This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
File: keKklwM5j7IArA6fpHZpFddL-eU.mft (raw, json)
Hash identifier: R1e/EW3SNcSBbLraTvqD3YsW3UBbxiaBCj5nKy5mgNA=
Subject key identifier: A3:CA:E5:46:7D:C9:5A:5C:8A:22:B0:37:02:DB:E3:3E:16:8F:79:F4
Authority key identifier: 91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5
Certificate issuer: /CN=A91FD6E4/serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5
Certificate serial: 01CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
Manifest number: 01C6
Signing time: Sun 07 Dec 2025 01:26:25 +0000
Manifest this update: Sun 07 Dec 2025 01:26:24 +0000
Manifest next update: Sun 14 Dec 2025 01:26:24 +0000
Files and hashes: 1: keKklwM5j7IArA6fpHZpFddL-eU.crl (hash: lWWNmYnaoB1nTlpSzHA3pShDVBTzX6o3EGeAorjRuHI=)
2: 345AD30E1E1311EE846A3261C4F9AE02.roa (hash: tkkYz0ghUklFSNnUvurDs2pFNwSVM0cpaVXq98edoAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl
rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 01:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD6E4, serialNumber=91E2A49703398FB200AC0E9FA4766915D74BF9E5
Validity
Not Before: Dec 7 01:26:24 2025 GMT
Not After : Dec 14 01:26:24 2025 GMT
Subject: CN=6934d7c0-4de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:ff:cb:ae:2d:6f:8c:c7:09:20:47:f1:d0:
4b:60:65:a5:da:69:21:0d:4c:d0:74:58:c9:8e:c5:
e4:3e:de:2e:58:dd:67:28:f7:f1:12:6b:06:1c:4d:
b5:d7:01:e2:cb:b4:1d:b5:c7:c8:6b:18:73:dc:6a:
80:15:36:cc:ac:35:ef:8d:01:f7:a6:0d:5c:dc:7a:
8e:76:b3:de:c8:5c:00:a2:99:7f:29:38:d2:d1:60:
b8:fa:cf:b4:cd:90:a5:4e:a8:d6:b8:5a:35:bd:16:
cd:0d:95:84:5a:a5:d8:a2:4e:98:42:f9:11:27:29:
5a:6e:ad:e0:50:9e:06:5b:bf:93:52:95:86:e3:28:
be:4a:09:03:4c:3d:94:fb:2c:64:bf:60:56:4e:9b:
20:bb:db:20:f2:47:f5:8c:eb:4b:80:10:c0:52:b3:
04:77:1d:09:b2:d7:32:63:82:f7:6b:1f:f9:75:bc:
5d:b5:94:d0:39:d1:a6:c6:ea:af:05:3a:0f:39:03:
09:d8:53:07:a6:7d:c3:ec:ff:9a:a3:41:1b:f3:46:
b7:a7:69:eb:a1:ba:c7:fd:4e:ac:96:69:3a:52:a7:
e6:7b:57:2c:ed:89:92:35:5c:32:85:97:dc:71:12:
60:a3:1e:86:40:a0:c6:29:b7:a9:64:a1:25:ed:e1:
85:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CA:E5:46:7D:C9:5A:5C:8A:22:B0:37:02:DB:E3:3E:16:8F:79:F4
X509v3 Authority Key Identifier:
keyid:91:E2:A4:97:03:39:8F:B2:00:AC:0E:9F:A4:76:69:15:D7:4B:F9:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keKklwM5j7IArA6fpHZpFddL-eU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD6E4/ABE7E0561E0E11EE9170F429C4F9AE02/keKklwM5j7IArA6fpHZpFddL-eU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:0e:27:b5:98:d5:8a:12:11:7a:8a:c4:df:ac:be:f2:ed:d5:
5c:12:5c:c4:52:c4:07:a0:a0:b7:1e:e3:b4:f1:6c:e3:4d:03:
f2:67:77:30:c5:11:21:d9:b6:88:bc:1d:6a:cf:0b:de:eb:15:
b9:38:be:7e:56:42:a2:f1:61:44:bd:60:93:a5:59:18:9a:6c:
09:d6:5e:1f:29:d8:d1:3b:36:c6:b8:f6:e7:8e:53:19:08:07:
5b:b5:12:86:2c:aa:70:b5:39:85:c9:c8:c3:3f:40:45:3b:76:
28:f2:5c:95:1d:d3:d4:9e:e7:36:a0:f1:6b:b8:8c:b9:ff:b1:
1d:3b:e2:98:e8:e3:a7:e8:93:c6:10:0a:c4:2c:fc:e8:52:00:
b9:47:9f:a1:12:61:c1:8b:1e:e4:38:6a:e3:8a:7c:c8:3e:30:
69:8b:78:8a:7b:f0:5a:f9:1a:9f:dc:63:8f:0c:4b:4e:fc:df:
3d:1e:e5:3b:5f:d0:ec:31:7a:8e:1c:e3:f0:c7:66:f5:0b:0e:
f9:15:ec:d0:9a:cb:b4:d5:7b:84:29:78:9a:bf:7c:40:0b:86:
e5:39:be:b9:4d:e0:6e:7e:97:af:cb:9d:0c:24:aa:fc:7f:b7:
b8:c5:9b:ba:91:34:d2:17:70:61:f6:86:a1:64:82:9d:1d:fc:
c0:9b:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:36:29 2025 by rpki-client