This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
File: KB6VPa5xcoChbkvFbkE1LoR2PLw.mft (raw, json)
Hash identifier: iq+mmxw55McfS5eXP6YWIjIjz255P4b5IFvTE9xBJkM=
Subject key identifier: 6D:8C:79:5D:9A:8E:13:6E:06:F7:17:99:91:C9:AE:86:CF:C8:14:B4
Authority key identifier: 28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC
Certificate issuer: /CN=A91EEA4D/serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC
Certificate serial: 0898
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
Manifest number: 1445
Signing time: Thu 18 Dec 2025 18:51:18 +0000
Manifest this update: Thu 18 Dec 2025 18:51:17 +0000
Manifest next update: Thu 25 Dec 2025 18:51:17 +0000
Files and hashes: 1: KB6VPa5xcoChbkvFbkE1LoR2PLw.crl (hash: 6vkdtqVLMyyv/+SdOE3vS0whjm9dWrTaX18IXhTolgA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl
rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEA4D, serialNumber=281E953DAE717280A16E4BC56E41352E84763CBC
Validity
Not Before: Dec 18 18:51:17 2025 GMT
Not After : Dec 25 18:51:17 2025 GMT
Subject: CN=69444d26-0043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:7c:cb:d8:69:95:47:c6:af:b8:24:d8:4e:
31:61:a4:51:dd:08:f8:81:d7:7f:7d:de:db:d4:54:
5a:cf:dd:99:2f:cf:33:53:bd:13:f5:da:8f:6b:60:
c7:43:20:ea:01:b3:5a:0b:60:dd:5c:c2:59:0e:5f:
20:c2:ee:f3:be:82:b1:e3:7c:70:38:63:4a:46:0e:
ae:51:f7:34:2c:d1:ce:a2:f1:38:25:52:5e:35:32:
58:57:68:ee:cc:15:c3:98:b2:56:aa:98:b4:50:d3:
70:29:08:01:9b:7e:77:3a:d0:e3:52:ca:69:c7:40:
16:9c:78:fe:9b:f1:08:3d:53:1b:f6:be:d1:7d:b8:
c3:98:f7:75:fc:4f:be:c7:03:8f:ea:47:cc:03:be:
bc:11:4e:6d:33:08:f5:a7:8e:ba:3e:81:cd:e4:53:
6b:da:f1:dd:22:92:0b:29:72:11:5f:b7:41:27:49:
02:15:59:48:d9:3f:da:b6:fb:7c:a2:6e:7e:3c:93:
d4:86:d2:31:45:bf:45:86:bb:dc:40:36:e4:e6:be:
a6:8f:54:c1:ee:56:a3:ac:ce:d8:7c:aa:b6:86:37:
be:15:66:cd:b4:08:01:72:bc:66:19:8f:e8:d2:fa:
f6:cf:7f:06:0f:ba:dd:8b:2e:f1:e7:16:dc:69:2d:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8C:79:5D:9A:8E:13:6E:06:F7:17:99:91:C9:AE:86:CF:C8:14:B4
X509v3 Authority Key Identifier:
keyid:28:1E:95:3D:AE:71:72:80:A1:6E:4B:C5:6E:41:35:2E:84:76:3C:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KB6VPa5xcoChbkvFbkE1LoR2PLw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/KB6VPa5xcoChbkvFbkE1LoR2PLw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:28:90:11:ff:1a:17:41:6e:3b:5f:cb:e3:ff:e4:2e:9b:a6:
ac:ca:c2:89:53:61:df:b0:1a:59:d5:a0:d4:92:e9:26:0f:14:
0e:3e:f9:6f:b1:76:eb:7f:34:ac:8a:1a:1b:c6:00:cd:8d:12:
7e:fc:4e:2a:54:8e:ac:3a:b0:c1:bc:6d:fc:ee:ef:20:6f:bb:
3d:83:c1:4f:62:05:77:b2:e1:9a:f2:8b:fc:11:b3:9b:ca:38:
6a:d3:a7:8d:6c:a9:80:86:54:02:2f:f3:33:2a:16:4c:bb:08:
6d:38:e1:fc:3f:58:6a:24:09:31:ef:9c:a2:a2:e6:5a:8a:c9:
53:d7:c1:21:f6:43:46:93:76:9f:f3:11:79:3f:3a:22:56:cf:
3c:86:3e:af:33:32:cc:dc:5c:00:7a:be:4d:e5:90:88:f7:10:
70:25:79:bf:97:06:ff:25:a8:21:4e:f1:0e:bc:8f:d5:73:49:
c9:9a:d9:68:9f:6e:00:8a:16:ef:a4:61:6d:74:16:24:fa:17:
3f:11:6b:5b:b0:df:19:08:d9:7b:52:c8:5c:f3:9d:a2:15:f0:
40:c4:a1:f2:d7:f6:03:03:f0:58:22:47:1a:2e:d3:ee:38:f2:
20:36:df:01:f5:d2:dc:e4:27:c8:e2:15:97:9f:6c:fe:f0:53:
e9:87:10:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:42 2025 by rpki-client