This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json)
Hash identifier: 8dtY4nk4U92g4pI9PKSeSAPuVMMDqVg5rWFnwfNax9M=
Subject key identifier: 24:CA:49:C0:8C:0F:B0:D7:8C:BA:28:9D:F1:09:6B:90:94:CB:16:A6
Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7
Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
Manifest number: F0
Signing time: Sun 21 Dec 2025 04:28:24 +0000
Manifest this update: Sun 21 Dec 2025 04:28:23 +0000
Manifest next update: Sun 28 Dec 2025 04:28:23 +0000
Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: C7BZICUtjTTqze2BrE6D9cpuOlan2kIcz163j0QRDHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl
rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
Validity
Not Before: Dec 21 04:28:23 2025 GMT
Not After : Dec 28 04:28:23 2025 GMT
Subject: CN=69477768-e7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d2:84:37:a9:f4:9a:fe:5d:84:ff:cf:e6:0f:
bf:8f:10:73:29:08:11:d8:45:bd:5c:22:47:85:fc:
5c:80:b5:98:db:1c:7b:12:25:f2:80:ee:8f:2a:b6:
d0:fc:8d:49:bd:b1:ef:08:5e:92:97:77:a7:47:bb:
69:d0:52:38:0e:6d:ec:0b:b8:9c:63:38:e8:c4:cc:
59:ad:34:aa:42:9d:1a:34:4b:09:5a:a1:c4:3c:0b:
e6:1b:73:cb:ce:96:3a:2b:b0:f4:05:3a:e6:16:32:
5f:a0:5e:ef:71:cf:aa:b4:e3:61:16:47:aa:9a:91:
ba:d6:f5:00:90:58:ab:a2:3c:84:4d:37:19:8b:fe:
2b:b2:b1:4c:1c:d6:24:ae:7b:b9:5b:10:45:f7:18:
4f:2f:33:49:ba:68:38:ce:a4:a2:b9:82:0c:ca:09:
8f:86:fa:b4:45:d5:bf:45:c0:3c:ae:1a:b9:92:8e:
77:0a:d6:33:45:a2:4e:89:ad:c3:07:d0:c3:5b:8e:
1c:4c:68:98:ed:b5:83:1f:11:f9:d6:21:67:28:59:
a4:09:27:ab:1d:c1:25:00:4b:8e:5a:f9:b9:5c:2a:
db:55:bc:9e:0e:de:0d:50:6c:13:62:95:60:64:cb:
0e:ae:af:c0:4a:28:92:80:d7:10:24:90:01:d9:89:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:49:C0:8C:0F:B0:D7:8C:BA:28:9D:F1:09:6B:90:94:CB:16:A6
X509v3 Authority Key Identifier:
keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:06:b3:59:40:d3:48:fc:04:cb:1d:e0:78:c8:0c:f5:50:47:
b8:b2:78:f0:ae:34:92:9d:c1:6b:10:09:ae:f1:34:fd:0a:3c:
f1:1e:82:8a:09:9d:d9:3a:f0:ee:96:15:a8:f7:b1:2a:9d:af:
35:aa:ad:5c:75:23:73:84:c5:74:11:29:92:ae:dd:0e:6a:15:
23:df:a5:6d:6a:bb:1d:ba:95:5c:52:bd:c5:d0:8a:7c:e8:92:
fd:64:29:49:63:b0:53:e8:83:8b:c5:ba:34:b6:ba:d8:bc:c3:
19:da:19:c7:09:ac:18:5d:2a:9d:a7:90:52:65:f3:d3:a5:68:
90:fd:c3:ed:e7:cc:27:7e:51:de:62:8c:2e:ce:32:99:12:d9:
c4:19:d0:64:cf:e1:13:5a:ae:52:c5:54:fa:7b:c2:0c:de:6c:
8b:62:46:23:0a:37:2f:00:fa:5a:c9:3f:bd:07:b6:4b:fe:1d:
5d:1d:b5:7b:8d:7c:71:cc:5e:30:e3:fb:25:c7:93:4b:f8:03:
41:a2:a5:88:24:5f:c2:e3:a9:d9:ea:61:40:46:47:e5:20:a7:
ef:bf:19:7a:b1:16:6a:2d:a0:4f:21:ee:17:25:81:22:68:37:
70:a4:ff:d4:7f:fe:aa:84:89:51:90:ce:4c:47:2b:0b:13:06:
ba:33:a4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 23:13:04 2025 by rpki-client