This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json)
Hash identifier: +Q84+1MDlYRL8FBy60PgnLGCUf/LLdsKb/T0kR6LmI0=
Subject key identifier: 2F:40:50:A4:CD:68:83:6C:2B:D5:14:1C:3E:D1:22:40:38:98:06:1D
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial: 091F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
Manifest number: 08B4
Signing time: Thu 04 Dec 2025 19:48:54 +0000
Manifest this update: Thu 04 Dec 2025 19:48:53 +0000
Manifest next update: Thu 11 Dec 2025 19:48:53 +0000
Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: Gjo20WH5v29DoBZvbA5OGraOhbUWp7Bzd/2YB6md5lQ=)
2: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: BwcQamXNLiosPDRZ6f2FtmfW9jpBhqektxQqopKnPY4=)
3: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: fQqKRj97YwSX01j4RLkIYLyoFuesKb4QSmD9wM54Hnc=)
4: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: 8ZNPpyzaCSOR7XArDiXTgpwOZdqi5o9nlzrrurZ8f2Q=)
5: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: huVUXhJ3Ojs1r05u1jG7Kov4uI++w1LAbAYi/YZa49g=)
6: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: h5BGjGSDw6jhnZlF9NOXRKNYmdB5F7XUQytmx7kt8pU=)
7: 8D5442E28A4011F093E0F94DC4F9AE02.roa (hash: gKM4RcuYJ3WOjsFaGVW261ymQPFBOzXDnV5oh7hrxpU=)
8: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: PfplpurYpM5Nlhs4wMvQOWeVvjM0XGHzdK7n61JNfpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2335 (0x91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Validity
Not Before: Dec 4 19:48:53 2025 GMT
Not After : Dec 11 19:48:53 2025 GMT
Subject: CN=6931e5a5-5859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fe:b3:6e:3f:2a:7c:80:8a:70:2b:75:c3:4e:
eb:67:61:25:a8:3b:0b:29:27:66:e6:2e:48:fe:a2:
b0:e5:84:cf:67:62:2a:0a:62:81:6d:98:4f:9c:02:
d8:1c:08:3d:73:e4:0e:19:f1:ad:95:b1:bb:e3:3c:
32:9b:fc:4e:1b:2a:bd:d6:c3:89:63:6d:ff:b7:2c:
df:89:17:9d:1a:ef:07:92:a1:6f:ef:90:ad:0e:9f:
3f:0f:49:02:59:4e:fa:e0:b7:a9:96:ed:41:bf:a2:
57:ae:18:dd:3c:ac:14:89:45:9c:e7:16:fa:56:31:
cc:88:b5:17:01:13:20:98:a7:f2:e5:45:21:07:a3:
e1:7e:53:ef:4e:7a:70:3f:80:55:aa:42:a3:6d:7f:
0a:b0:ea:45:6e:c9:3c:2f:e2:0e:fc:b4:2a:7e:6c:
36:d1:58:1c:9d:e6:07:a9:f6:9d:8e:24:3b:3e:56:
72:18:59:ae:c8:8a:82:69:4a:b8:24:22:3a:ce:76:
0f:24:93:fc:04:15:02:67:47:88:ea:0e:f0:50:7b:
fe:c8:d7:13:9b:a9:7e:f3:c9:67:cd:d8:31:7d:19:
28:14:a7:f5:80:b5:03:22:40:d1:38:87:8f:a6:db:
ee:32:a3:c7:ee:57:c2:8d:7a:55:29:47:17:ad:38:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:40:50:A4:CD:68:83:6C:2B:D5:14:1C:3E:D1:22:40:38:98:06:1D
X509v3 Authority Key Identifier:
keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:19:94:f7:27:0f:4e:1f:1f:c0:ac:74:ef:1e:2c:e3:be:3f:
dd:ac:a8:f3:8f:74:42:01:db:60:9e:87:a7:d2:95:01:16:d7:
a8:3b:56:25:77:09:ce:ab:cb:2e:c9:6f:d0:c2:97:99:4b:77:
16:8d:e9:67:6c:ae:39:5d:07:de:da:a3:48:a1:eb:ed:4e:ed:
a4:0a:32:72:9f:18:18:30:76:7c:8f:69:b6:13:1b:41:88:7a:
08:4b:49:9a:ff:1f:33:9c:a6:b2:14:80:5c:a7:c0:4c:88:88:
59:40:26:47:cb:8a:9d:d8:93:3e:c0:75:7b:84:cf:06:a6:04:
cf:e7:5d:80:c1:01:1c:51:7a:fc:ad:3c:d0:c8:41:df:8d:fb:
72:5d:23:c6:84:4e:de:f0:29:51:de:20:23:70:7b:0c:52:a0:
f5:3a:1d:ba:a7:49:c0:e9:2e:1d:23:b5:b4:13:7a:b0:65:a5:
44:68:d8:f2:27:31:50:5f:dd:5b:10:c9:53:73:15:3c:e5:79:
89:e1:65:7c:83:42:76:75:6a:1b:9d:82:8d:d2:3a:bd:84:ae:
95:e7:18:51:b0:d5:b0:c4:40:97:44:7a:2f:3b:9f:ea:96:75:
e3:47:09:58:71:88:90:9f:42:1a:98:ab:23:64:52:dc:c8:2f:
a4:01:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:22:21 2025 by rpki-client