This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
File: 6tZGNV11k2y5Pta623kKh_4VN0o.mft (raw, json)
Hash identifier: fai5YoV9RHV367rrR0Ptm+QGSUOvbkM4BVplXxLeu9M=
Subject key identifier: 91:BB:65:5E:FC:9C:5E:D8:13:9F:0D:45:FB:5E:34:0A:4B:EF:81:17
Authority key identifier: EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
Certificate issuer: /CN=A912F535/serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
Manifest number: 0169
Signing time: Fri 19 Dec 2025 03:10:10 +0000
Manifest this update: Fri 19 Dec 2025 03:10:10 +0000
Manifest next update: Fri 26 Dec 2025 03:10:10 +0000
Files and hashes: 1: 6tZGNV11k2y5Pta623kKh_4VN0o.crl (hash: Ol/87SbyIqAMLNIUcT7KZyRXOfTqqPNlgPR6ZEZWxe8=)
2: 836FCA52168411EFB6BDB96BC4F9AE02.roa (hash: TAOed49FFqoRHgKFy+Jz2KuJalrMPjm52i7KeouMhd0=)
3: DCE2A830EC3A11EE8CC3B820C4F9AE02.roa (hash: wVAgrqCE/Wj+Oq7c+aZ97qsJSVe62sCRsRf4hdQIDT4=)
4: DD555A9CEC3A11EE8CC3B820C4F9AE02.roa (hash: IYbwvT3qmzwsASPi9gEwkFkjfys+ZxVpssJBjkvN+uw=)
5: 85F80AF6EC3011EE92FDDE25C4F9AE02.roa (hash: tLt6JDfDub8DNFZW2G3EMTsxDiFDr62JlgmUF1Jhoi8=)
6: DC3455AAEC3A11EE8CC3B820C4F9AE02.roa (hash: lkljamiAGuWTdMNk035Kt/plV9Fx0R6Faku03HPbg7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F535, serialNumber=EAD646355D75936CB93ED6BADB790A87FE15374A
Validity
Not Before: Dec 19 03:10:10 2025 GMT
Not After : Dec 26 03:10:10 2025 GMT
Subject: CN=6944c212-1204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7a:95:f7:e4:30:89:31:97:a4:39:43:34:5f:
6d:02:78:61:2a:16:54:08:63:f6:4f:e8:3e:20:72:
0f:f9:f6:26:3e:09:0a:4e:06:18:fe:d1:30:2d:37:
e6:a1:54:88:81:d5:25:04:d5:ef:4f:5a:34:9e:ba:
4a:16:1d:69:f9:f1:f0:5b:a1:e2:3d:b4:84:e2:29:
03:6c:f8:e1:b6:1c:33:5f:41:a0:37:49:d6:99:65:
8d:04:16:03:bd:25:35:82:89:af:0b:d7:86:33:59:
ce:ee:17:a2:a6:3f:cc:ff:b6:c5:36:0b:d8:65:b2:
ac:69:18:cc:66:6c:3b:dd:22:12:cf:4b:19:26:cd:
2d:6b:ec:15:74:7b:e1:17:19:b5:f5:c9:aa:7c:1f:
4c:d8:96:4f:98:b1:03:f5:41:5e:05:a1:45:33:21:
97:e1:46:1d:35:28:c1:dc:4a:0d:64:b3:bb:05:f8:
38:52:6e:05:85:b5:a1:a5:99:71:77:8b:84:68:8d:
83:03:96:80:33:8f:7e:e6:43:ab:9c:d7:5c:78:c6:
14:ff:a4:4b:e1:f5:2d:a6:20:af:a8:79:71:56:d5:
2f:f7:55:a3:e7:09:d1:3d:6c:26:66:9e:b8:34:0c:
e8:2f:6b:5e:c8:aa:8e:d3:ae:12:24:cd:59:70:f9:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BB:65:5E:FC:9C:5E:D8:13:9F:0D:45:FB:5E:34:0A:4B:EF:81:17
X509v3 Authority Key Identifier:
keyid:EA:D6:46:35:5D:75:93:6C:B9:3E:D6:BA:DB:79:0A:87:FE:15:37:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6tZGNV11k2y5Pta623kKh_4VN0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/61980A54BA6611EEBC39626EC4F9AE02/6tZGNV11k2y5Pta623kKh_4VN0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a7:71:1f:b6:bb:d5:a6:f7:d3:15:84:54:71:5b:21:41:b5:
7d:a1:36:1a:f1:da:cb:3c:06:68:c8:20:f5:f3:da:d1:21:3b:
ce:25:75:b5:1c:93:13:89:e5:84:f7:66:63:4c:c0:34:20:89:
08:d0:93:e1:be:ff:c7:63:8a:c0:2b:79:67:11:57:ab:5e:04:
d2:ef:43:71:df:e0:29:2c:32:e8:ce:74:9e:5c:d6:b2:0c:30:
ff:c0:89:d5:9b:71:38:6b:cf:26:88:ef:2f:66:b9:e8:ae:9b:
3d:54:48:5b:c9:4c:4e:06:44:86:0a:ba:5c:ac:62:de:7a:a9:
a3:d2:0a:97:ea:a9:d2:04:2a:63:be:c3:32:90:1b:86:c1:6b:
17:40:3b:8d:f8:ea:0b:0f:12:a1:11:ce:0e:da:9d:3f:ca:6f:
b2:38:a6:16:0c:ba:1c:cb:68:c6:3c:c7:c5:28:12:9a:7f:5f:
47:a1:76:77:39:f3:8a:9d:bd:2a:0e:77:d6:0c:17:ac:40:63:
dd:1a:0e:cc:ce:65:30:f6:ca:7c:c6:e0:9d:54:67:fe:0f:d5:
b0:15:2f:f5:ff:8e:d5:bf:bb:13:82:ed:20:8f:fb:f5:f8:d3:
42:d2:3c:ec:55:a8:80:90:5d:a8:e9:fc:1c:69:08:f6:8a:ff:
53:30:b5:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkY1MzUxMTAvBgNVBAUTKEVBRDY0NjM1NUQ3NTkzNkNCOTNFRDZCQURCNzkwQTg3
RkUxNTM3NEEwHhcNMjUxMjE5MDMxMDEwWhcNMjUxMjI2MDMxMDEwWjAYMRYwFAYD
VQQDDA02OTQ0YzIxMi0xMjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6XqV9+QwiTGXpDlDNF9tAnhhKhZUCGP2T+g+IHIP+fYmPgkKTgYY/tEwLTfm
oVSIgdUlBNXvT1o0nrpKFh1p+fHwW6HiPbSE4ikDbPjhthwzX0GgN0nWmWWNBBYD
vSU1gomvC9eGM1nO7heipj/M/7bFNgvYZbKsaRjMZmw73SISz0sZJs0ta+wVdHvh
Fxm19cmqfB9M2JZPmLED9UFeBaFFMyGX4UYdNSjB3EoNZLO7Bfg4Um4FhbWhpZlx
d4uEaI2DA5aAM49+5kOrnNdceMYU/6RL4fUtpiCvqHlxVtUv91Wj5wnRPWwmZp64
NAzoL2teyKqO064SJM1ZcPk8owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJG7ZV78
nF7YE58NRfteNApL74EXMB8GA1UdIwQYMBaAFOrWRjVddZNsuT7Wutt5Cof+FTdK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjUzNS82MTk4MEE1NEJB
NjYxMUVFQkMzOTYyNkVDNEY5QUUwMi82dFpHTlYxMWsyeTVQdGE2MjNrS2hfNFZO
MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzZ0WkdOVjExazJ5NVB0YTYyM2tLaF80Vk4wby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjUzNS82MTk4MEE1NEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi82dFpHTlYxMWsy
eTVQdGE2MjNrS2hfNFZOMG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBbp3EftrvVpvfTFYRUcVshQbV9oTYa8drLPAZoyCD189rRITvOJXW1
HJMTieWE92ZjTMA0IIkI0JPhvv/HY4rAK3lnEVerXgTS70Nx3+ApLDLoznSeXNay
DDD/wInVm3E4a88miO8vZrnorps9VEhbyUxOBkSGCrpcrGLeeqmj0gqX6qnSBCpj
vsMykBuGwWsXQDuN+OoLDxKhEc4O2p0/ym+yOKYWDLocy2jGPMfFKBKaf19HoXZ3
OfOKnb0qDnfWDBesQGPdGg7MzmUw9sp8xuCdVGf+D9WwFS/1/47Vv7sTgu0gj/v1
+NNC0jzsVaiAkF2o6fwcaQj2iv9TMLWd
-----END CERTIFICATE-----
Generated at Sat Dec 20 01:27:33 2025 by rpki-client