This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
File: bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json)
Hash identifier: wPiqpZ3VALWbsZ1h0WrLh2V84GgI5F5hcLV3oa8YEg4=
Subject key identifier: 8C:50:9A:24:1D:50:7D:70:BD:6C:A3:BD:D1:0E:94:92:56:36:0E:80
Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Certificate serial: 2594
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
Manifest number: 2576
Signing time: Sat 20 Dec 2025 15:36:28 +0000
Manifest this update: Sat 20 Dec 2025 15:36:28 +0000
Manifest next update: Sat 27 Dec 2025 15:36:28 +0000
Files and hashes: 1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: pHUPFFUTdPXx88Ua8crtRMzI0GbmIiRoanaElMcsMuc=)
2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: PMOwuwycyz1efOwQD9bi4kFPWmLMoM6pZvvwGRZKzzA=)
3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: 9Sq4TbQc8GumqX8uTYAB6EAnXcYzZ1xJ5w8RgK1VPJ4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 15:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9620 (0x2594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87
Validity
Not Before: Dec 20 15:36:28 2025 GMT
Not After : Dec 27 15:36:28 2025 GMT
Subject: CN=6946c27c-196a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:f5:43:6f:cb:a1:e7:81:a0:63:c5:e8:2b:
d9:b2:81:98:3f:a4:bb:d3:f2:de:ff:c5:39:a0:14:
34:58:3d:26:9e:7d:6e:d2:cf:a0:b0:fc:44:00:e9:
dd:34:4d:5c:5e:e5:da:09:ca:c2:e3:f9:c5:95:09:
fc:d7:3c:53:35:b7:a5:84:d6:df:e1:cc:84:b3:f7:
b9:22:2c:d6:70:88:e7:69:04:19:a8:47:9a:84:b7:
55:a3:27:c0:5d:54:96:b9:49:10:40:de:c1:1d:56:
c9:4d:0f:81:74:e9:02:b0:f0:41:96:38:74:e3:15:
ff:5e:8d:eb:02:cb:fc:df:b8:94:d0:0b:1a:a3:eb:
75:1f:db:7d:10:9e:f4:fc:4b:c0:5b:b4:79:35:f0:
7d:31:b3:c6:27:4f:10:fc:71:88:f5:49:0c:33:17:
21:38:8f:01:97:76:b4:ff:80:17:2f:b6:42:06:ef:
92:9b:f1:ee:a9:15:58:7d:90:22:76:3b:20:5c:4d:
ce:09:b3:18:89:d0:dd:9e:75:6f:d8:c4:6c:c0:13:
1c:df:27:08:e9:0c:e6:a8:64:12:54:5c:fd:7b:13:
f1:53:98:db:ce:77:8c:2a:c2:cc:0b:86:21:5f:49:
fe:08:27:70:89:c7:91:97:0a:00:af:11:5e:c2:21:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:9A:24:1D:50:7D:70:BD:6C:A3:BD:D1:0E:94:92:56:36:0E:80
X509v3 Authority Key Identifier:
keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:45:6b:51:d3:c8:01:17:f8:da:62:61:62:1e:b7:3f:c3:fd:
47:ad:08:5a:b3:25:23:ce:a5:8a:2e:97:af:4c:26:0d:4b:1a:
66:48:32:93:2f:5e:4c:0e:f3:79:33:12:d6:bd:33:7e:33:cb:
05:a7:c7:32:b1:04:5a:eb:8e:28:18:bf:4a:6c:04:ee:bb:a2:
a6:df:17:58:ad:1f:29:57:8b:fc:21:c2:d4:31:e0:53:d8:b1:
4e:67:d0:1c:97:ca:a4:da:94:0a:a6:15:c4:0b:49:ef:62:b9:
be:75:dd:14:97:6e:52:4d:14:fb:28:e4:68:ee:b9:0b:07:4b:
ac:4c:ee:c3:53:75:8f:92:69:3a:3f:d1:bb:75:99:c4:35:8b:
3f:c9:16:4c:28:97:b4:54:48:32:7e:98:eb:fb:95:3e:c8:c3:
97:44:0e:22:ff:0d:94:9c:61:59:ec:91:99:0e:0b:a9:5e:b9:
c0:0b:0b:04:91:5b:f5:6f:ab:b4:13:14:6f:3a:02:5b:4d:6a:
2a:df:ae:6e:93:9d:ee:83:9f:bf:4d:82:89:95:c0:9e:64:b9:
8e:26:4e:92:11:d6:6e:c5:74:50:a5:28:70:dc:47:b0:8a:24:
3a:a5:3e:61:9b:66:54:60:cc:ea:97:79:2a:09:88:eb:e1:67:
27:23:68:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 07:19:03 2025 by rpki-client