This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
File: RC6qL6yoXGzvgcRKZaY36GftNTQ.mft (raw, json)
Hash identifier: cZKiP+IBMFtuDn9OHVriC5E7Sx17X/hZiYctn8X3yg8=
Subject key identifier: 76:9A:E0:67:9F:E0:36:2B:CA:A0:BD:5A:BE:55:BE:E0:8B:E9:D3:E2
Authority key identifier: 44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34
Certificate issuer: /CN=A9145E01/serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
Manifest number: 0B
Signing time: Fri 19 Dec 2025 06:57:37 +0000
Manifest this update: Fri 19 Dec 2025 06:57:37 +0000
Manifest next update: Fri 26 Dec 2025 06:57:37 +0000
Files and hashes: 1: RC6qL6yoXGzvgcRKZaY36GftNTQ.crl (hash: HziiJ7LesoYi8gTgWXnmsuzWOlkuOVakezvv7a72Bc4=)
2: 042373B2CF5A11F08A42EF16C4F9AE02.roa (hash: EggkpcVOgI9lqzWLNGUO4SNdA0AExjaPLsB6eR+b1dk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl
rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:57:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145E01, serialNumber=442EAA2FACA85C6CEF81C44A65A637E867ED3534
Validity
Not Before: Dec 19 06:57:37 2025 GMT
Not After : Dec 26 06:57:37 2025 GMT
Subject: CN=6944f761-4c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:1d:39:1c:93:53:02:64:d2:15:52:25:cb:
e3:8a:c4:35:c6:e7:d0:69:d7:62:8b:7d:0a:16:65:
95:64:00:8a:e1:c7:34:52:34:7e:02:22:e3:99:0b:
44:9b:a3:77:1c:c3:a7:e7:50:65:e0:b3:ed:bc:ae:
eb:9a:3c:f9:34:e3:fa:d6:8e:13:3a:c4:4e:ff:02:
c7:99:ad:15:21:f3:c7:b8:77:ea:d9:28:7d:c6:cc:
ef:48:f6:bf:da:ff:c0:0e:9e:b7:e8:f7:b7:9a:78:
e0:3b:47:69:8e:37:a5:a1:38:79:ca:ed:f4:91:1c:
9d:3a:9f:56:77:03:3c:4d:f2:74:2d:ce:db:fb:cd:
2d:91:68:ca:bd:d0:8f:a7:29:f9:80:0e:06:a0:c8:
06:94:1e:e2:0d:25:3c:11:ef:33:68:cd:37:6a:18:
44:bc:52:68:be:3b:61:bc:84:95:77:25:fa:9a:59:
d9:f5:d3:d7:25:07:f5:c8:12:ed:a7:50:99:ac:c9:
cf:d1:76:4d:1a:88:86:32:ec:ba:0c:67:f9:72:a2:
32:51:37:52:47:2a:fa:a4:a4:03:16:7b:42:d3:05:
8f:76:8f:5d:ad:8e:65:6e:08:c9:4c:97:72:de:66:
4a:64:0a:b7:e7:d4:a8:ba:ee:ed:52:c5:1c:e5:5c:
06:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9A:E0:67:9F:E0:36:2B:CA:A0:BD:5A:BE:55:BE:E0:8B:E9:D3:E2
X509v3 Authority Key Identifier:
keyid:44:2E:AA:2F:AC:A8:5C:6C:EF:81:C4:4A:65:A6:37:E8:67:ED:35:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RC6qL6yoXGzvgcRKZaY36GftNTQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E01/4FC13EE0CF5911F08492DD11C4F9AE02/RC6qL6yoXGzvgcRKZaY36GftNTQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:55:cc:27:4f:53:50:a6:4a:bd:25:cf:fe:c0:f9:43:13:57:
7b:59:96:5b:69:3a:40:2d:07:17:98:24:7b:3a:a7:db:be:af:
1d:17:b3:6e:39:1c:7f:92:5a:a6:e5:83:d2:52:66:fc:1e:dc:
da:30:b7:4b:06:95:f8:77:2a:bb:4a:31:31:32:4b:09:e8:45:
73:58:8d:88:22:18:e4:dd:d8:68:34:7e:d4:3c:38:a3:03:64:
cf:26:a8:e9:a6:9d:26:b9:b2:7a:90:41:fa:bd:5f:8b:ae:f6:
66:b8:3a:5a:bc:4e:0c:8e:b1:b3:e6:53:50:27:3b:75:69:df:
35:43:ba:8a:91:1f:a0:14:09:12:a6:04:4e:bb:15:cb:8d:a2:
c3:29:fb:31:f9:48:e5:38:20:11:0b:ae:fa:11:97:d7:b6:05:
48:8a:b1:c8:e4:71:51:85:68:ed:b9:14:c7:02:df:73:f5:23:
64:b6:7f:0a:5c:8e:e2:a0:af:6e:10:26:28:ba:4a:bf:3a:68:
81:ff:a1:a6:71:be:a9:25:cf:ba:7d:45:ce:fc:33:5b:85:94:
72:85:ff:15:a5:09:26:28:34:f7:39:37:46:66:78:33:c8:8d:
9b:91:12:02:5c:c1:87:19:30:da:c4:e6:df:41:6a:76:9f:b9:
cf:31:e7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:02:47 2025 by rpki-client