This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
File: 6qSDu71coOErPsD25wxbqq40VSs.mft (raw, json)
Hash identifier: O/BpLKIYliaXtoOF1t2Qy7quzBl7gHeQI1kmOgHM01E=
Subject key identifier: 30:19:0F:D3:79:D8:B7:68:C7:7C:11:20:AC:52:3C:78:6E:63:40:5E
Authority key identifier: EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
Certificate issuer: /CN=A914BAA2/serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Certificate serial: A9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
Manifest number: A1
Signing time: Tue 23 Dec 2025 05:25:05 +0000
Manifest this update: Tue 23 Dec 2025 05:25:05 +0000
Manifest next update: Tue 30 Dec 2025 05:25:05 +0000
Files and hashes: 1: 6qSDu71coOErPsD25wxbqq40VSs.crl (hash: FuhYs4hz73f+hm3mPNC8OMm1dGmCY0FIvWH+FTdeTXw=)
2: 535D1F52069511F090414823C4F9AE02.roa (hash: Z1otMQWN0CbTaPhw5EvbwRe+YB3GZZkedSXo8XkS78Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl
rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BAA2, serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B
Validity
Not Before: Dec 23 05:25:05 2025 GMT
Not After : Dec 30 05:25:05 2025 GMT
Subject: CN=694a27b1-ad8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:0e:b2:46:ab:3c:c8:d9:ec:9a:44:46:0f:
2a:61:1d:d5:2a:df:a9:60:3a:e2:67:cb:77:8b:75:
2e:81:9d:27:67:39:a8:2c:98:ba:b1:e5:38:ad:58:
5d:24:b2:ef:22:fb:0c:26:68:a7:a9:46:64:dd:74:
7e:21:09:9c:c8:de:2e:e4:d2:ae:76:f0:8e:a7:ca:
dd:95:fb:94:fc:64:d4:ff:04:02:87:09:d4:1c:dc:
89:24:ef:20:df:24:d8:a4:d1:5c:7f:ed:3a:98:c7:
f1:7b:76:7f:db:ee:81:03:26:5d:e1:7e:00:73:bc:
27:e5:5b:00:df:e8:74:bf:f1:dc:d5:0a:54:17:e4:
fc:4d:b4:72:64:d0:d9:00:01:d8:fc:2a:d1:67:a8:
2b:e6:3b:bb:17:c1:9f:7c:0c:25:ff:8e:78:ea:ab:
03:eb:48:c6:70:0e:31:7e:03:47:81:50:5e:8f:1d:
1a:12:ef:f1:b8:e4:72:0f:a9:9f:c2:8f:77:04:03:
6d:f8:5b:04:61:99:63:a4:6a:f3:db:4f:82:d4:90:
7a:d3:11:15:38:44:d9:7e:3a:79:58:83:aa:f1:1a:
23:cd:e8:f7:72:f2:50:9b:14:d5:c6:ee:2a:11:78:
a1:8f:08:cf:bc:1d:59:16:a4:0b:b7:e0:8f:b7:fb:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:19:0F:D3:79:D8:B7:68:C7:7C:11:20:AC:52:3C:78:6E:63:40:5E
X509v3 Authority Key Identifier:
keyid:EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:41:54:93:bd:ef:9a:17:e6:10:4c:76:ec:b9:7f:e9:11:94:
63:79:0f:28:ea:5c:be:b9:df:cf:bf:1c:36:d1:28:be:ed:c4:
91:b3:67:fc:6a:ac:54:ea:de:98:b4:be:73:d9:28:5d:1b:4f:
d4:d4:c4:b3:a2:48:83:94:c0:50:8b:22:50:c9:59:8b:8d:86:
a3:77:9d:d6:d1:bc:22:2d:ae:be:0a:e5:66:6f:e0:99:59:5e:
ec:e3:59:64:47:bd:73:85:85:45:fc:4a:24:eb:48:1a:6a:75:
29:97:d9:e0:52:e9:58:00:de:2b:4c:0f:11:85:e5:9f:be:16:
43:af:42:34:2d:67:8a:21:2c:f1:02:80:7c:9a:8d:07:3e:34:
f3:f2:57:28:ff:ca:1e:ab:88:02:68:71:15:1c:ee:56:e4:5a:
0b:be:5d:e0:a8:a8:5b:da:cc:8e:1f:a7:ce:e2:4a:a8:bc:dd:
02:3b:62:ec:14:ec:1c:72:ef:6e:5c:25:b5:28:e6:ad:b9:4e:
64:2f:e3:ed:51:9e:5f:ce:2a:b1:70:c1:a3:d1:2b:75:6d:a3:
34:58:22:b4:5a:f0:78:71:fc:58:84:ff:66:60:5e:a2:1b:05:
b4:dc:2e:b9:c6:56:21:63:4c:47:44:37:c7:43:40:26:af:5e:
b6:a8:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:47 2025 by rpki-client