This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
File: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft (raw, json)
Hash identifier: ZwZLnh/pHKC//Dk3pOXviaRZ2C5xV2yo7Ia7TUY1tW4=
Subject key identifier: 5D:F4:B3:65:B0:4E:DD:05:DE:C6:65:F8:D0:6F:16:4C:CA:24:9E:76
Authority key identifier: E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41
Certificate issuer: /CN=A91E7FB1/serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541
Certificate serial: 024F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
Manifest number: 0249
Signing time: Sun 07 Dec 2025 00:18:05 +0000
Manifest this update: Sun 07 Dec 2025 00:18:04 +0000
Manifest next update: Sun 14 Dec 2025 00:18:04 +0000
Files and hashes: 1: 6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl (hash: Tm/UcXrb2KyJ7LuJBT/db0s9o8KCQSf25ZluawrcrHw=)
2: FE79EA9A543C11ED972CDD2FC4F9AE02.roa (hash: gieWtrbcC8o5T2SuJsxAI3RuUs6fTQrcS9Bv8fXH6YA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl
rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 591 (0x24f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7FB1, serialNumber=E8CCDCBFBD28D71190E8937F3DAA5958FD481541
Validity
Not Before: Dec 7 00:18:04 2025 GMT
Not After : Dec 14 00:18:04 2025 GMT
Subject: CN=6934c7bd-dd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:50:bf:60:04:7e:bc:50:64:dd:10:73:f7:
c0:8a:8e:01:b7:1b:bd:b3:c9:2b:5d:65:c7:4e:94:
49:93:b2:4b:62:aa:8d:f3:e9:62:9e:27:06:6e:21:
83:da:56:25:fe:c9:1a:f6:75:10:9a:50:c5:07:74:
ba:5e:91:9c:3c:e2:a0:87:e7:dc:c5:7d:09:f7:68:
64:3e:3c:0e:9f:b2:a5:2a:44:36:df:e2:cc:be:fe:
d3:51:d4:73:97:48:d2:d8:06:61:c7:da:7c:ba:7c:
d9:76:de:6d:79:ae:8d:e3:d6:3d:64:cb:e2:09:c5:
19:53:26:1f:d1:e5:0a:ac:f1:86:da:ba:6d:f6:8f:
65:78:15:43:4f:c1:29:80:7b:ee:fe:92:11:e7:8e:
eb:84:19:40:12:f0:fd:ab:3d:b9:dc:99:d8:53:a9:
bf:41:bc:e4:0c:40:4b:40:18:92:ed:59:3c:ba:5d:
f3:5c:92:2b:83:d0:44:a5:18:26:37:48:26:32:dc:
e3:19:32:83:68:41:93:5c:58:9c:a7:68:46:70:c4:
e6:1a:64:78:52:02:e3:7d:b5:c7:84:1d:8a:8a:61:
7e:e1:96:da:7d:ce:b5:d7:1a:72:88:8c:0c:41:fb:
40:e7:51:90:94:23:08:35:93:95:fd:0b:10:3d:e9:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F4:B3:65:B0:4E:DD:05:DE:C6:65:F8:D0:6F:16:4C:CA:24:9E:76
X509v3 Authority Key Identifier:
keyid:E8:CC:DC:BF:BD:28:D7:11:90:E8:93:7F:3D:AA:59:58:FD:48:15:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Mzcv70o1xGQ6JN_PapZWP1IFUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FB1/AAD69040543811ED938C6628C4F9AE02/6Mzcv70o1xGQ6JN_PapZWP1IFUE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c6:97:9e:b8:94:89:ae:94:7c:19:0c:5e:66:03:65:e0:8c:
db:62:60:cd:7b:a0:7f:45:4e:c4:44:1c:f5:05:c6:79:11:2e:
b7:1a:d3:6d:f7:ee:fe:4f:12:29:59:35:58:c6:a3:a0:26:05:
c9:e0:08:25:3f:e7:cb:e9:cd:54:4e:95:24:e5:7d:a7:7c:14:
e8:61:cd:c6:6d:8f:70:64:af:30:c6:35:27:3c:1b:f2:42:6d:
fd:07:45:a1:e7:9f:61:a1:48:ee:96:b4:62:ea:2e:e5:cf:b7:
43:1f:89:b0:29:6b:fa:d7:d3:4d:3b:a7:16:e5:09:d7:c5:ec:
51:0b:42:fa:b9:98:38:32:99:3d:af:fb:45:4e:d3:2e:2c:bc:
ff:67:9f:0d:9c:ff:8f:10:27:d7:df:c7:64:04:fa:ea:d2:49:
c9:6d:21:c8:fa:8f:e8:55:76:a6:68:a1:f6:78:08:ab:af:3e:
5e:aa:27:a0:ba:ad:4c:27:bc:a2:0a:a5:9c:8e:11:cd:84:50:
c2:e3:fe:20:1b:8e:31:76:f2:ea:9e:44:5a:42:4e:14:a9:c5:
03:d8:51:98:03:06:c8:ab:c8:01:7c:ed:fc:58:8e:84:02:b9:
04:65:68:36:82:5b:53:6a:5c:1f:1f:28:a3:17:87:d7:e1:31:
2a:8f:41:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:30:22 2025 by rpki-client