This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
File: FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json)
Hash identifier: KMJGuZ6HiO9rXxHFnts9KrPflzfVwh5pYLyLtldpghA=
Subject key identifier: 40:19:89:59:5B:B7:C1:C5:68:02:CB:17:48:5B:16:AB:60:83:91:57
Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Certificate serial: 06F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
Manifest number: 06D0
Signing time: Sat 20 Dec 2025 21:40:05 +0000
Manifest this update: Sat 20 Dec 2025 21:40:05 +0000
Manifest next update: Sat 27 Dec 2025 21:40:05 +0000
Files and hashes: 1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: jWjcDa4lndnv2nrAhE66nUVyTE6tqC79qehlr3m1IWs=)
2: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: aC4TO7PXWK9eYs7G/JarDrAHgo7/Rab10mF41Eronv8=)
3: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: IFa/tTeccz3DdhI2ICb9a4euH4vWZq6b1h7IXGdAF6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1781 (0x6f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7
Validity
Not Before: Dec 20 21:40:05 2025 GMT
Not After : Dec 27 21:40:05 2025 GMT
Subject: CN=694717b5-12ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:d8:5b:ce:fe:e8:50:6f:5f:47:7d:6d:c5:
0b:0e:90:fa:41:b9:83:2d:ed:33:07:44:dd:36:52:
99:ad:1e:a3:c0:1c:d5:22:fe:59:11:42:42:6a:c8:
f7:15:22:d6:73:6b:c2:43:00:a0:b0:fa:25:90:5e:
33:61:fa:e8:f2:8d:d3:6d:ee:4c:11:2b:de:1a:e5:
35:64:17:39:dc:14:71:9d:34:8f:b3:ee:ee:a6:fe:
e1:02:c5:81:a2:b6:53:84:38:fa:6b:fc:d3:de:ce:
aa:36:8d:7d:7e:d8:ad:cd:6a:41:9b:fe:40:52:4b:
83:be:a6:66:67:65:15:02:4b:1d:35:88:76:2b:3d:
c4:87:b7:01:97:54:d1:c3:da:69:3d:d4:f3:b1:4b:
23:6a:b8:55:b4:cc:e0:dc:93:3e:f2:7f:86:ba:6e:
d3:77:9d:d6:a6:cf:88:3a:d2:5b:ed:b4:bb:9e:33:
61:3f:af:14:c0:88:49:b0:31:02:77:af:dd:b4:b3:
9f:b6:4b:f9:3b:37:b0:af:92:44:3b:92:05:66:d1:
10:93:3e:45:77:7f:e2:29:23:7e:6e:58:a2:e6:de:
60:0d:9a:df:a8:29:2c:d6:e2:9c:76:c5:52:ba:2a:
3e:12:aa:32:1a:11:19:7c:03:cb:3f:77:a6:76:34:
8e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:19:89:59:5B:B7:C1:C5:68:02:CB:17:48:5B:16:AB:60:83:91:57
X509v3 Authority Key Identifier:
keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:b0:ab:f3:1a:b4:78:17:20:5e:e7:bc:e5:cf:bd:0e:7e:b1:
18:dc:63:97:ad:34:43:d1:98:14:27:de:f0:9f:54:ad:c4:93:
58:9c:cc:85:24:93:3c:3a:fd:52:3d:82:04:e1:1e:fc:c4:b0:
fd:83:8c:36:cf:d6:78:94:7c:47:63:3e:f9:8a:42:b6:d8:ea:
4d:9d:9d:02:40:0e:4f:75:f6:7f:39:15:8f:70:11:ba:6b:4f:
31:8e:4a:a2:75:56:e5:14:68:ea:75:f5:bc:d4:c8:32:fa:96:
41:e6:71:12:98:7a:af:5b:d9:8a:20:70:8d:4d:86:b3:02:34:
6f:62:b3:ab:62:b1:9d:01:42:83:6a:78:e8:fb:c4:31:1c:23:
51:d8:2d:91:ba:94:87:44:44:19:21:9d:99:38:d1:e6:3d:e1:
36:23:7a:1b:f6:c9:7c:40:53:98:22:7d:be:21:48:4b:71:ee:
a1:e7:ce:fd:7b:e6:34:ef:4e:48:28:26:41:97:62:11:a3:78:
61:55:c8:7f:22:29:e1:3d:74:41:cf:88:63:0f:45:94:6b:7f:
47:4d:d4:47:15:5b:59:32:b8:d9:5d:76:83:53:54:36:24:ad:
58:95:48:82:14:d8:0d:e0:69:ca:84:f0:dc:8d:41:ca:18:06:
fe:3f:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:43:01 2025 by rpki-client