This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json)
Hash identifier: BVnILYqzqBO4V4Mfk1OhOrXZfKkeFbVHLwgNmSDOFgA=
Subject key identifier: F9:05:4C:66:A0:80:DB:9F:54:A6:28:3F:49:92:D7:D2:63:3A:6E:05
Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
Certificate serial: DA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
Manifest number: D9
Signing time: Fri 05 Dec 2025 03:35:28 +0000
Manifest this update: Fri 05 Dec 2025 03:35:27 +0000
Manifest next update: Fri 12 Dec 2025 03:35:27 +0000
Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: 56oVvltOR5TMhLguMjAay/WFfsdbSbzEkRLT3QVei34=)
2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl
rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4
Validity
Not Before: Dec 5 03:35:27 2025 GMT
Not After : Dec 12 03:35:27 2025 GMT
Subject: CN=69325300-5d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:af:c1:04:cb:84:58:bf:4e:9b:5e:56:bf:
de:db:43:eb:d9:c6:48:67:85:23:b3:c5:27:5d:b9:
da:e7:30:de:b4:f4:4b:34:98:78:ad:2e:40:34:cd:
21:aa:55:a7:f4:6e:72:48:f5:57:11:48:ed:23:ac:
a1:3f:b4:2b:07:01:b2:ab:e9:d8:15:40:b1:c4:eb:
69:60:ed:ab:6d:3d:ed:b6:47:33:fe:02:71:b9:76:
34:2e:30:84:28:ff:44:20:d2:c1:f2:2e:23:73:52:
aa:de:5d:09:48:76:04:39:a9:78:cb:22:7a:72:18:
7e:e0:15:28:d8:70:79:a9:f7:b7:a0:bc:c9:11:62:
c5:39:10:c5:43:a3:92:91:08:90:df:75:93:ca:b5:
d8:71:ec:d6:05:cc:93:53:32:18:34:f3:8f:83:d6:
bb:5e:9d:ae:47:d4:9a:4a:9c:00:fb:57:51:e9:b0:
be:f0:e6:48:43:0b:dc:47:36:5e:9a:b2:d8:55:7b:
63:4d:59:fe:3c:4a:a8:a6:7f:ea:0c:56:43:79:b5:
d7:5e:22:1c:3a:b9:66:97:f8:85:d6:08:31:ff:59:
3b:de:8e:37:d8:86:c3:04:95:67:f4:99:bc:f0:82:
79:55:c1:59:f3:94:15:45:3d:eb:d2:a4:32:f9:1f:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:05:4C:66:A0:80:DB:9F:54:A6:28:3F:49:92:D7:D2:63:3A:6E:05
X509v3 Authority Key Identifier:
keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a3:74:19:a6:cd:47:30:0b:17:3a:d5:07:9f:0d:56:f0:b4:
e0:8d:01:d9:6b:ac:e7:aa:ce:34:eb:c4:48:ad:67:56:33:eb:
1c:b9:69:ac:e4:48:36:2f:d5:29:e6:44:0e:48:b3:a2:1e:53:
4a:71:69:4f:49:e7:05:93:62:44:0e:04:6a:ca:b0:c8:3c:c3:
3c:52:7d:d7:85:11:d2:dd:03:ea:f7:a8:df:97:45:d4:e0:2a:
91:80:60:79:a9:36:5d:29:d8:30:1a:44:18:2b:75:b1:d2:9d:
7e:0f:1e:11:b3:dc:ec:c1:14:e0:aa:c8:3d:03:d6:d6:f6:48:
d1:b9:9f:29:fd:2c:0f:ac:52:a4:87:8a:45:07:52:05:1d:73:
a5:c5:0c:aa:e1:ae:7c:84:85:00:a6:66:77:d0:68:14:93:cf:
44:89:ad:26:72:5e:07:cf:be:81:c5:51:f5:8b:8e:64:7b:81:
eb:e9:fa:36:fe:c4:31:44:5b:ba:2a:7f:b0:c4:0b:a3:cb:31:
c6:1b:ae:ff:df:5d:5c:68:71:a2:76:52:14:8f:eb:c2:80:37:
70:78:72:ee:f4:10:d1:dc:7b:e0:dd:62:7b:a7:e5:70:ef:77:
d0:61:c4:7d:e5:d5:2f:09:94:19:75:83:fd:95:ec:e2:6c:a2:
b7:3f:14:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:27 2025 by rpki-client