This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
File: i0b6Eepu4jUJnkhDPIJJehl7nXw.mft (raw, json)
Hash identifier: E7xxyezPoAkbsZOfGsp5hGZuuyuvHlXdqIhrLxWcuwI=
Subject key identifier: 5E:B8:ED:A2:FF:24:CD:85:F9:EC:01:C9:00:B5:17:1B:19:E5:82:F9
Authority key identifier: 8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
Certificate issuer: /CN=A91FB03A/serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Certificate serial: 0272
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
Manifest number: 0268
Signing time: Thu 04 Dec 2025 23:59:30 +0000
Manifest this update: Thu 04 Dec 2025 23:59:29 +0000
Manifest next update: Thu 11 Dec 2025 23:59:29 +0000
Files and hashes: 1: i0b6Eepu4jUJnkhDPIJJehl7nXw.crl (hash: tUOkG5R6NKdgraRsMCz8xLCgV9Y2BnxFzUIFpzMtJYg=)
2: 0B3B85D63A1B11EDAE662B14C4F9AE02.roa (hash: NR8OS1L1YDEOVGgB6cb2fttAqoXgsKVRMpQfg5GvzjQ=)
3: 0BF33B7C3A1B11EDAE662B14C4F9AE02.roa (hash: U57sQE5yclVx7OH+nAtAbjTBaki6Yvzg4fauYYq6XuI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:59:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 626 (0x272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB03A, serialNumber=8B46FA11EA6EE235099E48433C82497A197B9D7C
Validity
Not Before: Dec 4 23:59:29 2025 GMT
Not After : Dec 11 23:59:29 2025 GMT
Subject: CN=69322062-e2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:82:ae:4e:0e:8a:e4:90:46:db:4d:2f:b0:6f:
e4:cc:c9:6e:a0:06:84:85:6c:79:20:4c:22:fb:05:
72:7b:c2:d3:85:64:0b:ca:fa:a3:a2:e7:a5:be:b7:
ff:3f:25:80:e4:d7:51:18:83:a7:d6:90:99:f3:51:
87:4d:0f:d7:a3:aa:0e:f3:55:0d:bb:79:06:57:5b:
6b:7a:6d:24:f4:82:e0:f6:2b:48:f3:3a:2e:d9:66:
10:ea:7f:93:41:87:d7:d2:ac:79:c0:75:f3:ee:b8:
a6:9f:f5:23:62:f0:8b:91:8a:93:8c:ec:af:4d:05:
18:66:5e:ef:c8:35:8e:04:b9:fe:29:1e:a5:c8:47:
5b:af:5e:ff:45:8c:b6:20:54:9b:4e:1d:52:6d:44:
00:d3:c8:f2:a6:70:9d:be:c5:a8:c0:e6:33:00:24:
5e:ce:79:67:d9:6e:db:26:b7:b9:09:1a:a0:75:6b:
20:2c:3f:3b:19:3d:11:4b:65:ac:7d:3f:1b:64:37:
6f:21:0c:50:7d:52:14:83:2e:bb:92:c6:57:36:0d:
2e:e5:1c:99:b6:5c:ff:c5:68:47:79:98:e4:a2:13:
a1:a2:28:77:81:63:93:4b:75:ea:b4:ca:90:95:2d:
6d:4d:bd:e6:b3:66:b8:88:40:d7:25:8b:46:89:a5:
6d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B8:ED:A2:FF:24:CD:85:F9:EC:01:C9:00:B5:17:1B:19:E5:82:F9
X509v3 Authority Key Identifier:
keyid:8B:46:FA:11:EA:6E:E2:35:09:9E:48:43:3C:82:49:7A:19:7B:9D:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i0b6Eepu4jUJnkhDPIJJehl7nXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB03A/DFC68D643A1611ED9152BF0EC4F9AE02/i0b6Eepu4jUJnkhDPIJJehl7nXw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:5c:97:e4:b6:71:dd:9e:b0:cb:c7:45:f7:76:03:60:f1:d7:
b5:95:6f:d3:9b:5f:4c:53:ff:6e:8e:c6:39:70:03:33:9f:06:
26:f2:9b:62:07:1f:4e:11:b9:99:da:05:12:b4:f0:04:3e:de:
cb:a4:5a:0a:2d:a7:a8:3c:89:16:d3:4a:e3:ef:78:ee:3c:2a:
1a:9d:b3:42:91:34:cc:02:e5:e3:6c:9d:cd:c4:04:3a:32:68:
3b:d1:b7:71:f0:c7:87:36:b8:39:94:a0:ae:b3:e1:49:b8:7e:
53:e6:66:15:4c:7e:c0:33:00:38:58:f0:61:66:db:7e:5e:35:
7e:b4:d9:bf:39:65:8d:97:5f:ce:33:b1:01:2b:00:11:ed:67:
a8:19:e8:4f:2f:3a:81:83:a3:38:11:5e:10:dc:3b:f4:80:f4:
a8:aa:86:ca:6d:8c:20:83:f7:6a:cf:bc:16:80:0a:8f:a5:c3:
b2:47:c8:83:94:58:e9:c9:d7:67:a8:a8:12:70:b9:78:c9:ed:
75:5b:47:4d:ff:cb:4f:eb:aa:21:2d:fc:77:c5:53:f1:eb:df:
0e:18:d6:33:e4:35:1b:98:e5:15:75:ae:7d:60:e1:b6:23:9e:
75:90:65:09:81:25:93:e7:67:cc:82:c4:55:02:ec:24:db:af:
92:c4:47:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:14:03 2025 by rpki-client