This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json)
Hash identifier: TCukzgQQ6gw2ShHPegLBIuewBa3LB/jamHyy/L3+SAQ=
Subject key identifier: 6D:13:7D:D2:C5:FD:B3:CE:89:05:4C:3C:1F:9D:5E:89:CC:74:87:BA
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial: 0D42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
Manifest number: 0D0C
Signing time: Thu 04 Dec 2025 17:37:30 +0000
Manifest this update: Thu 04 Dec 2025 17:37:29 +0000
Manifest next update: Thu 11 Dec 2025 17:37:29 +0000
Files and hashes: 1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: 1Bif7hL6z1iNNTio7l+YHgh8tGldar+iL44faqujmos=)
2: 7545D7688D6C11F0AB7BFE70C4F9AE02.roa (hash: Gso7riR6mhTBetdxhvBcEVx4lP0fazKGiY4D6n5IxPQ=)
3: 584733B48D6C11F09980DA5EC4F9AE02.roa (hash: h29koSbtR2J5ejxH0g/g8JKXTU/n2VhgMI8p7KUTTRI=)
4: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: 1TLr5oM7v/qdbXCuWglO9MT2WfClZILhcDQljm7O2lk=)
5: F8C3F402870A11F0A015612EC4F9AE02.roa (hash: XvrYP38xvdCgdawfCh7HadAKH1aRcApDaLO6IdzBa/w=)
6: 7617F5408D6C11F0AB7BFE70C4F9AE02.roa (hash: c7Vsr0eRAEmxWhobNGyEno1B5Pvs5ja8tO1BeT/ckVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:37:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3394 (0xd42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Validity
Not Before: Dec 4 17:37:29 2025 GMT
Not After : Dec 11 17:37:29 2025 GMT
Subject: CN=6931c6d9-b0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:18:10:4c:93:56:c5:49:34:81:65:dc:0c:
58:70:d3:42:3c:3e:93:e5:b4:3b:98:43:d9:08:c8:
28:df:b7:b0:03:8f:b8:e5:fe:09:d5:63:e1:1e:66:
cf:39:f6:31:39:cb:0a:27:d8:de:26:d4:ea:e1:d5:
87:52:91:d4:70:ac:38:3d:bb:4e:08:3b:55:a2:25:
27:d2:72:54:05:ed:9c:ed:77:ea:f9:73:a4:99:03:
bb:5b:75:82:d8:d5:43:21:a2:3d:3a:fd:ad:8f:f0:
e2:cf:d0:be:e4:67:7c:8b:42:56:8e:df:93:07:3d:
e6:34:23:ec:33:c3:ed:61:bb:33:3f:26:a7:78:90:
bc:70:c9:64:eb:30:d9:b3:b6:88:f5:0e:57:76:aa:
45:e6:08:8a:e0:a2:55:01:fa:08:38:2b:aa:3f:48:
3a:2b:2e:2d:a5:70:f8:72:48:c2:64:c4:35:fe:86:
b5:64:5a:5a:26:04:f9:37:f9:73:e4:b6:ce:fe:96:
b7:ff:c8:da:b3:a3:bf:bf:e9:75:05:ba:1d:aa:5d:
f5:ef:fe:5d:b8:2c:db:a1:27:9c:67:f5:6c:54:05:
76:e8:a3:44:50:92:12:59:71:42:6b:03:30:e8:c6:
d9:82:a1:36:e0:cf:f3:45:7b:e5:75:67:59:fe:95:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:13:7D:D2:C5:FD:B3:CE:89:05:4C:3C:1F:9D:5E:89:CC:74:87:BA
X509v3 Authority Key Identifier:
keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:34:a9:cf:3f:0d:01:ff:d4:4a:80:c3:66:f9:13:d8:1c:cf:
6c:d3:b0:a9:28:31:5c:62:6f:79:53:27:c0:ff:69:05:79:49:
d2:ef:60:46:13:62:ca:ae:b4:0f:e2:ec:10:3d:03:3a:da:65:
fa:9c:96:91:e5:2b:0b:54:32:6e:58:be:ee:e0:a3:6e:b0:38:
5e:99:dc:40:be:7b:ae:f7:0e:a1:e6:9a:f5:4c:0d:e3:11:d1:
d0:18:aa:cc:81:98:19:36:b4:63:b6:2b:38:16:86:36:67:a7:
65:50:04:63:1a:00:6c:27:48:b6:2c:2b:1b:4f:a6:a4:8a:d7:
31:8f:31:5e:47:88:a7:17:8b:7d:02:4f:99:0d:36:ea:84:fa:
d8:46:4b:4e:8e:ce:aa:76:58:ac:f1:60:07:66:67:13:ef:af:
af:da:78:b2:1f:ed:81:f8:e5:f2:73:f1:ac:c8:53:e7:91:64:
ec:3f:1c:c6:72:7b:36:69:91:96:ab:88:60:96:30:20:7e:3f:
02:2d:a4:22:4b:fc:a8:2e:f4:6f:a7:0f:0e:f7:6f:aa:7b:29:
97:3c:4b:96:24:8e:e5:c9:87:fe:ca:2c:c3:39:92:60:8d:13:
66:4f:0a:df:32:c2:d9:92:4f:65:cb:c3:11:59:40:57:5b:68:
bd:d5:a5:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU0MTgxMTAvBgNVBAUTKDZCNUVCRkU5OEEzNzg3NjRDMUIxMkRDQjY5MDRFNDYx
MEI1MEFDNTcwHhcNMjUxMjA0MTczNzI5WhcNMjUxMjExMTczNzI5WjAYMRYwFAYD
VQQDEw02OTMxYzZkOS1iMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuysYEEyTVsVJNIFl3AxYcNNCPD6T5bQ7mEPZCMgo37ewA4+45f4J1WPhHmbP
OfYxOcsKJ9jeJtTq4dWHUpHUcKw4PbtOCDtVoiUn0nJUBe2c7Xfq+XOkmQO7W3WC
2NVDIaI9Ov2tj/Diz9C+5Gd8i0JWjt+TBz3mNCPsM8PtYbszPyaneJC8cMlk6zDZ
s7aI9Q5XdqpF5giK4KJVAfoIOCuqP0g6Ky4tpXD4ckjCZMQ1/oa1ZFpaJgT5N/lz
5LbO/pa3/8jas6O/v+l1Bbodql317/5duCzboSecZ/VsVAV26KNEUJISWXFCawMw
6MbZgqE24M/zRXvldWdZ/pUdRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0TfdLF
/bPOiQVMPB+dXonMdIe6MB8GA1UdIwQYMBaAFGtev+mKN4dkwbEty2kE5GELUKxX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQxOC8wQzBCODAwRUY2
ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gyVEJzUzNMYVFUa1lRdFFy
RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ExNl82WW8zaDJUQnNTM0xhUVRrWVF0UXJGYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NTQxOC8wQzBCODAwRUY2ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gy
VEJzUzNMYVFUa1lRdFFyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC5NKnPPw0B/9RKgMNm+RPYHM9s07CpKDFcYm95UyfA/2kFeUnS72BG
E2LKrrQP4uwQPQM62mX6nJaR5SsLVDJuWL7u4KNusDhemdxAvnuu9w6h5pr1TA3j
EdHQGKrMgZgZNrRjtis4FoY2Z6dlUARjGgBsJ0i2LCsbT6akitcxjzFeR4inF4t9
Ak+ZDTbqhPrYRktOjs6qdlis8WAHZmcT76+v2niyH+2B+OXyc/GsyFPnkWTsPxzG
cns2aZGWq4hgljAgfj8CLaQiS/yoLvRvpw8O92+qeymXPEuWJI7lyYf+yizDOZJg
jRNmTwrfMsLZkk9ly8MRWUBXW2i91aWb
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:13:10 2025 by rpki-client