This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File: bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier: ID8tFfW7lGQ3RmuFyjYp+a4rwdoP2p0xMOAmTqVySEg=
Subject key identifier: E3:93:BD:D0:DF:D8:80:C6:C0:4D:B5:C0:A4:B2:4D:7B:2A:C0:A4:75
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial: 2589
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number: 256D
Signing time: Sat 06 Dec 2025 15:30:27 +0000
Manifest this update: Sat 06 Dec 2025 15:30:26 +0000
Manifest next update: Sat 13 Dec 2025 15:30:26 +0000
Files and hashes: 1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: gpopDuUGE7aChWo/wnvMVZUaa/1T9GtU/vGTqNhJRWw=)
2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: 2XdDFumhJrXy6IXe/lYhN3ti1b3JjPjhpziW+Y/V7SA=)
3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: iZrS1s3zKi3WPbeCDiFNxotK29OIUocoDpBkJ3wbMfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9609 (0x2589)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Validity
Not Before: Dec 6 15:30:26 2025 GMT
Not After : Dec 13 15:30:26 2025 GMT
Subject: CN=69344c12-ec63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:a1:ed:79:ac:f3:8e:e6:1c:18:fe:ca:b4:
60:d0:64:0f:08:f0:50:e7:41:f9:39:89:ec:7f:16:
4a:f7:88:88:6d:9f:75:58:d1:b5:84:d6:6b:e0:2c:
dc:f4:60:34:5a:cf:be:62:15:fa:81:5a:3e:7d:f7:
b7:4c:66:60:87:d8:c7:12:f1:44:9f:8f:27:0f:ce:
ee:dc:89:92:ce:90:75:5b:73:00:32:f3:05:5a:b6:
f0:bf:29:b5:f7:e1:2e:e6:c9:22:9a:96:56:57:2f:
03:89:0f:55:b4:a1:5d:bb:48:e0:b6:16:13:c1:36:
fc:c7:91:5b:d3:d7:ee:28:3f:09:43:18:eb:f9:8a:
c5:b6:6a:48:d0:19:ce:c9:58:23:18:aa:ec:b2:5a:
f9:ad:46:90:19:f0:0b:9d:bc:6c:6a:e4:0c:10:6e:
a0:5a:a9:52:00:64:ee:98:03:d7:2c:e0:52:be:01:
92:58:4e:ff:a0:ed:01:1d:d9:fd:e5:68:cc:8b:9f:
69:34:f7:b9:88:96:ff:30:cd:4f:77:2c:41:65:73:
bd:24:d3:9d:0a:ce:8b:c0:c4:b4:a3:1c:3a:40:9a:
7d:8c:e5:c4:80:30:6b:dd:66:02:e9:a3:26:f1:26:
09:73:46:9d:d9:d3:37:a9:46:25:5b:de:b6:cd:b6:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:93:BD:D0:DF:D8:80:C6:C0:4D:B5:C0:A4:B2:4D:7B:2A:C0:A4:75
X509v3 Authority Key Identifier:
keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:36:77:fc:c7:34:11:ed:59:8a:05:7c:63:90:77:a8:f3:44:
8e:83:66:4d:47:cf:d7:48:9d:bd:0b:86:31:70:40:5a:73:26:
1f:2c:29:78:15:dc:3d:69:cc:1c:0e:c7:70:d1:1f:aa:17:5a:
7c:a3:33:c9:df:1a:22:2b:b1:6e:ba:c6:c2:60:73:23:00:a8:
8c:03:d3:ae:5b:cd:fd:5d:99:c2:69:b6:13:60:49:77:a6:ea:
fe:98:7b:3e:db:69:aa:7e:cc:85:a1:bf:cd:63:96:24:b5:58:
85:c0:c1:7b:50:90:09:ba:e2:c7:06:f2:0d:69:45:6b:99:66:
17:c7:ab:48:68:39:be:43:74:9a:1f:91:1d:3b:bf:95:c1:00:
66:66:7f:61:fd:3a:28:94:41:8e:42:dc:30:b9:8c:a5:74:ab:
e5:8f:d4:ab:ed:d2:04:54:f1:26:10:8a:c2:c9:99:60:88:7b:
ef:e1:54:5e:30:a1:3d:87:3c:d2:ba:73:2a:ba:33:cd:0c:24:
9c:51:10:9b:6a:3a:d5:24:15:76:ae:d3:c6:ae:a7:be:97:11:
72:fd:46:59:44:dd:52:b8:15:89:50:18:0d:8d:90:7f:27:5a:
81:bb:cd:23:af:b5:0a:9f:c2:d2:92:aa:b2:44:b9:f5:4f:27:
d9:f8:06:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkzM0ExMTAvBgNVBAUTKDZFOEVBMUUzMjQwQzBCQjNEMTNCNEQyNzVDNkMwMzI2
QTU2OEVDODcwHhcNMjUxMjA2MTUzMDI2WhcNMjUxMjEzMTUzMDI2WjAYMRYwFAYD
VQQDEw02OTM0NGMxMi1lYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Hmh7Xms847mHBj+yrRg0GQPCPBQ50H5OYnsfxZK94iIbZ91WNG1hNZr4Czc
9GA0Ws++YhX6gVo+ffe3TGZgh9jHEvFEn48nD87u3ImSzpB1W3MAMvMFWrbwvym1
9+Eu5skimpZWVy8DiQ9VtKFdu0jgthYTwTb8x5Fb09fuKD8JQxjr+YrFtmpI0BnO
yVgjGKrsslr5rUaQGfALnbxsauQMEG6gWqlSAGTumAPXLOBSvgGSWE7/oO0BHdn9
5WjMi59pNPe5iJb/MM1PdyxBZXO9JNOdCs6LwMS0oxw6QJp9jOXEgDBr3WYC6aMm
8SYJc0ad2dM3qUYlW962zbanbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOTvdDf
2IDGwE21wKSyTXsqwKR1MB8GA1UdIwQYMBaAFG6OoeMkDAuz0TtNJ1xsAyalaOyH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTMzQS81M0ZFMUVGQTJC
NjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3UFJPMDBuWEd3REpxVm83
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JvNmg0eVFNQzdQUk8wMG5YR3dESnFWbzdJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTMzQS81M0ZFMUVGQTJCNjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3
UFJPMDBuWEd3REpxVm83SWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMNnf8xzQR7VmKBXxjkHeo80SOg2ZNR8/XSJ29C4YxcEBacyYfLCl4
Fdw9acwcDsdw0R+qF1p8ozPJ3xoiK7FuusbCYHMjAKiMA9OuW839XZnCabYTYEl3
pur+mHs+22mqfsyFob/NY5YktViFwMF7UJAJuuLHBvINaUVrmWYXx6tIaDm+Q3Sa
H5EdO7+VwQBmZn9h/ToolEGOQtwwuYyldKvlj9Sr7dIEVPEmEIrCyZlgiHvv4VRe
MKE9hzzSunMqujPNDCScURCbajrVJBV2rtPGrqe+lxFy/UZZRN1SuBWJUBgNjZB/
J1qBu80jr7UKn8LSkqqyRLn1TyfZ+AaL
-----END CERTIFICATE-----
Generated at Sun Dec 7 21:35:56 2025 by rpki-client