This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
File: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json)
Hash identifier: CtD6scv5hH0/e0HSqAi5uz9cJ3clR3hcAiW5P6IfDFY=
Subject key identifier: 02:7C:71:7A:2A:8A:E3:50:F6:55:C6:DA:47:CE:3D:5B:93:64:6C:03
Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34
Certificate issuer: /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
Certificate serial: 2A78
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
Manifest number: 2A67
Signing time: Wed 31 Dec 2025 14:19:38 +0000
Manifest this update: Wed 31 Dec 2025 14:19:38 +0000
Manifest next update: Wed 07 Jan 2026 14:19:38 +0000
Files and hashes: 1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: oR6+sWz1qvVmrVmq5skvdue17ChkaeeM8/2MaZJPHac=)
2: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: IS6RP+KmoY800ilz+9/FraPb2PhtRfq61ziRhaqYPqA=)
3: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: vmKqro3gn7F1Qg3wm7Klm7w2ti+vviDyxmMgM4ZcJqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 14:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10872 (0x2a78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34
Validity
Not Before: Dec 31 14:19:38 2025 GMT
Not After : Jan 7 14:19:38 2026 GMT
Subject: CN=695530fa-d8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:44:43:bb:31:77:e2:b8:5c:4c:ce:2f:24:
d7:9e:fe:01:c9:95:5c:56:25:5c:e4:1d:aa:98:96:
b9:ac:6c:73:49:49:19:04:54:e2:4c:cb:05:8f:73:
19:1a:3b:0b:ff:1a:b8:46:11:58:12:b8:68:6d:ff:
b4:0a:3c:2c:2e:18:6f:3e:d6:dc:8a:1d:43:d6:f4:
2c:4a:47:b4:25:b3:4b:fe:22:5b:81:9f:de:00:71:
48:fb:3a:5c:3b:0e:55:ab:1f:ee:31:2c:4b:c6:a9:
de:55:cf:eb:11:f6:56:ef:a8:d0:bd:19:f2:d8:ce:
cf:c4:cf:69:04:63:59:c9:cd:00:64:1d:fc:e5:81:
6e:7a:7b:45:d1:41:0b:a9:dd:2f:76:cc:d1:60:fe:
f3:7c:2b:77:58:92:bd:6c:24:53:d9:13:b1:bd:e3:
11:4d:12:1e:ec:c6:45:02:ec:68:85:ae:2c:2d:41:
2e:30:cf:a8:3a:87:c6:88:78:f5:79:65:29:cc:24:
b8:d8:26:71:bb:4b:e7:da:a2:88:f0:66:af:6b:70:
58:ad:f4:50:f9:11:d3:e9:2d:48:ab:e0:62:97:89:
41:9a:79:35:41:8a:4c:f1:a3:55:0e:bb:b1:51:dc:
a8:f3:40:1b:57:24:27:32:77:e9:1b:43:f0:3d:09:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7C:71:7A:2A:8A:E3:50:F6:55:C6:DA:47:CE:3D:5B:93:64:6C:03
X509v3 Authority Key Identifier:
keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:e2:14:4d:15:76:37:ff:1b:bd:8d:83:8a:00:9e:6b:64:a5:
0e:68:df:29:61:f8:bb:45:88:5b:b1:a6:3b:ed:48:52:7b:e3:
a9:12:22:fa:c1:33:66:d7:6f:5b:07:a8:44:a8:03:2c:64:05:
06:9c:a0:64:bf:1e:4b:a6:fc:39:c9:fd:14:ee:bb:53:95:c8:
aa:0f:36:e8:69:b9:f9:fa:da:cf:e1:c2:90:ef:f7:7d:c6:d5:
75:25:e1:87:f2:0a:7c:22:87:ba:91:b2:f9:d7:ee:3e:d8:70:
68:b5:89:71:c0:48:d2:a4:65:35:dc:da:0d:d4:68:0c:f7:f7:
40:96:b0:df:0e:33:ad:65:ed:4e:33:47:3e:0e:0e:6e:9f:25:
c1:69:82:d9:49:6f:aa:ba:55:8f:f8:80:60:78:a6:25:d5:32:
61:fb:4a:f1:53:c6:c0:a4:1b:1b:32:c1:9a:7e:bc:f0:ae:ef:
b8:85:98:44:67:98:e7:88:5b:1e:05:e3:c3:0a:35:32:0b:6b:
14:ef:84:b2:6d:c1:aa:50:34:c1:f6:84:cb:eb:a2:24:41:73:
3a:99:23:bb:66:ef:90:9e:f0:2d:92:dc:ea:b2:63:55:bd:21:
3a:f5:bb:f0:17:d8:2d:84:26:ac:9d:3b:51:c7:55:01:f0:90:
c3:15:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 14:28:20 2026 by rpki-client