This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
File: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json)
Hash identifier: 1qAsDsAto/ZHLDumtNbse3eU51NILVXlx0kIOlRj3e8=
Subject key identifier: EE:E3:79:4E:13:78:9C:79:C7:80:7F:18:02:5F:66:43:93:E8:85:B9
Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37
Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
Manifest number: 0255
Signing time: Sun 25 Jan 2026 01:00:11 +0000
Manifest this update: Sun 25 Jan 2026 01:00:11 +0000
Manifest next update: Sun 01 Feb 2026 01:00:11 +0000
Files and hashes: 1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: yQWdf29PsXiE4jTU9ZXFhA8FAb8Vx6kfj52BqdS8TaY=)
2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: Dx7BujyDWBTPK8FDZBcp5GgmogMZnafYGexXcGahR58=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl
rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37
Validity
Not Before: Jan 25 01:00:11 2026 GMT
Not After : Feb 1 01:00:11 2026 GMT
Subject: CN=69756b1b-d987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e0:af:a2:3f:4d:17:c3:19:3c:3e:7f:30:a9:
60:2c:c6:39:c3:8f:f0:6a:cf:10:f7:69:e4:b6:9b:
fa:4a:8a:07:f0:f1:f3:43:a6:c1:23:13:25:db:90:
27:b7:38:6c:ee:d9:e1:b1:22:c1:7e:2e:13:4b:91:
c9:19:66:27:3d:4e:be:46:59:6e:62:eb:cc:90:99:
84:8e:32:91:d0:f6:00:63:10:e3:ce:d3:60:90:8b:
aa:70:84:0e:1b:8a:2e:fc:53:bf:7b:8b:ca:aa:cd:
f3:ba:cc:ad:74:34:2d:86:da:08:b6:4e:f9:5b:84:
65:98:13:f0:81:2d:de:18:14:20:82:43:79:2a:58:
86:dd:30:95:46:4b:f0:16:d9:dc:ab:75:ad:d0:37:
3f:c8:e5:1a:a7:6b:87:8a:9e:ea:e8:86:a6:7f:d0:
fa:96:7d:e9:8e:cb:99:76:b5:31:b6:0e:13:6e:9c:
51:7d:64:aa:ce:8e:a7:f2:fd:60:85:de:e4:80:7f:
c7:21:a0:a2:18:9e:5d:95:a5:8b:77:c6:30:08:87:
87:21:76:8f:09:5d:c4:ba:d0:96:45:7d:8e:4e:d3:
b7:8c:c6:d0:ef:37:f9:39:c7:66:df:ae:dc:51:b9:
4f:2f:db:83:e1:db:bd:c1:7c:d4:27:42:c9:99:5e:
6f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E3:79:4E:13:78:9C:79:C7:80:7F:18:02:5F:66:43:93:E8:85:B9
X509v3 Authority Key Identifier:
keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:ea:64:d4:cd:35:0f:e9:7a:b5:92:8e:93:25:55:ff:e2:8a:
7c:47:bb:b0:65:9f:f0:6e:35:7b:7d:3f:a4:3e:d6:2d:37:96:
25:c8:71:0d:aa:3f:5a:43:f3:75:25:08:cb:50:46:8f:d9:47:
f7:15:3c:45:65:2d:05:ff:97:51:4f:c8:fc:a6:c2:b1:9f:e7:
a0:fe:4a:1c:38:26:5f:d3:50:8e:22:41:01:bb:79:9d:b6:ec:
b4:f5:f4:89:8c:a1:df:d2:a3:07:36:18:30:ea:0f:7d:f4:9d:
30:26:4b:e7:0d:1e:a2:5f:e8:c6:78:0e:80:c9:75:50:55:7e:
c1:78:e3:5c:0f:6d:c5:46:12:08:6b:f5:9f:a5:11:50:d8:39:
c5:e3:de:55:25:12:6d:62:fa:87:59:fb:f1:5a:de:95:87:ad:
bd:50:b9:4b:70:29:6c:31:47:5b:18:0d:23:b9:0d:74:96:6a:
b4:c2:78:d3:ed:a9:e9:0a:c5:fe:de:e7:b7:a3:92:dc:63:5b:
e7:4e:4e:46:10:86:4c:97:82:7a:7e:17:18:af:c0:ac:41:de:
1a:55:8a:ce:72:10:7d:8d:fd:ce:5d:06:19:90:50:95:24:a2:
88:fa:17:6c:65:39:22:1f:12:31:b9:45:80:d5:6b:f7:4b:58:
86:b3:cc:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0
NTE3OEZCMzcwHhcNMjYwMTI1MDEwMDExWhcNMjYwMjAxMDEwMDExWjAYMRYwFAYD
VQQDDA02OTc1NmIxYi1kOTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7OCvoj9NF8MZPD5/MKlgLMY5w4/was8Q92nktpv6SooH8PHzQ6bBIxMl25An
tzhs7tnhsSLBfi4TS5HJGWYnPU6+RlluYuvMkJmEjjKR0PYAYxDjztNgkIuqcIQO
G4ou/FO/e4vKqs3zusytdDQthtoItk75W4RlmBPwgS3eGBQggkN5KliG3TCVRkvw
Ftncq3Wt0Dc/yOUap2uHip7q6Iamf9D6ln3pjsuZdrUxtg4TbpxRfWSqzo6n8v1g
hd7kgH/HIaCiGJ5dlaWLd8YwCIeHIXaPCV3EutCWRX2OTtO3jMbQ7zf5Ocdm367c
UblPL9uD4du9wXzUJ0LJmV5v3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7jeU4T
eJx5x4B/GAJfZkOT6IW5MB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC
QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt
emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OENCMC8zNzcwMTI0RTZCQzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pN
anhSdTZtRnpiVDFGRjQtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB06mTUzTUP6Xq1ko6TJVX/4op8R7uwZZ/wbjV7fT+kPtYtN5YlyHEN
qj9aQ/N1JQjLUEaP2Uf3FTxFZS0F/5dRT8j8psKxn+eg/kocOCZf01COIkEBu3md
tuy09fSJjKHf0qMHNhgw6g999J0wJkvnDR6iX+jGeA6AyXVQVX7BeONcD23FRhII
a/WfpRFQ2DnF495VJRJtYvqHWfvxWt6Vh629ULlLcClsMUdbGA0juQ10lmq0wnjT
7anpCsX+3ue3o5LcY1vnTk5GEIZMl4J6fhcYr8CsQd4aVYrOchB9jf3OXQYZkFCV
JKKI+hdsZTkiHxIxuUWA1Wv3S1iGs8we
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:07:26 2026 by rpki-client