This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
File: 6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json)
Hash identifier: 5v0c45gLvVytT5tLuv0ifQBVWxYQq3XTwOPsfxhu27c=
Subject key identifier: 39:A7:80:1B:9E:0B:4B:FF:1D:B2:78:C0:36:E6:DF:01:1C:BD:25:EB
Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Certificate serial: 0CED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
Manifest number: 0CC6
Signing time: Sat 06 Dec 2025 17:36:46 +0000
Manifest this update: Sat 06 Dec 2025 17:36:46 +0000
Manifest next update: Sat 13 Dec 2025 17:36:46 +0000
Files and hashes: 1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: pgLMLG/y236BsJ6K3kU452GYf7Ie2FW8hzeHUEXfWVQ=)
2: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: sl3iOiIpHmamaoTiyabLQSY+b6gx0pCXz/Ji33uFHt4=)
3: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: S09PILGMyTlUME8baJPdO5/QImyMfRyviwRhAxvfwcM=)
4: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: JzYOC6lX/mEpxkty6VDIE3Zxqj0b88u+IzzJMZUEq3s=)
5: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: Om0jdNklpNSJZKsNEHd4KcWViukVVvJhi2Cyd/8/qjc=)
6: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: wGD4GgZYH8Wu637cB2mtopho5iC5QPWCCDSkj49GCdU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3309 (0xced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72
Validity
Not Before: Dec 6 17:36:46 2025 GMT
Not After : Dec 13 17:36:46 2025 GMT
Subject: CN=693469ae-76c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:68:26:f7:ce:ca:4a:42:85:9a:91:40:f5:
f2:0c:07:76:0f:b9:27:33:b3:0d:fb:9f:3c:6a:5a:
6f:0d:43:96:3b:b9:fd:13:4a:73:40:5f:ac:0b:a4:
cc:1b:0a:28:b4:d1:4b:fd:d5:b6:30:e9:b0:42:f4:
b5:52:86:d2:7b:14:d1:c6:28:0f:06:dc:3c:86:ed:
d2:2d:ba:f4:f3:01:48:63:05:7a:f0:35:ec:63:cc:
20:a8:15:fa:0d:46:6c:2c:b2:d4:db:f8:93:06:f8:
59:2f:d6:be:50:a8:c2:4e:c1:7f:bf:53:a4:72:98:
49:5a:96:cb:c4:01:fa:95:95:c7:f3:c7:b8:58:ca:
56:2c:42:1a:50:2f:1d:71:56:55:1b:06:6c:97:48:
5e:36:6d:5c:74:04:64:95:a5:02:e5:5f:d3:4a:00:
c4:64:48:bb:e5:1e:34:70:73:d9:7a:90:e1:73:5e:
94:92:64:dc:7a:3c:0d:32:3d:9a:72:1a:a1:7e:4f:
94:f5:26:c8:ba:ba:b3:40:1b:b6:89:2e:a0:d2:7e:
eb:7a:d3:c8:0b:38:1b:10:52:5e:d4:8e:23:2e:83:
b1:ca:be:3c:27:cf:85:27:fd:95:71:20:57:77:8b:
b9:6d:56:00:ca:65:c5:da:b0:69:1e:af:b8:70:34:
9a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A7:80:1B:9E:0B:4B:FF:1D:B2:78:C0:36:E6:DF:01:1C:BD:25:EB
X509v3 Authority Key Identifier:
keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:26:3e:77:5d:6d:6f:fe:76:16:77:c1:4e:6f:df:c0:92:d8:
8b:4e:1d:b9:98:6b:bc:6f:d5:4c:99:fb:7b:c8:f3:fa:fc:42:
83:5d:34:0f:c0:76:45:99:3e:82:0b:12:ec:79:38:10:91:2b:
91:d6:69:7c:f0:cc:ac:bb:24:7b:6a:8b:79:32:6a:fe:ef:ce:
98:1e:25:dc:bd:e0:54:9a:ff:dd:03:72:2a:53:d4:e4:a8:54:
d7:9f:95:42:42:32:a0:f0:e9:67:4b:fc:89:20:e8:da:aa:a3:
4b:cb:bb:30:1d:ad:e0:b6:12:0b:1c:23:d7:f3:e7:be:59:61:
75:5b:1a:3e:88:4a:1c:cf:eb:cc:2b:c1:a0:54:8f:c5:e4:85:
4c:21:98:4b:44:0f:ba:ca:64:2a:fa:66:3f:86:68:94:be:ee:
b3:58:f2:85:f4:39:60:af:e4:ff:de:d8:04:6d:c5:ce:1e:43:
5a:bb:d2:f6:21:f8:f5:26:b6:cf:51:2a:69:43:ff:a0:ca:43:
25:5f:16:7f:dc:d3:53:0a:c2:0a:c7:14:7a:07:0d:e0:ae:bd:
98:8b:b4:d8:94:bb:05:b2:61:1f:a0:14:23:2c:6e:90:56:6a:
f1:bd:0f:d4:32:f0:6a:7c:4b:a4:d3:02:2e:0a:d7:6c:90:41:
26:01:bf:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE5Q0UxMTAvBgNVBAUTKEU5NjkwQkJCOUYzNkMwOUQ0QzJFRDRGNjZDRjU1REMz
NTI3NUZCNzIwHhcNMjUxMjA2MTczNjQ2WhcNMjUxMjEzMTczNjQ2WjAYMRYwFAYD
VQQDEw02OTM0NjlhZS03NmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlZVoJvfOykpChZqRQPXyDAd2D7knM7MN+588alpvDUOWO7n9E0pzQF+sC6TM
GwootNFL/dW2MOmwQvS1UobSexTRxigPBtw8hu3SLbr08wFIYwV68DXsY8wgqBX6
DUZsLLLU2/iTBvhZL9a+UKjCTsF/v1OkcphJWpbLxAH6lZXH88e4WMpWLEIaUC8d
cVZVGwZsl0heNm1cdARklaUC5V/TSgDEZEi75R40cHPZepDhc16UkmTcejwNMj2a
chqhfk+U9SbIurqzQBu2iS6g0n7retPICzgbEFJe1I4jLoOxyr48J8+FJ/2VcSBX
d4u5bVYAymXF2rBpHq+4cDSadQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmngBue
C0v/HbJ4wDbm3wEcvSXrMB8GA1UdIwQYMBaAFOlpC7ufNsCdTC7U9mz1XcNSdfty
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTlDRS81NEYxNURBNDAx
MTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndKMU1MdFQyYlBWZHcxSjEt
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZXa0x1NTgyd0oxTUx0VDJiUFZkdzFKMS0zSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTlDRS81NEYxNURBNDAxMTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndK
MU1MdFQyYlBWZHcxSjEtM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQANJj53XW1v/nYWd8FOb9/AktiLTh25mGu8b9VMmft7yPP6/EKDXTQP
wHZFmT6CCxLseTgQkSuR1ml88MysuyR7aot5Mmr+786YHiXcveBUmv/dA3IqU9Tk
qFTXn5VCQjKg8OlnS/yJIOjaqqNLy7swHa3gthILHCPX8+e+WWF1Wxo+iEocz+vM
K8GgVI/F5IVMIZhLRA+6ymQq+mY/hmiUvu6zWPKF9Dlgr+T/3tgEbcXOHkNau9L2
Ifj1JrbPUSppQ/+gykMlXxZ/3NNTCsIKxxR6Bw3grr2Yi7TYlLsFsmEfoBQjLG6Q
VmrxvQ/UMvBqfEuk0wIuCtdskEEmAb8L
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:36:28 2025 by rpki-client