This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
File: 6_d1-2stKz-APD8za4MAqL5r6YU.mft (raw, json)
Hash identifier: sswRVL/ZGetwaNgat6kRVLCh/CuRsbBU1j+Zgy7CcFQ=
Subject key identifier: 67:BE:51:1E:2A:8A:A1:73:C5:19:CF:A3:4C:0F:02:AE:98:09:B7:11
Authority key identifier: EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85
Certificate issuer: /CN=A91D65E6/serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
Manifest number: 0151
Signing time: Sun 25 Jan 2026 03:26:23 +0000
Manifest this update: Sun 25 Jan 2026 03:26:22 +0000
Manifest next update: Sun 01 Feb 2026 03:26:22 +0000
Files and hashes: 1: 6_d1-2stKz-APD8za4MAqL5r6YU.crl (hash: YJyi4tcuzeJw8hgZbE3CPA2drMb/UnbsR4i7vIrYO98=)
2: 45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa (hash: CcUp55XuDgPxaWMypNloisBK2Ub48xmWh//qSjTOE5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl
rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D65E6, serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985
Validity
Not Before: Jan 25 03:26:22 2026 GMT
Not After : Feb 1 03:26:22 2026 GMT
Subject: CN=69758d5e-896c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a5:f9:b4:59:6b:51:7c:e2:82:98:d9:07:29:
9f:ba:da:7e:1b:45:5d:5c:b8:d6:9e:51:22:db:5a:
55:a3:e2:0d:ea:5b:19:23:3a:de:ce:2b:68:03:0f:
fb:fd:7f:13:b8:50:5b:dc:fa:b3:f3:03:a8:23:1c:
c0:85:90:99:42:e3:25:b0:aa:5c:9f:29:35:84:79:
88:bd:aa:04:68:99:2b:7e:bb:77:ff:fb:10:41:22:
06:42:b3:9c:60:f1:34:b0:6b:9d:5f:5d:4c:92:f8:
a8:54:17:65:89:02:30:d0:65:5e:fd:52:be:bd:c7:
06:b0:ca:de:c7:e5:62:c9:68:d4:bd:6f:dc:4b:26:
11:2d:9c:a9:18:a9:07:eb:ac:0d:5c:95:8d:96:22:
10:7c:e7:31:71:65:d1:70:37:f5:12:19:1b:08:be:
52:65:29:ec:8c:e5:6f:cd:6d:9d:44:db:83:73:df:
06:08:98:ec:67:79:a0:d7:c8:ae:c7:18:a4:2d:a0:
3e:c2:2d:ec:47:f4:93:cf:df:4d:84:c5:0d:0d:54:
15:e6:2b:56:1a:05:df:fa:10:5c:24:64:d0:c4:d1:
2e:d8:bc:4c:75:87:88:f6:87:83:73:4c:da:7a:84:
69:ef:73:00:60:9b:19:c4:3a:76:77:5c:e2:0a:b0:
56:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BE:51:1E:2A:8A:A1:73:C5:19:CF:A3:4C:0F:02:AE:98:09:B7:11
X509v3 Authority Key Identifier:
keyid:EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7e:75:89:84:9e:fd:18:b1:af:2d:77:08:dd:38:db:59:b1:
ed:10:1b:fb:dc:dc:3d:d1:aa:af:0a:01:eb:d1:79:58:07:f0:
33:54:7a:7d:76:e2:38:fb:1d:a0:86:6f:26:81:a9:99:a9:6f:
b9:e9:cc:25:ca:75:a0:d1:79:40:50:48:d8:71:12:27:36:e0:
06:f4:37:fd:17:f9:b5:bb:98:b8:f8:96:5c:86:74:ba:b7:0d:
f2:42:a9:aa:e9:ed:9c:04:b6:eb:1e:7c:06:22:0d:4a:31:6d:
85:1b:5a:73:c1:5a:bc:8b:d0:22:5d:22:05:a4:2f:58:b2:47:
96:1b:d2:07:94:24:69:b6:b6:83:a9:c0:30:39:83:f7:c3:d1:
6b:aa:f4:09:40:97:c7:5a:b1:74:b9:48:b7:ec:2e:04:2c:48:
e7:e2:4c:2e:ac:18:d5:2c:4e:1e:41:9b:75:58:8c:f1:c7:15:
09:bc:74:bb:71:e7:5f:44:95:72:4c:8c:6e:fd:50:d9:8b:5e:
51:0a:e1:5f:6d:4a:80:5a:31:02:8d:cb:33:5e:c5:b7:1f:0d:
14:0a:44:94:56:67:23:5b:e7:24:a7:5b:80:69:a4:ac:77:ec:
6e:e9:1d:00:86:d6:78:bb:ca:51:6c:ce:5f:b0:4f:4a:f2:1b:
07:f7:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:24:38 2026 by rpki-client