This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File: xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier: n9Lj0EaaM60UlhbLgI6p0qB3wR0TSvGEQ5O3Np+ofrk=
Subject key identifier: 83:7B:54:93:E8:AB:D6:98:95:94:01:06:07:23:DC:03:83:CB:BB:D5
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer: /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial: 0840
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number: 0837
Signing time: Sat 06 Dec 2025 19:53:58 +0000
Manifest this update: Sat 06 Dec 2025 19:53:57 +0000
Manifest next update: Sat 13 Dec 2025 19:53:57 +0000
Files and hashes: 1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: qTrpnoor3Wfy08SHr3VIocNmdN0vuBU57+IhdgwqBFk=)
2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: W17rFdVVlgGDVf5Sl4I92TD7UhWdwp3Z8iY6u8GBaHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 19:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2112 (0x840)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Validity
Not Before: Dec 6 19:53:57 2025 GMT
Not After : Dec 13 19:53:57 2025 GMT
Subject: CN=693489d6-0cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:56:a5:02:00:c6:2e:be:5e:6a:8b:f6:b0:
bf:8e:e3:c9:43:4b:79:3a:b3:16:f4:95:45:34:af:
4e:4a:fb:91:41:ec:e6:dd:2d:6b:fc:b7:a6:23:79:
69:bf:26:65:9b:29:98:c2:11:99:69:cd:de:2f:e0:
b7:c8:a1:1b:d1:59:ab:31:67:05:6c:a8:d8:e3:3f:
68:61:7e:c4:a1:fe:83:64:e0:fa:be:6c:5e:94:0d:
5f:86:35:5e:20:97:13:1d:d2:a9:c7:83:ab:5f:e2:
26:73:12:ac:bb:7d:d4:e9:7d:e8:97:df:d6:a2:76:
95:be:34:12:13:cf:8e:2b:23:f6:d0:4a:48:ab:cb:
cc:f2:60:aa:4a:24:8e:ba:0a:2f:3f:04:31:5e:6a:
64:6a:39:df:60:b9:c6:b6:7b:50:9c:c6:95:14:24:
36:f8:5e:8e:f9:23:37:4f:d4:bd:87:47:b0:79:16:
84:a3:21:03:47:8c:a4:f2:c7:de:74:68:22:7c:a0:
32:5f:30:d7:d8:a3:db:4c:1c:1b:40:ab:30:a8:84:
a2:d0:c6:22:44:c4:00:3b:61:9e:08:c1:e9:75:8b:
31:5a:46:f2:0d:80:91:6f:f7:c0:c7:47:a1:39:a1:
1a:e0:45:5d:0d:12:93:d8:bd:a7:2d:7f:00:15:2e:
70:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7B:54:93:E8:AB:D6:98:95:94:01:06:07:23:DC:03:83:CB:BB:D5
X509v3 Authority Key Identifier:
keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:00:6b:66:ab:b6:ee:51:ce:a1:ec:85:ef:f7:4d:a3:52:cf:
32:3f:08:12:70:2d:3b:80:e5:cc:3b:98:bc:c4:76:30:24:33:
d0:69:a6:c8:32:78:a2:b3:5e:f9:84:19:ba:89:9c:4c:d6:dc:
83:35:d3:88:68:17:c6:33:2a:0d:c9:12:6f:87:99:e8:e3:2b:
3d:8c:b7:f1:41:2e:f6:73:99:af:54:a7:ce:2a:4a:e0:e7:41:
92:f8:3f:81:ee:4f:0c:62:02:a9:0b:93:89:3b:51:74:79:46:
5a:0b:66:78:e0:40:e8:cf:68:85:7d:af:95:16:6a:35:65:60:
ad:f6:2f:bf:11:fe:ea:77:b4:a2:11:78:c1:cd:47:92:dd:92:
74:8d:29:81:27:33:05:8e:f0:29:7a:3a:35:94:47:b7:3b:cd:
78:a4:5d:37:ee:23:e7:91:bb:72:fa:18:19:6f:63:7a:04:ec:
e3:90:3f:21:c7:f6:d9:b6:18:b6:77:86:e9:a8:a7:1d:24:be:
24:6f:82:82:9f:e4:48:b6:ed:0e:a8:4a:22:ac:e7:22:91:78:
3c:ed:a2:b3:8d:be:5c:66:f2:18:73:82:71:57:78:a6:3e:85:
7f:7d:05:c6:5d:e5:96:a6:cc:60:06:cf:ff:89:41:91:97:2c:
d7:9b:40:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFDNDYxMTAvBgNVBAUTKEM2QzE5MTY5RUVBN0QwNjZCQzlCQ0E3MkREODgzMEJD
MTgzQTEyNjYwHhcNMjUxMjA2MTk1MzU3WhcNMjUxMjEzMTk1MzU3WjAYMRYwFAYD
VQQDEw02OTM0ODlkNi0wY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuiNWpQIAxi6+XmqL9rC/juPJQ0t5OrMW9JVFNK9OSvuRQezm3S1r/LemI3lp
vyZlmymYwhGZac3eL+C3yKEb0VmrMWcFbKjY4z9oYX7Eof6DZOD6vmxelA1fhjVe
IJcTHdKpx4OrX+ImcxKsu33U6X3ol9/WonaVvjQSE8+OKyP20EpIq8vM8mCqSiSO
ugovPwQxXmpkajnfYLnGtntQnMaVFCQ2+F6O+SM3T9S9h0eweRaEoyEDR4yk8sfe
dGgifKAyXzDX2KPbTBwbQKswqISi0MYiRMQAO2GeCMHpdYsxWkbyDYCRb/fAx0eh
OaEa4EVdDRKT2L2nLX8AFS5wzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIN7VJPo
q9aYlZQBBgcj3AODy7vVMB8GA1UdIwQYMBaAFMbBkWnup9BmvJvKct2IMLwYOhJm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM0Ni8wNUNBREQxNkYx
ODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBHYThtOHB5M1lnd3ZCZzZF
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hzR1JhZTZuMEdhOG04cHkzWWd3dkJnNkVtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUM0Ni8wNUNBREQxNkYxODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBH
YThtOHB5M1lnd3ZCZzZFbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmAGtmq7buUc6h7IXv902jUs8yPwgScC07gOXMO5i8xHYwJDPQaabI
Mniis175hBm6iZxM1tyDNdOIaBfGMyoNyRJvh5no4ys9jLfxQS72c5mvVKfOKkrg
50GS+D+B7k8MYgKpC5OJO1F0eUZaC2Z44EDoz2iFfa+VFmo1ZWCt9i+/Ef7qd7Si
EXjBzUeS3ZJ0jSmBJzMFjvApejo1lEe3O814pF037iPnkbty+hgZb2N6BOzjkD8h
x/bZthi2d4bpqKcdJL4kb4KCn+RItu0OqEoirOcikXg87aKzjb5cZvIYc4JxV3im
PoV/fQXGXeWWpsxgBs//iUGRlyzXm0Dg
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:30:43 2025 by rpki-client