This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
File: 6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json)
Hash identifier: /EUxJUbGbYXrc78TtJR/DwTdFbyf9S4ObjujuQyY5Fg=
Subject key identifier: 6B:66:8E:D5:F4:59:28:1D:B3:35:09:52:0E:C4:A2:6B:BA:66:62:A7
Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60
Certificate issuer: /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
Certificate serial: 0DAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
Manifest number: 0DA3
Signing time: Sat 20 Dec 2025 17:36:08 +0000
Manifest this update: Sat 20 Dec 2025 17:36:08 +0000
Manifest next update: Sat 27 Dec 2025 17:36:08 +0000
Files and hashes: 1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: 5U3+cu5Jzt1fvu5fynlXNsWBPF4/2pwIIngCXszGc7Y=)
2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: s4ZYVNsJ/dDC5UQbemd3E28U99L1NBZ1Sp+DApyMoKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl
rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 17:36:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3501 (0xdad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60
Validity
Not Before: Dec 20 17:36:08 2025 GMT
Not After : Dec 27 17:36:08 2025 GMT
Subject: CN=6946de88-dd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:02:dd:d1:9d:84:54:4e:76:63:1b:02:87:
4d:bb:e2:a3:3b:f1:4d:22:bc:e0:26:1d:1d:66:71:
db:0b:f9:df:3d:5c:54:fe:1c:3a:56:af:3d:8a:1f:
09:b9:63:4b:69:1b:b8:f8:5b:9b:5c:49:9a:54:6b:
c5:9a:1c:5d:df:3e:23:d7:a5:07:6a:bc:66:6a:af:
0a:a6:cf:0e:48:cb:84:8c:4d:4c:fb:a8:7d:3f:aa:
95:8a:01:19:33:28:be:0d:c7:15:b6:f2:4f:0e:01:
0a:ef:fc:be:91:bf:6a:6f:2c:d2:cf:16:f1:14:6e:
77:13:16:c7:cf:34:7e:45:7f:77:d5:f0:a5:2a:db:
b5:86:d6:a7:c0:7f:55:1c:f0:46:7d:01:66:0a:70:
fd:32:57:c5:8c:3a:a5:68:f5:aa:9f:95:e1:1a:0e:
61:ea:9f:45:35:82:11:01:de:5f:18:67:10:49:f6:
eb:0e:02:65:dc:8c:04:d1:91:24:0b:e8:6a:a0:68:
80:d0:a1:6d:d6:e9:c8:02:d0:c4:df:b8:ad:47:fa:
4d:a3:8e:91:ea:3a:7d:aa:a7:10:49:b1:62:ab:d3:
13:86:1b:c3:ad:cc:2d:e2:09:25:a3:3d:ba:ae:b2:
36:62:16:f6:eb:89:98:46:3a:f5:ea:cf:5a:71:92:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:66:8E:D5:F4:59:28:1D:B3:35:09:52:0E:C4:A2:6B:BA:66:62:A7
X509v3 Authority Key Identifier:
keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cb:bb:f7:0a:a0:bf:03:37:b6:d8:9e:42:a7:75:cb:cc:b1:
67:34:d3:a3:9d:fa:1d:85:f4:78:d3:e1:9e:a2:01:56:9c:85:
dd:9b:5d:8d:b3:51:e9:3a:a9:2f:da:7c:98:cc:b0:ee:26:2f:
ad:8c:a2:10:44:4a:ca:ee:88:b9:ef:95:3b:80:b4:4f:93:d8:
37:ff:09:3c:23:fb:39:c0:d5:d0:3b:e5:8b:91:f7:ab:5b:78:
74:d3:f1:d2:6d:b2:e3:5b:7f:33:3a:e4:ce:03:86:f2:71:06:
17:89:f4:15:1f:03:85:b2:03:04:b1:e5:c3:98:5b:1e:7f:a7:
23:cf:59:1a:ed:8a:12:88:b7:a5:5c:b0:7b:40:ca:06:c2:5d:
85:fe:66:d8:a2:c9:2c:ae:eb:43:0e:a8:4b:c1:33:32:74:eb:
40:7e:b6:7a:bc:fc:b0:90:6a:ef:c0:1b:b3:96:f4:1a:94:f8:
c7:49:b8:d0:36:31:d9:4e:82:ad:91:23:53:96:67:8b:9f:6d:
71:91:09:4f:85:c1:4b:ca:3c:f2:61:8e:61:cc:69:50:83:16:
c8:2e:7a:89:7e:20:90:37:3e:c7:af:1f:e5:27:3f:c3:fc:f0:
c7:09:98:92:cd:59:7b:29:7d:72:84:5c:5d:ac:68:b4:f8:db:
f7:ab:36:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 10:38:00 2025 by rpki-client