This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft
File: R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft (raw, json)
Hash identifier: GNUNh+on4giao0HrGpAGbBsQkT6IM4fr8g7LAr0N2lI=
Subject key identifier: DA:54:F1:63:26:38:8D:DF:14:8D:68:42:EA:95:C3:44:0C:5E:F4:C5
Authority key identifier: 47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84
Certificate issuer: /CN=A91583E2/serialNumber=47A6190AC05C30807ED15F40921BB232DB552484
Certificate serial: 6F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft
Manifest number: 6D
Signing time: Tue 23 Dec 2025 05:50:14 +0000
Manifest this update: Tue 23 Dec 2025 05:50:14 +0000
Manifest next update: Tue 30 Dec 2025 05:50:14 +0000
Files and hashes: 1: R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl (hash: xzp16daOuxlLg4mkoaV4rI9mnFr/g3f6riyHrtKCaCE=)
2: B0E8BC383B9911F09DE90D79C4F9AE02.roa (hash: sAZrKqeMzoSTzbfqkrtyTfEKHbSYlRzZrsbcTgM/X7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl
rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111 (0x6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91583E2, serialNumber=47A6190AC05C30807ED15F40921BB232DB552484
Validity
Not Before: Dec 23 05:50:14 2025 GMT
Not After : Dec 30 05:50:14 2025 GMT
Subject: CN=694a2d96-7aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:93:70:4b:14:82:15:5c:6a:0d:b7:99:61:48:
6d:43:97:03:f7:2b:bc:79:e9:21:5d:3c:ab:d1:24:
26:2a:19:b0:b0:0a:e7:a8:97:fc:55:13:ec:ad:f2:
d9:5d:ba:b0:80:a5:93:e0:99:08:d5:f9:95:7c:c1:
95:93:e9:90:6a:77:e0:f1:e5:1f:b7:bd:d4:52:ff:
b1:39:55:61:88:6e:d7:b5:0a:5e:f5:31:7e:89:1c:
62:70:b8:1b:21:2a:9a:83:9f:a4:2a:58:7a:28:69:
89:b9:05:5b:ad:1a:e7:c5:8e:dd:e7:80:2f:eb:c2:
11:91:c6:7c:1a:b9:8e:c6:c9:45:4f:01:29:f9:92:
fc:0a:cc:4a:de:de:8f:2d:7c:e5:56:7c:e1:1a:7b:
2c:91:32:b7:8d:55:6e:6e:09:f1:4e:bc:4b:c1:df:
c9:88:35:fd:d9:e6:03:cc:1c:f0:ce:fa:4b:a3:22:
de:7e:63:de:e1:bd:a6:b5:88:72:d6:25:59:36:50:
e5:70:63:ca:0a:92:f7:e9:7b:a2:99:1c:91:2c:51:
f7:e7:0c:20:80:c4:c6:fd:d4:f3:2e:92:a8:92:be:
10:55:bf:77:fc:94:39:b0:d1:3d:6b:64:61:81:d6:
57:65:a1:1b:ad:ba:e9:cf:52:78:d6:99:fa:c9:6c:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:54:F1:63:26:38:8D:DF:14:8D:68:42:EA:95:C3:44:0C:5E:F4:C5
X509v3 Authority Key Identifier:
keyid:47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:71:1c:16:d7:a6:78:7f:3f:4e:e1:f9:37:28:59:6a:28:c2:
3c:16:6f:1c:ab:5e:9f:5a:07:a4:2a:91:41:3d:bc:8f:c0:4b:
33:dd:52:7e:fc:49:31:be:b7:c3:e2:20:88:55:d2:ad:7c:e1:
4f:f5:f6:c3:70:98:4c:d6:68:3a:b6:40:de:25:7a:db:b3:f5:
f4:0c:94:59:a5:96:eb:4c:32:ec:81:71:57:76:1b:6c:e9:3c:
38:67:1a:77:f6:38:e6:6a:2c:af:75:73:c6:61:44:22:65:0d:
06:ae:0c:63:02:a6:24:e3:18:4d:7c:07:e6:4a:ab:74:d4:d7:
45:f4:0c:c0:dc:12:69:47:0c:be:a2:9f:9b:38:65:ae:0a:8e:
35:1c:d8:3a:a3:02:97:8f:6a:63:db:4b:31:54:7d:4f:b6:73:
d0:c1:7f:9b:35:36:f4:77:d9:3f:fc:e2:e5:19:c5:5e:fe:cf:
78:77:20:61:8f:17:6b:ba:17:ec:74:10:5a:9b:39:97:17:ca:
1b:ab:a1:1c:a1:31:b4:6a:9f:49:91:fc:c1:74:8b:cc:5b:64:
61:ab:e5:95:c6:cf:e7:27:15:80:36:f0:82:0e:fa:76:3a:59:
d7:f2:0e:3b:27:ad:50:97:4b:fa:ce:58:7d:e3:ff:d6:7b:c7:
fc:77:d7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:13 2025 by rpki-client