This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
File: a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft (raw, json)
Hash identifier: /YvZXEzZhBWumL3bAg7jEf4tHX8x0O6FUNIDOUVIDaA=
Subject key identifier: B0:BD:29:F2:39:00:79:8F:77:FC:C9:29:8F:05:87:84:A3:A5:CB:6D
Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E
Certificate issuer: /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E
Certificate serial: 015C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
Manifest number: 0154
Signing time: Fri 19 Dec 2025 03:26:42 +0000
Manifest this update: Fri 19 Dec 2025 03:26:41 +0000
Manifest next update: Fri 26 Dec 2025 03:26:41 +0000
Files and hashes: 1: a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl (hash: GlWlEdAcXYdjAUbNwBM84TXvjiVehxjpBZL2vWRusYc=)
2: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (hash: zfwutZduKqp+OFtvgPQ9BbGwso4D1FrRlH6RE6jDpUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl
rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 348 (0x15c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91977B8, serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E
Validity
Not Before: Dec 19 03:26:41 2025 GMT
Not After : Dec 26 03:26:41 2025 GMT
Subject: CN=6944c5f1-71a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:84:f8:6b:7d:c3:cc:64:64:92:86:24:7a:
91:3f:4a:e2:57:09:5a:41:46:b8:3a:12:19:b6:a0:
0f:29:03:d4:41:e5:6b:fd:4c:d9:86:47:ad:ca:3b:
62:9d:a9:6a:7f:f6:aa:51:87:29:be:75:fb:55:40:
45:cb:da:ec:5b:b1:ee:44:80:0e:74:5c:25:27:8b:
e7:dd:9f:d9:dc:fa:f0:46:e5:90:2a:ce:48:4e:44:
d7:f2:a3:09:fe:88:10:e6:e2:47:08:0a:ee:40:2f:
f3:d2:c3:45:32:4e:8d:f8:d5:22:e8:20:69:12:c0:
aa:8a:33:04:29:cd:4a:4e:73:a3:f8:cc:60:6a:99:
0a:6e:c3:ae:71:68:63:91:28:e3:47:4f:cd:4c:5d:
76:67:85:22:6b:f1:0f:bc:9c:be:49:20:05:d1:e9:
b4:a5:d9:63:0f:68:3a:a5:25:d2:27:01:33:66:04:
b9:69:10:3f:92:48:71:f7:f4:f9:ab:7b:79:09:bb:
16:41:7a:d1:24:83:95:ff:c9:e4:d0:6d:f6:2a:04:
8c:bb:02:7b:40:72:30:6a:5f:46:c2:8a:83:e0:41:
a6:9c:f6:00:c1:66:d0:4c:3d:f3:06:f8:5d:76:72:
47:94:f5:b4:af:d8:20:c8:4b:b1:9b:ec:67:56:fd:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BD:29:F2:39:00:79:8F:77:FC:C9:29:8F:05:87:84:A3:A5:CB:6D
X509v3 Authority Key Identifier:
keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:b1:58:2b:04:5c:44:a1:f6:5e:23:e7:b1:6c:72:73:f3:eb:
34:71:f3:14:17:28:94:c5:e9:c3:5c:41:61:cd:a5:41:81:75:
44:ab:f3:59:d2:67:e1:2b:3d:93:b6:0f:b8:56:16:ba:05:65:
26:68:4e:50:db:7b:ee:4b:78:8f:21:7d:43:32:30:bf:47:20:
05:22:77:41:7f:fe:40:7e:90:7f:97:47:91:77:42:ad:1d:c2:
22:a3:e1:db:a2:dc:10:66:7d:8c:70:8e:e0:9a:8a:6b:37:d7:
0f:43:da:5f:33:7e:9d:fd:77:e8:d6:a0:76:97:be:88:87:1b:
0d:8c:34:cb:f1:9d:43:12:81:1b:d8:0d:24:3b:47:53:4d:97:
4e:95:a0:9b:e0:08:94:81:85:25:58:c2:7e:27:50:67:ee:51:
f5:15:91:63:71:f1:da:e8:70:9a:84:a3:3b:39:2b:51:2b:df:
2a:67:4a:9e:3c:b4:c3:a7:b9:69:3d:98:88:9f:75:18:c7:73:
fb:88:bc:5e:dd:45:fb:63:b5:0c:f6:33:20:bc:be:cf:c4:1d:
71:47:75:45:42:cb:59:67:1b:18:cf:b7:87:cd:90:08:51:b4:
52:bd:fe:d2:d9:0e:1e:2b:6a:f1:06:22:e9:6a:7b:4e:60:0b:
12:df:d5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:38 2025 by rpki-client