This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
File: k8C6F5rKocB50zxmk_RGcBBPzZg.mft (raw, json)
Hash identifier: 6qroGmEhNeylvfHwWyV0jQjWe+0gnOf5L7MMzf6NY58=
Subject key identifier: 06:B1:A5:4E:BF:77:E6:78:45:AC:15:10:2F:C5:07:14:93:8E:17:AD
Authority key identifier: 93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98
Certificate issuer: /CN=A9111788/serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
Certificate serial: 0250
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
Manifest number: 024B
Signing time: Wed 17 Dec 2025 01:12:19 +0000
Manifest this update: Wed 17 Dec 2025 01:12:19 +0000
Manifest next update: Wed 24 Dec 2025 01:12:19 +0000
Files and hashes: 1: k8C6F5rKocB50zxmk_RGcBBPzZg.crl (hash: uySoAMaVYap+7gyIs4kV59yvX3Yqf8kuirMPD8YI55o=)
2: 6F57F77659AF11EDB5683587C4F9AE02.roa (hash: mvL+Nx41RdHY+v59BWP5LMWkyChMsslC0cZzMH9xusc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl
rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 01:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 592 (0x250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111788, serialNumber=93C0BA179ACAA1C079D33C6693F44670104FCD98
Validity
Not Before: Dec 17 01:12:19 2025 GMT
Not After : Dec 24 01:12:19 2025 GMT
Subject: CN=69420373-b5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bf:df:88:32:67:52:86:6a:91:49:53:9f:1b:
f9:6f:0c:ff:99:35:c7:26:1b:ba:57:6e:51:ca:50:
63:b7:39:41:7e:4b:40:fa:4d:70:37:b1:a9:91:d2:
5a:e9:e9:05:bf:bb:17:20:73:89:c9:58:d1:1d:75:
0d:4b:e8:bd:a1:00:85:e8:14:d0:2f:93:94:26:94:
d8:89:71:81:02:dd:0c:77:9a:fe:3f:be:eb:19:83:
aa:e1:66:a0:55:a5:44:c0:93:68:6c:86:55:8f:ab:
76:32:2d:b8:99:c1:3b:e5:0a:94:8e:64:22:b3:e5:
46:ab:cc:76:a1:4b:18:9b:1c:51:b7:4c:3c:5e:49:
58:ec:b0:41:da:21:d3:92:63:ea:3a:bf:b6:22:09:
14:e0:d4:d5:80:0b:48:f6:2c:97:1f:c2:7e:9a:da:
a6:18:3a:fd:0e:80:db:dd:a5:1f:0e:51:19:69:85:
d2:a1:ef:cb:e4:9e:3a:51:1c:3f:8b:2f:b0:45:4d:
13:51:59:1b:c4:d4:5b:8f:b4:62:df:7e:ef:31:be:
e4:a2:ed:f9:e1:24:de:87:18:f3:8f:92:00:c9:92:
ba:55:0c:00:93:33:45:d5:18:c2:0e:7f:9a:d4:c3:
fb:87:c4:ac:88:6b:99:d2:3d:6f:d9:3c:27:7f:18:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B1:A5:4E:BF:77:E6:78:45:AC:15:10:2F:C5:07:14:93:8E:17:AD
X509v3 Authority Key Identifier:
keyid:93:C0:BA:17:9A:CA:A1:C0:79:D3:3C:66:93:F4:46:70:10:4F:CD:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8C6F5rKocB50zxmk_RGcBBPzZg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111788/3D0515A059AB11ED8EEBA456C4F9AE02/k8C6F5rKocB50zxmk_RGcBBPzZg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:32:ca:78:63:9f:bb:0a:8e:8f:2f:ab:9f:32:19:58:59:9f:
2a:13:40:cc:45:52:99:c8:bd:73:94:3b:3d:98:2d:2f:23:42:
52:c2:95:94:50:49:ab:87:a1:26:39:1e:c3:f4:39:47:0f:0a:
78:cb:bd:ab:3c:7d:f3:78:91:c1:07:b0:97:44:89:fb:95:b0:
98:77:19:a0:63:06:2d:be:51:9a:76:ca:e9:15:b3:c0:94:f1:
f4:48:21:10:7e:82:ee:76:f2:43:81:d6:43:54:4b:35:b4:c5:
06:cf:0e:f9:63:66:3b:b6:c3:5c:98:54:97:da:da:ce:3e:e8:
a1:30:a9:7c:9f:84:f1:54:12:6b:ba:59:4e:2f:1b:03:21:b5:
d7:f9:e4:56:bc:f4:fc:00:96:8c:f5:a1:cb:ba:24:aa:8a:9c:
78:cc:97:61:fa:50:fb:1e:97:3a:61:9f:dd:29:f6:68:68:af:
d8:94:65:22:54:b1:a7:84:19:14:58:61:7b:97:ea:9e:b1:60:
1d:39:19:87:e2:5d:d9:ab:fa:5e:ec:b3:b5:3a:ac:3a:c1:bc:
6e:ba:2b:05:f0:ad:90:31:39:09:14:61:41:71:d6:19:1c:73:
5c:47:68:ce:fc:60:5c:2e:c3:d0:ef:0a:e6:44:a9:b2:cf:47:
95:0a:d2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 10:44:25 2025 by rpki-client