5:
6e:26:c5:fe:dd:ef:a2:8d:fe:42:92:41:7d:56:3e:
64:4a:a3:d3:ab:6c:f5:2e:3e:d3:53:eb:c9:f6:f0:
25:c5:92:24:5c:9e:c4:a3:a0:48:ec:45:5a:6b:42:
fa:0c:35:3f:7e:f6:5a:5a:a6:e9:fe:cc:f3:b2:d4:
80:48:07:89:8b:65:02:4e:81:7e:5c:4b:ad:fd:90:
fa:59:97:fd:ca:ea:0b:50:04:02:05:57:2e:3f:ce:
a4:5c:6b:e6:5d:3a:5f:f6:34:a3:46:28:ec:c8:c8:
c7:83:8e:30:c2:af:ef:82:19:1f:e4:74:e9:04:c4:
6d:8c:ca:34:c8:4a:96:7b:e0:fc:2c:f0:3e:a2:b5:
06:f5:48:87:34:a5:e1:b7:9b:eb:c0:77:5a:5e:cf:
db:ec:5c:f4:7e:0b:ce:c9:cb:ee:cb:b2:24:cf:3c:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:03:7F:93:E8:29:69:6E:27:A5:E5:33:99:F4:E5:0B:CA:2E:6F:00
X509v3 Authority Key Identifier:
keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:ca:69:f8:7e:02:3f:66:74:4d:38:e1:c1:87:1e:e5:3c:58:
07:6c:de:01:e6:1a:08:f2:73:f0:53:1b:33:ce:8b:2a:bc:cb:
18:15:2e:fa:a4:61:4c:51:ca:e8:52:b0:e3:87:58:34:5f:02:
48:31:9b:48:df:5b:05:33:11:3b:13:87:76:9f:e9:92:27:b7:
2c:ab:f7:41:e5:81:bf:37:92:ce:ae:a2:95:02:e4:a4:8b:a4:
b9:7f:1a:e7:d5:2e:fb:ca:88:92:45:c9:ab:34:43:d7:8c:1a:
ab:7f:c4:09:1c:9d:65:cf:c6:45:4d:4b:4b:8a:92:00:c8:55:
88:c9:30:85:2b:44:7a:9f:8b:a3:2b:62:d2:92:ce:c3:42:a7:
b7:da:78:5c:9d:fe:58:6a:e5:2b:bb:7c:34:70:e9:15:c4:75:
ff:1e:ce:b7:28:42:4a:7f:04:c9:23:fb:5c:03:27:bc:b6:2d:
8f:74:fd:9e:98:b7:9e:75:5b:b7:66:50:2a:e3:ec:f1:8e:ce:
d6:99:67:13:6b:c4:3f:09:0b:90:22:ac:73:f9:f6:86:03:0d:
69:b1:15:b1:b6:7a:a2:39:7a:db:fb:8e:1f:00:a6:7c:5a:8f:
9d:54:a1:74:c7:c5:de:fa:8e:17:92:07:f0:b5:bf:30:96:01:
de:75:cd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:53:18 2025 by rpki-client