This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json)
Hash identifier: idg3IXm6CUjAwGHmeYZrklEtFmn30Dte01xgRKQSelo=
Subject key identifier: A2:44:35:1D:E6:8F:6A:C9:86:FF:32:52:F6:91:D0:1B:05:DE:2C:D7
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial: 0B77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
Manifest number: 0B1D
Signing time: Thu 04 Dec 2025 18:44:39 +0000
Manifest this update: Thu 04 Dec 2025 18:44:38 +0000
Manifest next update: Thu 11 Dec 2025 18:44:38 +0000
Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: Kw8r1uRQW1T2Bv2rBIS+8gduGPMY2V9LxaaxjVKdGtQ=)
2: 3061606C730211EE89A20645C4F9AE02.roa (hash: WeaTbMf7BP2O/+pSf493EUl2h+/ILCKWUynSWVLQ+8w=)
3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: 5Zn/NXgpFmO6vwefOP5YQZGHnsLFk/qGC1rRCPIC8NI=)
4: CA726EB27D6411F0A526106EC4F9AE02.roa (hash: 5eFto7Xbd6SIdBIgHT1gzsw1kP93cMF3mG+IAAtdNqA=)
5: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: +GeY+3nzfxfGGtkbBKDt2xX2WXjnwHUxE0t1JDRZXWg=)
6: 121EADE62F7011EF82514126C4F9AE02.roa (hash: Ggk4L4L5OqKbvJnFw7W1rW5JJcN5Zt+SHJCIjJMSok0=)
7: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 6RbxNEp3aAcRY9ABgjcNbqmStmri8VA4rw2gNzJyQ34=)
8: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: R6+4ss6mJMA2fcEMrX15U2Fp8fbdxhbZt9mRr5DW3z8=)
9: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: day2QfsK2GhqNsQUlv32u5aYAMW/wnELuNVvZR1uSgU=)
10: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: DeDkGdsN3N2xX3gJk6DxRPzTQe+BgFZ1qo1jOWYyHBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:44:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2935 (0xb77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Validity
Not Before: Dec 4 18:44:38 2025 GMT
Not After : Dec 11 18:44:38 2025 GMT
Subject: CN=6931d697-957c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c3:fc:6d:bc:65:bf:70:56:8a:32:36:a8:f3:
34:a4:9d:8e:fb:6b:fc:b6:42:fb:89:03:17:07:f8:
a0:58:57:e8:5a:6c:6e:2e:53:a2:28:12:49:6e:80:
21:d4:07:ef:e1:b2:d2:e4:b0:65:c1:35:f8:21:9e:
fe:77:d3:4b:35:a7:8e:04:0a:32:6e:4d:46:a0:a3:
85:84:a8:3b:fa:a9:1a:06:d3:01:f6:e1:16:95:7b:
ac:75:85:eb:ee:84:3e:4e:ed:ad:10:dd:6b:1b:03:
c2:a7:6f:d4:de:4b:30:3e:fe:83:10:d3:84:6b:4f:
9a:73:6f:48:2a:6e:18:fe:63:df:96:40:a0:91:4c:
fb:e2:37:85:95:26:cf:a4:07:a2:4b:9b:49:8f:0a:
01:41:80:6a:95:17:e3:a9:bd:82:ad:ca:07:86:df:
d3:84:d4:d3:ce:38:eb:f0:3b:ab:39:00:28:19:ab:
68:87:b3:bc:9b:d2:02:d0:b2:2b:73:95:59:9c:98:
e5:c9:d3:33:ce:8a:8d:e3:20:12:b8:de:a3:7b:c0:
a3:71:09:77:61:5c:20:cb:58:5c:27:5e:76:da:44:
f0:39:e4:f8:12:7b:03:53:6e:85:c3:cf:5d:af:c7:
4f:05:60:f6:45:07:b0:e4:41:0f:f4:85:d4:60:23:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:44:35:1D:E6:8F:6A:C9:86:FF:32:52:F6:91:D0:1B:05:DE:2C:D7
X509v3 Authority Key Identifier:
keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:16:7e:cc:9a:d4:d2:f8:38:6c:3b:e8:19:9f:c6:5a:2f:45:
7b:03:2a:fd:f4:fa:97:e4:be:28:c3:85:be:39:0c:a0:c8:f6:
68:80:f5:04:40:63:64:ca:63:b2:d4:d0:8c:aa:00:a2:16:5d:
ba:04:f3:17:60:af:e8:6a:c7:00:b2:f5:b4:f1:15:90:90:cd:
78:aa:e4:9a:4b:ba:8c:f7:6f:bb:80:f1:5e:28:a4:ac:6b:d3:
e2:7e:bb:a2:f9:c9:5d:19:19:60:da:c0:21:36:bf:6f:f9:cc:
b9:0e:b3:77:4d:df:2c:73:15:93:c5:9e:65:91:b9:a9:2c:88:
7b:c2:40:15:c6:80:e0:0a:9d:78:28:45:c8:f5:f6:e2:7f:50:
b9:41:c0:e7:51:cf:e5:c9:54:21:e6:37:eb:19:86:1e:fd:47:
a3:8b:c8:37:56:4e:43:f3:dc:ba:f8:cd:40:e5:83:5d:e8:7c:
c6:d2:20:81:c0:c7:91:76:7c:54:80:1d:d6:52:dc:ae:dc:81:
70:2c:6c:70:bc:bf:c7:43:d5:36:ae:ac:3f:00:c8:14:6d:a0:
99:c7:17:c8:a5:61:06:e9:93:a2:05:c0:50:26:f3:af:c3:61:
21:50:db:38:23:5d:ab:5b:c0:25:d1:94:14:df:32:57:af:c8:
eb:3e:83:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:42:30 2025 by rpki-client