This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json)
Hash identifier: /wTn4BiFfA2cmGaiaRr/OMqvfqjVBfA+BxRaERXr02c=
Subject key identifier: 74:AF:60:29:DF:AA:FE:55:DD:4B:ED:F8:BC:1B:59:5D:8B:2B:C9:00
Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48
Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48
Certificate serial: 0409
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
Manifest number: 0404
Signing time: Thu 18 Dec 2025 23:44:57 +0000
Manifest this update: Thu 18 Dec 2025 23:44:57 +0000
Manifest next update: Thu 25 Dec 2025 23:44:57 +0000
Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: QSmBRi73Yu2AWREygqHu7GmwJ7JmX4lOK2i4u9scAHg=)
2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: ZTGzWMYHeiUgbI/Ob63uEbxBeTDxYyADhXTIjme/A3s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl
rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1033 (0x409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48
Validity
Not Before: Dec 18 23:44:57 2025 GMT
Not After : Dec 25 23:44:57 2025 GMT
Subject: CN=694491f9-07a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bd:61:2b:5e:7b:03:86:2a:62:cd:13:ad:9f:
d7:57:ea:a7:66:7b:8b:51:42:ea:6c:a4:05:d7:04:
98:13:b5:27:52:b8:4c:1e:da:39:60:0f:01:a5:60:
9b:40:d3:3a:16:29:bc:44:5b:e0:45:db:ff:c5:05:
d4:d2:69:e9:67:f4:f0:c3:98:50:03:dd:aa:d4:ea:
3b:87:ba:82:53:88:5f:91:37:4b:2a:78:1e:4e:84:
34:b5:fe:74:64:30:1c:c8:82:ab:98:a7:6d:b3:0c:
36:a0:7b:d3:5a:e1:00:6d:52:b1:b0:60:cf:b7:d6:
ab:e8:7c:df:e9:d8:67:a5:a6:92:83:d1:77:ca:07:
92:b9:9d:52:2f:4b:e2:10:57:40:30:e0:c5:b1:b3:
b4:c6:ec:83:12:39:a1:da:5b:cf:4f:b2:37:0a:96:
3f:19:f4:48:5c:0e:17:02:05:32:14:45:59:1f:5a:
3e:04:5b:e7:eb:3b:cd:78:83:39:a1:73:7a:2d:3d:
d5:1c:db:12:eb:85:54:48:50:0d:7f:ec:0a:01:e1:
8c:c8:75:47:51:37:0a:b6:5d:5d:98:71:0b:67:dc:
9c:08:8e:dc:dd:ca:31:02:74:d8:71:5f:79:a9:ec:
be:a1:0c:83:1d:a5:d6:d4:3d:98:2f:97:ee:6f:4f:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AF:60:29:DF:AA:FE:55:DD:4B:ED:F8:BC:1B:59:5D:8B:2B:C9:00
X509v3 Authority Key Identifier:
keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:6d:1a:fa:92:b1:5e:cb:a1:91:f0:86:c2:2f:79:18:d4:2d:
62:e2:d5:0d:98:32:b1:a2:9d:53:3d:2b:f2:f6:f8:36:ca:36:
52:42:ae:1f:c2:36:6d:60:96:8a:ab:45:66:ce:f2:1a:43:0d:
8c:da:93:a1:33:ba:77:76:f7:af:95:e8:1a:38:cd:07:a7:ca:
48:b9:44:2b:65:bc:d7:05:2c:c3:16:d0:6b:ad:d7:7a:9f:58:
de:c9:ae:1e:ef:6d:82:73:87:50:17:d0:d9:83:c2:7d:fd:c4:
a3:76:ad:98:8f:e8:3e:58:4b:98:6c:20:0b:24:a7:f0:df:6e:
7b:81:a9:88:64:b3:16:52:f9:e9:94:63:24:0a:6c:bb:ec:f1:
98:6b:17:28:e1:d0:40:ec:2e:16:ce:0e:2e:5f:4f:8d:52:86:
29:bd:ed:2d:60:73:02:60:b2:e2:f0:09:7b:02:9a:fc:7c:b9:
36:70:a2:2b:46:14:f1:00:f1:30:07:04:a4:8c:61:c1:90:19:
ed:d3:b7:12:86:64:77:cb:5c:72:d8:b0:82:1a:50:14:d7:28:
eb:76:50:bf:fa:51:58:9f:cd:33:b8:41:cb:9b:d1:5d:8a:ed:
61:99:5f:18:14:16:0c:88:f1:d6:60:ee:bb:55:b5:6f:5d:02:
71:24:d9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:47:21 2025 by rpki-client