This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
File: 6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json)
Hash identifier: f/WN659ci4ppj2jyGt6WugoPliE8joSLnLWgDS9BWO8=
Subject key identifier: 2C:9A:76:9D:07:02:4A:C5:87:92:EE:62:87:5F:C1:E9:44:ED:DF:82
Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0
Certificate issuer: /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
Certificate serial: 02EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
Manifest number: 02E5
Signing time: Sat 27 Dec 2025 00:17:58 +0000
Manifest this update: Sat 27 Dec 2025 00:17:58 +0000
Manifest next update: Sat 03 Jan 2026 00:17:58 +0000
Files and hashes: 1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: fAJSavJoh+/u+dR2YsqXqdEG6BbJEyunf7EsQbIz5BQ=)
2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl
rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 00:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 746 (0x2ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
Validity
Not Before: Dec 27 00:17:58 2025 GMT
Not After : Jan 3 00:17:58 2026 GMT
Subject: CN=694f25b6-1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:6e:3b:51:6b:8b:ca:65:7f:92:7d:11:bd:
01:12:d2:8f:4a:eb:24:c5:a0:e8:02:5e:b8:c0:22:
1b:72:6d:e4:64:41:a2:fa:52:c4:d4:9f:5d:c2:65:
68:06:60:77:7f:be:13:0c:ad:af:5e:b4:32:21:a3:
5f:b2:9e:e3:ce:71:11:96:28:0d:ba:28:b1:d9:32:
b0:b1:91:4d:44:af:9b:bb:17:95:dc:74:b2:5e:57:
d8:8c:80:76:77:05:77:f5:8d:99:52:d8:1e:34:1e:
fa:ff:3c:22:fa:49:26:f7:8c:7e:fe:6f:43:f6:a6:
3f:4f:58:6a:e8:62:4c:42:6c:75:0b:fc:0e:25:c1:
09:72:89:c2:71:e0:b5:52:b4:66:b5:b6:b9:0c:b7:
0b:cd:70:e9:84:b8:e4:46:12:c2:b1:c2:8b:17:e9:
e5:f1:80:26:e1:eb:ee:32:43:5d:1b:f4:4d:7f:42:
5b:d3:4c:0e:7e:71:a3:c5:e7:d1:9d:e6:bb:27:82:
2b:f6:c5:59:37:f7:a0:53:3e:93:24:fc:25:59:eb:
7b:56:d1:10:6c:4c:3d:d9:1c:76:80:4e:80:8a:28:
c4:83:38:d1:2f:15:29:1a:9c:08:51:4f:fe:41:c0:
27:83:c3:03:1e:f2:34:d2:b8:2d:3c:21:4a:51:22:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9A:76:9D:07:02:4A:C5:87:92:EE:62:87:5F:C1:E9:44:ED:DF:82
X509v3 Authority Key Identifier:
keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:a0:36:64:68:73:65:6f:b9:e1:21:a2:aa:63:9b:3c:d8:50:
8b:8b:ce:d4:5f:b7:67:ab:42:de:cc:6d:a2:ea:92:99:bc:08:
48:bd:4b:a0:fd:98:45:6d:0a:72:c0:dc:3e:a4:5e:52:42:02:
4f:40:c3:39:fa:cd:fb:b2:41:28:f1:b6:06:fa:c9:58:fa:0d:
8d:6c:26:ed:0c:81:39:bb:75:18:bd:0d:10:68:e4:08:e9:54:
57:f0:76:27:13:ec:75:ef:f3:e8:a6:97:04:1e:31:cb:53:49:
ce:85:1f:04:a0:dd:e9:d1:27:84:5b:2f:de:90:7b:ab:5b:fd:
16:43:b9:5c:c4:a2:9a:b5:44:fb:4a:6b:03:a0:e5:5f:16:6a:
9f:ac:d5:41:85:1c:47:67:82:b6:d0:29:d6:25:75:02:2e:a8:
52:db:60:c1:be:fe:59:f5:dd:69:f0:59:ca:16:2a:76:b0:9a:
4f:96:57:14:8c:a6:55:87:e5:f8:8b:e4:fd:b2:ae:cb:73:8a:
92:6d:56:2d:5b:3c:8e:7d:ea:bb:4c:ef:40:72:cd:6f:be:0b:
8e:70:72:20:4d:84:7e:c3:9b:8d:cb:83:95:ae:a3:79:0a:f4:
52:6f:78:90:bc:b2:0a:76:d1:6f:b2:c3:2c:42:23:38:fa:9e:
5e:58:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 00:48:15 2025 by rpki-client