This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
File: sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json)
Hash identifier: QOlx2AMhyNF1g+ibcBP3R5sEoujJRDgJ5R4JETHlXXE=
Subject key identifier: C1:CA:E4:13:68:CC:BA:3C:95:9B:C4:B3:B7:C9:66:96:4C:97:B1:A1
Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0
Certificate issuer: /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
Certificate serial: 0D89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
Manifest number: 0D81
Signing time: Wed 24 Dec 2025 17:38:13 +0000
Manifest this update: Wed 24 Dec 2025 17:38:13 +0000
Manifest next update: Wed 31 Dec 2025 17:38:13 +0000
Files and hashes: 1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: QN1aNoIaYBXAJnCnFZIk9n2mGeU8a1Np1LScjBhPweM=)
2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: j4ZSWs9Zu9eXGBGyTwHuQZ3Okk0YlAH6B7JO+kTYGo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl
rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 17:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3465 (0xd89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0
Validity
Not Before: Dec 24 17:38:13 2025 GMT
Not After : Dec 31 17:38:13 2025 GMT
Subject: CN=694c2505-3d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:77:2a:18:10:a3:67:c2:db:51:ba:85:c5:
3c:0b:a4:17:fd:31:a1:ed:ab:7b:4f:f8:0d:20:94:
7c:4b:10:7b:22:f9:8e:84:66:32:16:84:7d:e0:b7:
0e:6d:50:ca:fa:5b:67:f3:c6:e4:c9:b2:f4:bc:9d:
d5:95:9f:d1:bd:77:bd:cc:35:93:ac:3b:75:6a:56:
17:25:68:6f:9d:08:1d:14:c7:a6:15:b1:ba:e6:ee:
99:d8:b2:13:03:a6:3a:a8:0a:19:77:14:21:12:f5:
c8:8e:f8:e0:b6:ad:96:98:ad:de:6e:db:9c:10:67:
9f:12:fb:5b:96:c1:1f:37:52:7c:22:ad:b5:76:a4:
00:88:0e:5c:82:a1:c3:57:6e:22:db:a1:10:24:72:
6f:2d:63:c9:53:c1:97:8c:c2:ad:19:e6:94:ea:1d:
33:f3:31:29:3b:fc:81:4e:c5:8e:40:2f:45:4a:fd:
ba:6e:0f:f3:1c:29:34:6d:66:ed:98:84:bb:46:43:
6f:45:17:1d:a9:7b:50:39:3f:91:16:17:60:82:90:
43:52:b1:8b:91:ea:a8:e5:7b:30:b9:0f:2d:b8:cf:
1c:4d:8a:c3:07:82:92:36:3f:d5:b6:7f:e2:dd:68:
36:4e:58:29:e6:33:c1:cf:35:ba:f9:30:cd:47:35:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CA:E4:13:68:CC:BA:3C:95:9B:C4:B3:B7:C9:66:96:4C:97:B1:A1
X509v3 Authority Key Identifier:
keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f2:99:38:5c:82:a7:e5:a6:6d:96:94:16:9d:39:a9:5c:b5:
bf:5d:6d:ca:cf:4c:8c:1b:74:8a:62:d1:75:e0:62:db:1c:5b:
8b:9c:11:4d:17:d2:40:fd:b6:1e:ff:8c:ae:a2:ad:8d:83:c6:
d2:56:05:bf:6c:2f:4e:f5:5f:b3:a1:8a:4b:1a:0a:b0:a1:f3:
7c:ba:67:3b:ad:88:03:1e:e7:18:a1:66:a3:ec:a4:ea:6c:f0:
05:99:94:d5:e9:af:a4:38:3a:97:4e:b0:69:d7:f2:81:96:16:
19:c7:b7:99:bc:21:6d:d8:3f:64:8a:b1:4d:80:10:d9:ec:d4:
f7:cc:40:ad:9a:d2:7d:53:27:93:d2:d9:61:f0:51:4c:2b:00:
cf:68:5b:5b:0f:40:8f:aa:0e:dd:b0:ba:a0:74:91:4f:01:37:
77:ac:2c:27:07:57:11:80:ec:de:08:e7:18:06:0c:f3:dc:b5:
60:73:6d:4c:48:6b:6c:7b:01:6f:07:4b:9e:43:72:7e:65:1c:
ed:58:b2:fe:c6:f5:0e:32:8a:6d:ce:63:51:fb:01:b7:d6:a9:
d6:e0:33:34:0c:bc:f5:0b:44:6a:16:59:2b:25:4d:57:00:fc:
8a:b7:2d:26:1e:fb:74:d9:3e:b5:97:5d:d2:2a:01:78:13:e5:
83:96:fe:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 01:22:09 2025 by rpki-client