This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
File: 6IdrUasrF3RAzUxM0uTwpZjgOBw.mft (raw, json)
Hash identifier: 4ViRrAQbZSsdnuOmELc+ssVgPKRGWCnFJ6ugg/7DOYU=
Subject key identifier: E8:91:76:EC:19:21:B9:5C:AF:5E:EE:9D:DA:57:44:6F:6A:59:38:0C
Authority key identifier: E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C
Certificate issuer: /CN=A913AE23/serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C
Certificate serial: 0131
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
Manifest number: 0127
Signing time: Tue 23 Dec 2025 03:45:43 +0000
Manifest this update: Tue 23 Dec 2025 03:45:42 +0000
Manifest next update: Tue 30 Dec 2025 03:45:42 +0000
Files and hashes: 1: 6IdrUasrF3RAzUxM0uTwpZjgOBw.crl (hash: PRakiEBVC3SCIkYMOHLV6nhzwJKndBUIjiGvr80ddl4=)
2: 20B02A7A2C6D11EF9E3D5230C4F9AE02.roa (hash: QH07aDb+fmKlDQWdj0T2NqSMHqeuEIv/QY/EnszX8xc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl
rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:45:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913AE23, serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C
Validity
Not Before: Dec 23 03:45:42 2025 GMT
Not After : Dec 30 03:45:42 2025 GMT
Subject: CN=694a1066-8ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:a9:02:fb:53:15:3b:27:c2:b2:59:d3:23:
3c:12:ee:e6:8d:32:6c:6c:21:5b:0b:e1:b4:14:2a:
e5:19:21:83:91:d2:c2:9b:44:f7:79:94:f7:96:a8:
71:79:9e:cc:d7:da:f9:14:3c:5c:eb:df:e8:3b:91:
0e:43:d8:a1:69:c5:8a:a9:75:ce:66:92:98:28:2c:
21:94:be:cd:02:8a:c7:45:54:8b:cb:69:c1:31:78:
4d:39:e3:07:39:fa:e3:2a:d0:6f:3c:d8:d2:a5:a8:
ec:35:40:b2:ee:33:63:16:3b:86:8a:49:78:c6:dc:
d3:6d:48:33:cf:98:5c:e5:13:00:af:31:a4:06:b2:
2f:ab:d4:6a:48:9b:b0:9b:15:4c:d6:46:17:7e:82:
cb:6b:df:f9:5b:69:91:51:91:2f:c7:69:f8:00:5c:
4e:14:99:65:af:b2:7a:e1:fb:47:11:39:f1:ec:6b:
40:4e:5b:bf:00:61:36:f5:ae:27:dd:3d:21:5c:c2:
b0:2e:9b:fc:0a:b0:90:d2:da:65:50:da:13:4e:d8:
aa:5b:88:17:2c:07:94:f4:c3:97:3a:5d:91:10:52:
c5:dd:ff:0c:c0:87:dc:de:6f:70:e7:91:3f:3f:04:
bc:15:79:e9:d5:de:0f:56:fb:a5:46:e9:65:61:95:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:91:76:EC:19:21:B9:5C:AF:5E:EE:9D:DA:57:44:6F:6A:59:38:0C
X509v3 Authority Key Identifier:
keyid:E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:8b:b5:46:e5:b5:e1:6b:47:4a:9b:97:8d:4a:66:50:e4:8e:
03:39:32:1c:32:15:7c:e9:ea:11:78:1b:49:e8:5c:60:c4:67:
1c:fe:19:07:03:d4:60:e8:21:e4:53:65:56:47:cb:f1:d6:a6:
fb:23:b3:b0:9c:6e:15:59:34:46:b7:47:23:82:c1:be:c1:b3:
4a:0a:50:f4:dd:48:bc:f0:e6:1d:2a:13:6d:75:e3:11:9b:b8:
66:7a:50:70:fa:f9:68:0a:86:9e:81:70:fa:82:64:f4:79:69:
cc:4d:bc:49:ef:41:03:31:85:e0:34:1a:70:11:34:84:9f:a7:
f3:15:af:43:e6:6c:b8:67:1b:8a:e6:34:33:44:e7:d2:8c:21:
e6:de:6f:7e:88:43:b1:64:58:e1:6e:a1:9e:97:44:bc:b0:3b:
6e:3d:d3:d3:65:75:72:8a:8d:b3:e8:cc:94:5f:c5:62:31:8f:
4e:92:ce:6e:18:ce:58:1c:57:05:cf:b2:20:64:4a:4f:58:80:
7d:48:9e:2c:fb:38:1a:7d:cd:1e:be:fb:e7:a6:00:1b:83:93:
0c:69:ac:e6:8e:94:2b:17:f2:f9:db:36:1e:d9:56:99:e2:3d:
28:b0:34:95:e1:13:92:c2:db:53:d6:42:30:ee:19:0e:6c:56:
09:27:97:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:33:13 2025 by rpki-client