This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
File: 6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json)
Hash identifier: 5ri7LgtXTM6Fd6MJg7G51KrGSzSAwpXv196qA/R1C+w=
Subject key identifier: 86:5E:95:B0:35:37:BA:1C:79:50:59:89:B0:F3:BA:9F:13:30:46:BD
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial: 0257
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
Manifest number: 0250
Signing time: Fri 19 Dec 2025 00:57:32 +0000
Manifest this update: Fri 19 Dec 2025 00:57:32 +0000
Manifest next update: Fri 26 Dec 2025 00:57:32 +0000
Files and hashes: 1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: H3h8BAeC522RXs4BNaoTMnjNDn7wmjaqNZfR/eUjSr0=)
2: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: AViHV7y6w+VuXdqb9Rg2Cx88Ixz8kcPYy8eDkaG1C5c=)
3: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: JPPg4axF52fUr6Imwg/bjNt0uzHT0+P65yVOXCd9Qfg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:57:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 599 (0x257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Validity
Not Before: Dec 19 00:57:32 2025 GMT
Not After : Dec 26 00:57:32 2025 GMT
Subject: CN=6944a2fc-faa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:76:6d:35:a6:a4:0b:5f:72:44:95:cc:25:
30:56:06:8f:76:67:e9:52:01:e4:fa:67:22:14:19:
9b:a5:9d:06:d1:a3:95:33:79:cb:39:55:4a:03:34:
f4:26:58:4b:eb:78:9e:6b:4f:ec:46:8c:2b:22:2c:
29:cc:27:a3:d7:3b:35:ba:c4:7a:bf:55:8b:f0:91:
61:53:80:2a:07:a0:dd:15:05:86:00:4f:5d:3b:65:
cd:f9:04:fd:41:70:62:b5:e7:90:c2:62:c7:d4:e8:
74:f3:a4:f4:41:11:fb:fd:af:b6:ef:67:97:66:d9:
5d:82:ff:74:f2:3e:1d:8a:f1:6b:b1:11:99:ec:b1:
5c:39:e0:6b:81:3a:09:42:65:36:fe:95:ec:a8:6d:
47:b5:0c:76:c8:67:04:90:fa:6d:0a:f3:a1:5d:01:
80:05:ab:bc:21:f1:98:9e:63:58:12:c4:1c:11:12:
4b:99:d2:4f:9a:62:14:2a:c1:f6:22:a3:5a:d8:e0:
16:dc:2d:fb:93:a5:7d:d9:20:42:3b:67:85:1a:30:
fd:e6:f7:b4:df:fe:18:76:26:56:f9:0e:4b:31:7b:
9f:a4:8a:c0:a2:1d:a3:d5:90:d1:c7:24:99:fe:05:
45:8b:3a:c1:8d:79:00:57:67:b3:4d:8b:d5:93:20:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5E:95:B0:35:37:BA:1C:79:50:59:89:B0:F3:BA:9F:13:30:46:BD
X509v3 Authority Key Identifier:
keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:be:51:c7:5f:0f:fb:ed:bc:55:21:e1:6b:85:39:17:1e:9c:
c5:87:c3:8d:9e:fc:4e:d5:86:a3:b3:de:bd:b1:d8:13:f7:0c:
19:8f:80:de:f0:c7:ed:04:bb:28:bc:11:aa:64:27:5f:09:35:
6e:97:26:c4:97:53:8c:54:fe:27:9b:19:59:20:b7:9a:b2:b3:
a6:b6:95:e4:13:98:15:fb:c2:5e:d4:5d:08:f0:2a:71:81:2d:
6c:5e:c3:81:1e:20:9f:60:33:34:d5:be:c8:14:84:23:28:ca:
6c:69:0f:af:96:ec:d3:b5:e0:43:88:66:94:81:06:e8:86:0a:
74:e8:d1:72:c6:40:33:9f:bf:66:65:e2:0d:ce:0a:ab:b2:d9:
49:37:f9:3f:0f:e1:88:51:8e:a4:f0:4e:d1:58:71:05:79:a9:
03:a7:eb:b7:2f:9b:05:f8:c1:f3:a1:95:76:9c:9c:cb:ee:1b:
4d:9c:bb:df:c4:a8:cc:a9:a6:d6:f5:ca:14:ac:15:ba:b1:97:
48:39:66:3a:d4:38:f1:f4:67:c8:db:48:a1:23:a0:c7:49:f0:
38:80:d9:f1:f3:6d:ae:e3:c0:78:f9:1a:32:e1:03:fe:d0:13:
9c:cb:8f:40:9c:56:64:16:01:8e:3c:43:44:33:a1:12:db:27:
4e:6c:bd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:09:51 2025 by rpki-client