This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
File: 06m0znk41yolUFSgwIW_eI6wabA.mft (raw, json)
Hash identifier: CpJD2fVL+cbg1oycUXJJDSLg0FwxRLf77lKsWjY/Mec=
Subject key identifier: E9:0D:34:BA:6C:9C:F9:72:B1:18:2D:31:1B:46:9B:CF:D4:E8:78:B9
Authority key identifier: D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0
Certificate issuer: /CN=A914331D/serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
Certificate serial: 0957
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
Manifest number: 094F
Signing time: Mon 22 Dec 2025 19:32:57 +0000
Manifest this update: Mon 22 Dec 2025 19:32:57 +0000
Manifest next update: Mon 29 Dec 2025 19:32:57 +0000
Files and hashes: 1: 06m0znk41yolUFSgwIW_eI6wabA.crl (hash: S5YS/7d/6f4ATOwfCFDsFjrMIaUZURpVoTxQcFfDolI=)
2: 425602A0AD2111EA9510AC0DC4F9AE02.roa (hash: eiGSH0P7OA/wuySnx+L4WnNP4YI49fVfK6qem5HgBnk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl
rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391 (0x957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914331D, serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
Validity
Not Before: Dec 22 19:32:57 2025 GMT
Not After : Dec 29 19:32:57 2025 GMT
Subject: CN=69499ce9-7fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:67:fc:e4:12:79:a1:e4:22:e1:77:78:12:
12:02:42:b6:eb:65:ef:29:06:f1:5e:f7:2b:b8:ad:
27:13:18:09:b0:10:3d:1d:be:3f:6c:d8:49:34:24:
87:85:d9:0d:ac:34:52:69:32:43:ed:7a:31:9e:cf:
42:0f:23:52:ba:91:b8:61:11:8a:43:80:8f:05:d6:
d4:23:0c:8e:45:13:b6:af:cc:25:91:1b:5b:db:46:
9c:14:84:b6:f2:a2:02:a6:af:92:7f:89:57:7b:1f:
e5:f8:42:79:ce:83:3c:8f:03:9a:50:df:5a:aa:b9:
2e:94:68:c3:cc:0f:95:65:0b:37:5f:3f:7a:04:e3:
24:c0:9c:42:c4:00:9c:40:0d:1f:43:e0:1f:c3:6e:
70:3a:1e:c0:14:32:c0:05:13:65:6c:c0:da:d7:69:
c4:1d:25:24:27:c1:07:02:8d:d2:d9:73:b0:a7:87:
b1:e1:67:17:5a:23:d9:ce:94:3c:bd:6e:1f:1d:b3:
07:96:e2:c8:75:50:2c:82:10:bb:f0:7e:a3:8e:ef:
fc:11:2d:e3:44:34:84:92:e0:03:b2:14:02:43:f6:
2e:9e:b4:71:c1:4a:d3:62:06:5c:b5:ae:42:7d:ad:
ab:44:3e:51:23:1b:28:76:6f:1e:a6:c1:10:f3:60:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0D:34:BA:6C:9C:F9:72:B1:18:2D:31:1B:46:9B:CF:D4:E8:78:B9
X509v3 Authority Key Identifier:
keyid:D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:9d:a5:1b:c6:7e:ce:c4:8f:72:94:f9:81:eb:a4:e2:29:fa:
54:d8:0f:f1:ef:af:27:b3:d6:59:70:01:c1:c8:2e:76:5a:dc:
c2:27:2f:d2:03:f7:13:cb:f6:ca:a7:7b:b6:60:fd:d2:e7:86:
b2:b7:37:60:25:c4:46:22:a7:a4:27:7b:db:69:47:e5:85:fb:
b7:c3:5d:fd:e4:df:a5:a9:48:a8:a3:89:55:b6:6e:57:99:06:
49:af:2c:52:23:cc:3c:a5:ad:8e:6d:95:75:7a:bd:c2:16:c0:
8c:6c:07:41:19:99:c6:a0:dd:bb:02:55:37:56:df:f5:5e:5d:
df:e6:93:e4:0e:a3:0b:2a:1e:12:cd:d7:e7:d7:25:ef:1b:b4:
18:15:60:c9:69:7f:a3:ff:62:7b:c9:e1:68:08:3b:a6:69:9a:
95:32:99:01:1e:11:b3:3a:d6:12:f1:df:2a:a5:f4:46:29:29:
bd:32:e2:45:13:9c:88:47:68:fa:eb:e6:2f:d6:03:09:c6:42:
ad:4f:b7:67:4a:9b:39:2c:4b:ff:cb:9c:f7:ce:6d:74:ad:98:
1a:19:70:5b:e1:ea:3e:47:ca:f3:9e:28:06:74:83:75:bf:88:
89:70:52:48:70:4c:59:fb:f4:82:97:85:08:6a:d9:34:9e:ed:
13:fa:fd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:08 2025 by rpki-client