This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
File: 6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json)
Hash identifier: 5CWjGDCHwsUjV3XDD0L4aBfREkD5008YONZoWlyztSM=
Subject key identifier: A2:00:55:55:F4:EA:37:F8:1B:BD:54:F9:95:A5:95:FC:44:E2:80:3A
Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0
Certificate issuer: /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
Certificate serial: 02E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
Manifest number: 02E4
Signing time: Thu 25 Dec 2025 00:23:00 +0000
Manifest this update: Thu 25 Dec 2025 00:23:00 +0000
Manifest next update: Thu 01 Jan 2026 00:23:00 +0000
Files and hashes: 1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: XyBzjImsQPJb811FoHfp2bwPB8szaRN4BBYImS2OSnc=)
2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl
rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 00:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0
Validity
Not Before: Dec 25 00:23:00 2025 GMT
Not After : Jan 1 00:23:00 2026 GMT
Subject: CN=694c83e4-c085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:6b:7c:cc:66:18:73:63:04:5e:b5:c1:19:
86:a2:cf:f6:78:78:c7:85:b2:a7:e8:ef:e3:74:0b:
a0:75:5c:62:9a:ef:56:ce:16:c8:eb:ac:99:fe:2d:
2b:21:af:ab:bc:ed:10:13:dc:82:cb:46:e0:2f:f3:
39:04:19:c1:58:80:24:e6:2b:cd:d7:ec:d3:d7:a8:
fd:0f:ad:82:97:a3:83:11:79:d9:a8:ce:06:db:8a:
07:66:6d:da:90:2e:ef:ef:fb:8d:64:9f:68:05:3b:
c0:87:24:2d:64:17:ca:45:55:f6:2f:23:88:62:e2:
9c:86:b9:95:8d:1c:9c:c8:35:98:c7:af:cf:38:94:
e9:4a:e8:e9:9c:9a:42:ca:ff:0c:c2:12:ca:eb:cb:
75:fd:5e:21:25:95:37:f6:60:36:06:c5:f9:88:db:
a0:f1:44:61:aa:49:1f:26:2c:9c:b4:1c:41:df:30:
8a:69:37:60:5f:88:72:13:ac:ac:38:a1:2c:9d:37:
36:e8:ba:90:af:7c:23:91:1a:aa:d1:4d:48:e0:e7:
3a:b3:06:b9:39:c7:62:bb:ea:19:c4:24:fd:e5:62:
b7:18:47:0e:0c:34:e5:63:35:a7:5e:3c:b0:56:e0:
e7:0a:c3:b7:0b:6a:46:2f:a5:5a:9e:c6:67:62:36:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:00:55:55:F4:EA:37:F8:1B:BD:54:F9:95:A5:95:FC:44:E2:80:3A
X509v3 Authority Key Identifier:
keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d3:8c:ac:bc:7b:16:06:ac:4d:cf:34:2e:1e:97:96:c9:8c:
fd:bd:12:69:1e:45:ca:14:c6:cd:37:10:2a:79:69:42:96:55:
7a:a0:9f:78:55:bb:0a:30:37:bc:57:e1:a8:8f:3a:89:ff:3f:
65:f0:a1:bf:67:44:54:5d:e3:6e:25:21:4a:54:43:d0:6a:61:
6e:5d:08:db:25:c4:05:53:4e:f4:15:31:5a:dc:f3:b6:f7:5b:
8a:60:9d:2e:a0:97:79:47:80:ed:7d:0e:f7:17:d0:3c:a7:e3:
15:e5:74:f7:ab:a1:99:d6:ab:d2:42:6d:dd:ce:91:2b:95:19:
26:b8:f0:d9:4d:ed:65:91:6d:44:c6:c5:6e:b8:f7:bb:a6:b8:
03:45:8c:a2:01:59:64:11:f7:6b:81:97:85:71:c2:ff:36:be:
19:23:fc:37:9a:28:b1:d3:47:17:0e:6e:88:bb:69:0a:d4:71:
b9:ab:ea:7a:9e:54:59:ff:60:02:4a:d7:61:57:b9:01:35:50:
ff:7f:33:2c:0f:33:95:ce:45:f6:19:42:c0:21:67:23:c2:a3:
97:35:17:a4:48:08:4f:48:e5:61:25:6b:19:04:e3:25:6c:7d:
65:c9:cc:50:51:43:69:f6:8f:49:f0:c7:ca:41:41:83:33:96:
1b:8b:ed:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 07:23:51 2025 by rpki-client