This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
File: -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json)
Hash identifier: nIoMB6rxJ9FJepkHUkYgL24nGm7ECTzJ3/YFXhk+1yM=
Subject key identifier: EF:1D:A8:94:45:16:F8:C6:7B:A3:33:3B:F9:A8:93:47:DC:67:8F:16
Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54
Certificate issuer: /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
Certificate serial: E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
Manifest number: E3
Signing time: Wed 31 Dec 2025 04:32:50 +0000
Manifest this update: Wed 31 Dec 2025 04:32:49 +0000
Manifest next update: Wed 07 Jan 2026 04:32:49 +0000
Files and hashes: 1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: LTgKuYtaN9Lwy8ZxTwXOhUJA/dLzDmIvKtcdOB4Q6eQ=)
2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: 3RkfId18fIAWdqGmzWtf6xa9nYpeGDo6ResxGTznSso=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl
rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 04:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7709, serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054
Validity
Not Before: Dec 31 04:32:49 2025 GMT
Not After : Jan 7 04:32:49 2026 GMT
Subject: CN=6954a772-0eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:4f:87:51:42:13:57:89:51:5e:a5:41:43:
41:5a:22:51:34:83:06:c5:1a:9b:72:68:2e:c1:d8:
a8:df:20:d3:0e:de:70:ff:18:25:db:36:e8:99:7a:
36:96:82:5e:12:12:83:d7:bb:db:08:a1:00:76:21:
dd:5e:f1:d7:21:8c:a5:57:c3:23:ce:1b:6d:8f:44:
2b:4a:6e:a3:32:be:38:f7:51:46:86:02:01:62:67:
5f:e3:15:6e:c3:87:97:c3:8e:10:fa:a8:52:31:e5:
c7:c7:b4:3b:6a:82:b4:c4:6e:4b:1c:12:d1:79:57:
bd:88:5c:2b:cd:79:ae:7e:37:6e:5b:fd:51:0d:23:
31:45:9e:2e:71:7e:a8:88:ae:74:e8:71:03:77:28:
7f:0c:d8:23:d6:d4:4a:cf:9c:26:f2:b7:ae:e9:5f:
af:21:77:c5:05:c6:99:26:43:47:76:20:df:07:93:
c1:77:c4:0b:b3:b6:f6:95:0d:40:5b:0a:cf:98:2b:
b7:f2:42:10:50:e3:3a:88:5c:0c:b4:bc:47:cf:1d:
26:cc:0d:27:a2:e8:8a:ce:ea:2f:6c:55:96:95:55:
31:e7:a6:f8:94:24:41:73:80:cf:36:77:2d:44:e4:
da:d9:93:41:77:8d:54:18:e1:94:b2:db:ba:7f:a7:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1D:A8:94:45:16:F8:C6:7B:A3:33:3B:F9:A8:93:47:DC:67:8F:16
X509v3 Authority Key Identifier:
keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:28:7d:b9:b2:14:29:1b:f4:6d:6d:5f:ac:94:73:81:94:d5:
14:65:12:18:a2:63:d6:92:c4:ef:5e:f3:69:08:b9:46:2c:3a:
c0:1d:c6:68:ab:62:3f:d8:59:5c:f7:0b:a7:fb:fb:e0:fd:d8:
04:c6:25:00:85:17:95:d1:e3:33:eb:22:12:10:ae:08:0e:b4:
b3:d6:bb:be:47:af:9a:03:e1:e7:e0:ec:93:88:3d:6c:fb:c5:
61:ff:10:9b:15:10:c5:a9:8c:0a:c5:a8:7b:fb:0e:d6:71:12:
82:17:e8:d2:58:74:13:73:4c:7b:d1:bd:4a:ae:3f:ce:24:2d:
a7:3f:7b:d9:0f:59:81:13:b1:a6:62:84:85:a7:bf:39:0b:f1:
09:1e:72:c8:97:d0:98:c5:90:96:e4:10:b9:9c:ac:02:f1:fb:
e8:06:31:e3:91:6a:f4:3e:d9:cb:b1:a5:9f:81:01:fc:a6:3b:
9f:d1:29:31:99:c6:3a:f4:4e:f7:b3:c7:7d:43:61:0e:40:24:
43:f1:46:10:12:7e:0c:3f:55:8c:e7:96:f1:8c:0a:ae:22:6e:
6c:29:27:3f:4e:ec:ef:e1:71:30:a4:77:f5:64:00:58:e7:8d:
71:7b:a9:5b:de:90:01:c9:86:73:ce:55:e7:72:5c:b8:2b:42:
06:88:67:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 05:47:54 2026 by rpki-client