This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json)
Hash identifier: c9kfxxHLNkyqRfYZgwqsg5/xDMJVhahkgsGL6xNNEGA=
Subject key identifier: F8:94:F8:C9:5C:5B:13:E2:0B:7D:16:4A:0B:01:B3:6A:3C:C8:E7:47
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial: 06DC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
Manifest number: 06CE
Signing time: Sat 06 Dec 2025 21:04:56 +0000
Manifest this update: Sat 06 Dec 2025 21:04:56 +0000
Manifest next update: Sat 13 Dec 2025 21:04:56 +0000
Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: xB+MPkW6bcOHnt4RYBwCbZn71hIw2fD1Byg4HRWPVKI=)
2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: HTPqOWIyJHqMlIZAMr3y8PX5c90zicN8031Dpgoj/xo=)
3: 88A31320809211EB938F4016C4F9AE02.roa (hash: +ggMU5apLM7/E36BO1O5K0i1T6Q0H2I5abkvXaYTrxI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1756 (0x6dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Validity
Not Before: Dec 6 21:04:56 2025 GMT
Not After : Dec 13 21:04:56 2025 GMT
Subject: CN=69349a78-367f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1d:29:dc:04:a8:42:ca:fb:d9:8d:7c:14:fd:
e6:64:e2:b0:34:da:92:b6:c3:15:4f:2d:70:90:1e:
2a:03:c9:7a:4e:1d:bb:1f:b2:03:25:80:cd:13:eb:
be:d3:1f:89:cc:81:50:9b:7d:85:9f:29:fd:f5:0f:
0c:0d:6c:f5:5f:c6:ab:9d:d3:c0:5a:64:60:cc:e5:
40:88:5b:66:26:b9:96:69:10:43:79:5d:ce:bd:35:
80:65:8d:0d:52:f0:03:d0:9b:66:fe:25:28:1c:1f:
aa:8a:f1:a9:ed:4f:62:08:79:e1:55:4f:56:8c:03:
64:90:f4:11:ff:3b:01:cb:e7:cd:2b:0a:ec:5b:8d:
d7:ff:57:5f:d8:41:a3:b1:84:2d:cc:0d:9b:51:0a:
b2:2f:ed:ed:61:97:d9:d6:e3:1b:47:92:8c:83:f5:
65:ad:88:48:f5:b6:5f:9f:72:2b:77:5e:b5:0f:6b:
ae:be:63:ce:1b:24:3b:0e:b3:59:a3:8d:49:42:b7:
52:0a:1e:e0:ea:f4:89:4a:74:85:fb:0c:eb:de:00:
b6:18:df:44:03:ff:57:f3:7f:90:fe:b2:44:f5:8d:
7f:02:4b:81:69:42:8c:7c:3b:b7:3c:0d:75:55:2e:
14:ea:55:4e:ad:b8:7c:db:5f:4c:d0:cc:f8:b0:b3:
bd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:94:F8:C9:5C:5B:13:E2:0B:7D:16:4A:0B:01:B3:6A:3C:C8:E7:47
X509v3 Authority Key Identifier:
keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:c2:f3:78:a4:76:5c:4c:b2:f6:b3:ae:7a:bc:58:9b:e7:b2:
28:83:44:67:ec:98:be:5a:d1:14:5c:e5:da:ca:b7:2a:85:85:
2e:92:66:00:c5:74:a1:48:57:21:4c:83:13:8f:12:06:81:86:
5a:7d:7f:c9:25:9d:1f:78:78:1c:25:f5:b1:ce:4c:9d:c4:98:
c6:39:85:cb:58:fb:62:81:7e:60:20:df:d4:23:e0:9e:53:97:
e2:59:dc:5f:8a:2a:c1:2a:63:aa:13:00:1e:fe:f1:cf:6f:b9:
23:77:a4:d8:f6:31:fa:b7:18:75:f8:c5:36:a6:18:95:72:7e:
8c:eb:0a:92:09:5c:52:69:df:9b:95:97:c3:af:f1:ef:20:6e:
a5:0c:b0:18:0b:c7:31:87:e7:75:55:1b:ae:ff:4a:08:2e:07:
8f:26:8e:c9:d5:27:c1:27:a1:6b:2e:da:ba:13:f8:ef:78:1e:
5e:f4:13:b4:20:0c:ac:bc:20:e0:05:2e:04:78:af:c9:b5:7f:
39:ab:32:cf:a4:e9:ca:b5:18:f2:ea:30:bb:49:ef:bf:46:97:
71:36:9b:37:05:06:6a:bd:8b:87:9e:96:ad:65:b5:f1:b8:42:
ef:82:ce:d9:75:1a:e7:cc:9d:bd:1d:4e:50:7c:0c:f7:a2:c6:
64:b7:a2:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw
RDY2RTUzRTkwHhcNMjUxMjA2MjEwNDU2WhcNMjUxMjEzMjEwNDU2WjAYMRYwFAYD
VQQDEw02OTM0OWE3OC0zNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzx0p3ASoQsr72Y18FP3mZOKwNNqStsMVTy1wkB4qA8l6Th27H7IDJYDNE+u+
0x+JzIFQm32Fnyn99Q8MDWz1X8arndPAWmRgzOVAiFtmJrmWaRBDeV3OvTWAZY0N
UvAD0Jtm/iUoHB+qivGp7U9iCHnhVU9WjANkkPQR/zsBy+fNKwrsW43X/1df2EGj
sYQtzA2bUQqyL+3tYZfZ1uMbR5KMg/VlrYhI9bZfn3Ird161D2uuvmPOGyQ7DrNZ
o41JQrdSCh7g6vSJSnSF+wzr3gC2GN9EA/9X83+Q/rJE9Y1/AkuBaUKMfDu3PA11
VS4U6lVOrbh8219M0Mz4sLO9+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiU+Mlc
WxPiC30WSgsBs2o8yOdHMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw
ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV
LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W
REw3QWhsVG1GNEFOWnVVLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWwvN4pHZcTLL2s656vFib57Iog0Rn7Ji+WtEUXOXayrcqhYUukmYA
xXShSFchTIMTjxIGgYZafX/JJZ0feHgcJfWxzkydxJjGOYXLWPtigX5gIN/UI+Ce
U5fiWdxfiirBKmOqEwAe/vHPb7kjd6TY9jH6txh1+MU2phiVcn6M6wqSCVxSad+b
lZfDr/HvIG6lDLAYC8cxh+d1VRuu/0oILgePJo7J1SfBJ6FrLtq6E/jveB5e9BO0
IAysvCDgBS4EeK/JtX85qzLPpOnKtRjy6jC7Se+/RpdxNps3BQZqvYuHnpatZbXx
uELvgs7ZdRrnzJ29HU5QfAz3osZkt6Lw
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:56:05 2025 by rpki-client