This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
File: D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft (raw, json)
Hash identifier: iykAZi0uQL+eMX/nn+m6Hpu60NdhGaAVC8GCNgUysRs=
Subject key identifier: 6B:A1:60:0D:4A:8E:DB:8D:87:85:C8:15:75:25:F9:78:B9:4B:81:7C
Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
Certificate issuer: /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
Manifest number: C6
Signing time: Sun 21 Dec 2025 04:59:15 +0000
Manifest this update: Sun 21 Dec 2025 04:59:14 +0000
Manifest next update: Sun 28 Dec 2025 04:59:14 +0000
Files and hashes: 1: D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl (hash: p25GseyYdUnc25tw5vR2x6uXNpA8Kn54nBhsow1b944=)
2: 5AF3ECBEAFBA11EF91955453C4F9AE02.roa (hash: x22vmPwJWZ5KhIsY5PtxJtvF9T7oNt50WfxUCDRwJlo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Validity
Not Before: Dec 21 04:59:14 2025 GMT
Not After : Dec 28 04:59:14 2025 GMT
Subject: CN=69477ea2-6cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:53:42:5e:06:9a:84:fb:d5:e0:86:f9:b8:
72:db:8c:6f:79:b2:67:13:b0:3d:5d:d1:69:e3:24:
75:9d:2b:db:00:fa:d5:56:df:00:55:64:78:73:0c:
2b:fc:c1:10:b9:dc:a4:02:b6:98:bd:9b:37:bb:51:
cb:ba:dd:4e:19:ff:c0:36:70:c4:14:97:6b:c5:b4:
ce:cf:4f:14:56:f8:16:3d:de:a3:a5:ca:54:b4:4c:
5d:5a:e5:9e:cc:65:94:ae:f6:22:16:17:cc:ba:a2:
10:50:db:6f:2c:55:70:5b:20:e8:03:76:8e:78:d0:
81:2c:3d:42:70:9f:d8:1f:e2:1b:a8:91:84:4c:18:
57:41:2c:3a:64:2a:45:d7:54:b5:5e:38:2c:fc:b0:
e0:94:59:75:6f:56:73:d0:30:6a:76:d2:e6:5c:82:
0d:44:ae:e3:dc:a4:7d:20:8e:be:6a:32:be:9d:77:
3e:94:27:1c:2e:78:9a:56:64:61:27:9b:09:90:69:
ca:a9:be:10:68:3b:bf:ec:06:80:03:c4:6a:09:9c:
3f:08:5c:a2:96:74:53:15:88:1e:c7:40:e0:d4:99:
bc:fb:68:03:b7:a6:b8:37:d4:22:91:a8:8f:84:c7:
66:84:6a:f2:1e:b1:55:ed:4a:eb:85:2e:a8:50:ff:
26:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A1:60:0D:4A:8E:DB:8D:87:85:C8:15:75:25:F9:78:B9:4B:81:7C
X509v3 Authority Key Identifier:
keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:24:82:34:00:28:80:d6:77:03:d6:ab:82:64:af:93:e0:aa:
1d:30:df:86:0a:e4:20:3d:3e:17:b0:63:40:58:2c:53:31:1c:
42:b4:54:4c:4d:7c:69:3e:d1:74:a1:41:62:77:eb:1a:d0:4a:
69:16:58:9f:b0:67:da:94:3c:6c:e6:f5:0e:2c:d5:ea:88:ad:
f8:17:24:79:37:5f:2d:be:2a:14:08:4a:12:61:a7:59:04:bc:
23:4b:df:11:fe:20:ef:5f:24:11:e6:17:f8:8b:b3:6a:83:14:
f4:2a:bc:73:d9:30:d5:7e:b2:32:c7:ad:46:b0:4a:ed:c9:9c:
38:49:fd:6a:6f:de:25:4a:45:5d:fc:d2:cc:fe:e2:01:a6:61:
ed:e3:6e:57:4d:a6:81:9a:8f:67:eb:24:e4:f3:ec:ef:c1:0a:
a2:b6:98:77:d6:34:20:ba:de:ad:08:7e:af:5a:03:39:ea:39:
75:0e:b2:aa:b0:19:37:0f:6e:e8:d2:ba:00:f2:37:b0:e5:db:
b1:c8:31:7c:bd:60:37:03:55:48:6c:d3:6a:0e:4c:c2:47:f6:
be:45:ac:f0:20:9b:12:0d:af:69:56:67:83:45:d7:8f:e6:e6:
f4:49:cb:cc:a0:e1:15:6d:d3:92:a2:2c:23:a9:ec:a4:87:c9:
d2:25:4f:a2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUUwQjQxMTAvBgNVBAUTKDBGRDQ0Mzc1MjFEQjVDMEJDOTlFNDVCNTk3NTRGRjdC
NjcxRjg2RjMwHhcNMjUxMjIxMDQ1OTE0WhcNMjUxMjI4MDQ1OTE0WjAYMRYwFAYD
VQQDDA02OTQ3N2VhMi02Y2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnxhTQl4GmoT71eCG+bhy24xvebJnE7A9XdFp4yR1nSvbAPrVVt8AVWR4cwwr
/MEQudykAraYvZs3u1HLut1OGf/ANnDEFJdrxbTOz08UVvgWPd6jpcpUtExdWuWe
zGWUrvYiFhfMuqIQUNtvLFVwWyDoA3aOeNCBLD1CcJ/YH+IbqJGETBhXQSw6ZCpF
11S1Xjgs/LDglFl1b1Zz0DBqdtLmXIINRK7j3KR9II6+ajK+nXc+lCccLniaVmRh
J5sJkGnKqb4QaDu/7AaAA8RqCZw/CFyilnRTFYgex0Dg1Jm8+2gDt6a4N9QikaiP
hMdmhGryHrFV7UrrhS6oUP8m/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuhYA1K
jtuNh4XIFXUl+Xi5S4F8MB8GA1UdIwQYMBaAFA/UQ3Uh21wLyZ5FtZdU/3tnH4bz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9FOTY0ODlBRUFG
MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhBdkpua1cxbDFUX2UyY2Zo
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Q5UkRkU0hiWEF2Sm5rVzFsMVRfZTJjZmh2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTBCNC9FOTY0ODlBRUFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhB
dkpua1cxbDFUX2UyY2Zodk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPJII0ACiA1ncD1quCZK+T4KodMN+GCuQgPT4XsGNAWCxTMRxCtFRM
TXxpPtF0oUFid+sa0EppFlifsGfalDxs5vUOLNXqiK34FyR5N18tvioUCEoSYadZ
BLwjS98R/iDvXyQR5hf4i7NqgxT0Krxz2TDVfrIyx61GsErtyZw4Sf1qb94lSkVd
/NLM/uIBpmHt425XTaaBmo9n6yTk8+zvwQqitph31jQgut6tCH6vWgM56jl1DrKq
sBk3D27o0roA8jew5duxyDF8vWA3A1VIbNNqDkzCR/a+RazwIJsSDa9pVmeDRdeP
5ub0ScvMoOEVbdOSoiwjqeykh8nSJU+i
-----END CERTIFICATE-----
Generated at Sun Dec 21 14:15:43 2025 by rpki-client