This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json)
Hash identifier: v74+GUHYihZ00jLho0uOt/B3C9+SgPLKO0AGCTbA+fM=
Subject key identifier: 96:02:18:6F:73:B4:E2:11:86:AC:03:6E:EB:6D:6A:DC:A0:CB:F2:83
Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Certificate serial: 050E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
Manifest number: 04F4
Signing time: Sat 06 Dec 2025 22:31:24 +0000
Manifest this update: Sat 06 Dec 2025 22:31:24 +0000
Manifest next update: Sat 13 Dec 2025 22:31:24 +0000
Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: C6cLlM0iTP387cOWz5u3g5S0CDw/sCTzTEnPZefA864=)
2: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: doR4Y7/9fJwk4I8rzXTdhySC0dSmOygHgP5L2cehpw4=)
3: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: YNmXXeohBLlW644lJk9sQ0wTlKH8+7poI39Ki1Khyx0=)
4: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: 8jti7DRjplfPDOWY06XiRJGfKvNLpJCDztlNbOL025A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1294 (0x50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8
Validity
Not Before: Dec 6 22:31:24 2025 GMT
Not After : Dec 13 22:31:24 2025 GMT
Subject: CN=6934aebc-9f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:40:c1:3a:f8:5e:6a:e9:3c:3e:41:ca:fb:
9b:e7:b6:c2:cf:75:2b:f6:f2:26:cc:9b:6b:e6:d1:
14:66:c2:0a:20:d5:39:d5:73:cc:fd:92:59:e2:1d:
77:49:0a:e9:c9:ce:74:e6:a1:e5:f6:83:95:7b:d1:
65:21:4b:42:d7:25:0f:60:6d:f1:92:15:70:8d:69:
c0:11:ad:86:ae:ef:ba:cf:ba:e0:d8:4d:71:7c:99:
12:5a:37:79:f7:8b:26:c0:af:63:6c:0f:b4:37:74:
53:10:f5:49:f0:91:ca:e0:b9:32:0b:86:fa:65:d0:
ba:06:0b:fd:21:93:3a:7d:4b:bb:22:cb:0b:3d:18:
08:42:fb:80:7f:33:d0:ad:a8:5d:6d:e7:83:3d:71:
df:d4:66:36:f9:cb:86:12:cd:34:b8:4f:d9:22:12:
1a:15:b3:18:8c:5e:06:6b:05:99:4a:ba:b6:1a:e0:
82:c1:17:a9:21:a3:70:d3:8e:74:f1:93:5b:e2:05:
27:8e:96:e1:a1:87:e0:28:50:0f:c6:73:a2:f4:cd:
e0:2e:bb:0c:d9:45:03:bd:bd:42:22:bb:74:af:9c:
b7:c6:b0:e8:04:c1:e3:4f:b4:85:ae:43:0b:83:b3:
97:08:0b:35:d0:cf:39:d5:be:d0:19:74:5d:23:e6:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:02:18:6F:73:B4:E2:11:86:AC:03:6E:EB:6D:6A:DC:A0:CB:F2:83
X509v3 Authority Key Identifier:
keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5d:fe:02:c4:af:76:e5:6e:32:94:56:c1:86:35:84:fa:85:
f9:52:35:c6:34:b8:3f:36:2f:8b:85:86:3e:3d:15:93:7b:a6:
97:3a:34:ec:a7:00:b5:6f:67:5b:6c:64:29:37:9d:24:c0:46:
8b:ba:0f:dd:43:6d:fb:85:7f:6f:61:71:64:77:65:65:95:88:
09:32:93:dc:86:a1:f4:d7:02:a8:a2:58:04:2c:e2:14:c5:b4:
c0:b7:c3:af:a5:b1:3f:dc:61:6d:f4:50:0f:40:8b:31:81:cb:
3c:85:18:81:94:b8:14:70:0b:11:6b:c8:05:06:68:9b:b7:b5:
68:5a:f8:e6:6d:d2:44:59:f9:71:62:b5:1d:6a:12:aa:e2:a8:
50:1f:17:fa:ec:0f:90:76:4d:39:55:6a:a7:3d:a2:a3:7b:8e:
08:0a:d8:39:59:27:0d:0d:37:90:42:2b:68:50:d1:e7:2c:b0:
bb:5a:1c:4c:cf:e0:61:73:06:a4:e4:5a:67:44:fb:7a:54:4e:
7b:a5:d2:6d:45:7b:d2:d6:8c:fd:28:34:12:64:e0:73:82:56:
b5:7f:4f:5e:86:e5:ab:33:7f:79:c3:65:e4:36:8d:0f:86:df:
81:b4:b4:dc:a9:02:9e:71:e5:58:61:37:f0:2d:5c:83:71:e4:
8c:44:ba:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:34:36 2025 by rpki-client