This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
File: d6E036eiOU7SRHU58T_kqNHgVsk.mft (raw, json)
Hash identifier: q25SrHER+35EhOna0xsJY+ApwXzJLTLdePh0p2CSrfQ=
Subject key identifier: 49:14:66:53:33:DB:D2:2B:D7:B7:3D:2F:A0:AD:DE:A9:20:BF:83:82
Authority key identifier: 77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9
Certificate issuer: /CN=A915A821/serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
Certificate serial: 0ABF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
Manifest number: 0AB9
Signing time: Mon 22 Dec 2025 18:56:06 +0000
Manifest this update: Mon 22 Dec 2025 18:56:05 +0000
Manifest next update: Mon 29 Dec 2025 18:56:05 +0000
Files and hashes: 1: d6E036eiOU7SRHU58T_kqNHgVsk.crl (hash: l7UKzU3CW5tHh5r19pEqZYKPAmum2eehY4ga//wfdiU=)
2: 4B2AAC20660211EA83A76342C4F9AE02.roa (hash: VubdDr6jpnctpYE2M5QsaGv87QGAE8y0LNTwoL81fa8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl
rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2751 (0xabf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A821, serialNumber=77A134DFA7A2394ED2447539F13FE4A8D1E056C9
Validity
Not Before: Dec 22 18:56:05 2025 GMT
Not After : Dec 29 18:56:05 2025 GMT
Subject: CN=69499445-70cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:26:a8:c7:94:fb:2b:32:d0:71:e6:26:e8:
6e:25:3e:8d:87:2f:d0:7d:68:0b:7d:e2:a1:f8:ab:
e1:cc:a9:4d:d5:b1:ef:8c:bb:96:cd:a3:aa:62:f2:
e6:34:c6:6b:f9:1a:03:96:39:2b:6a:e3:fd:a6:47:
0e:ce:bc:62:b1:d7:53:3e:cb:10:b9:1e:18:6e:3b:
91:32:6b:73:6f:f8:9c:a8:b8:3b:0d:01:e3:50:ea:
21:42:a1:57:e5:a2:62:0c:c2:49:ca:58:ac:76:38:
58:e3:77:19:59:09:e7:78:5d:d2:13:3b:17:cb:57:
d6:69:5c:62:88:71:b1:4b:0b:a4:ee:71:a6:8e:9e:
ac:96:a5:f5:01:16:fc:a3:0a:67:df:a1:43:ae:8a:
1d:76:3e:fc:e6:d6:89:55:17:08:3c:10:1d:16:00:
6b:ea:db:64:27:df:07:bd:bf:7d:81:b6:57:a3:79:
39:a3:41:9f:c7:eb:0a:e0:1b:79:ee:68:af:a6:29:
b3:9b:86:85:0d:d9:89:5a:5d:a0:13:92:77:d9:14:
50:ce:63:40:46:31:0a:5d:0a:fa:b9:64:b8:68:89:
c5:50:d2:f5:32:d3:0e:27:ac:ff:f7:da:8a:5b:8f:
df:1e:10:0c:18:c6:a8:0d:31:f6:dd:c1:0e:5b:9e:
58:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:14:66:53:33:DB:D2:2B:D7:B7:3D:2F:A0:AD:DE:A9:20:BF:83:82
X509v3 Authority Key Identifier:
keyid:77:A1:34:DF:A7:A2:39:4E:D2:44:75:39:F1:3F:E4:A8:D1:E0:56:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6E036eiOU7SRHU58T_kqNHgVsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A821/239BFC64660111EABEEA0741C4F9AE02/d6E036eiOU7SRHU58T_kqNHgVsk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:95:0f:43:ba:a9:51:28:cf:36:88:eb:61:13:4d:40:06:4d:
08:5f:23:82:d2:2e:1e:cc:16:34:f3:81:7e:aa:dd:8e:c9:9b:
2e:6d:1c:48:65:79:6f:87:1f:4f:9c:47:bf:13:9a:a7:59:91:
e9:e5:9b:b3:9d:36:91:12:07:4c:24:e7:fa:ae:8a:73:54:e7:
36:6d:91:c6:e7:14:10:e8:6e:ed:17:a7:e4:a5:9d:99:90:d8:
bc:fb:a6:7f:cb:d4:a3:4d:a0:ed:4c:a1:af:ab:02:54:aa:b2:
00:6b:d5:49:ca:a6:0e:a7:1f:93:ff:48:23:a3:dc:59:18:fd:
e7:21:b4:15:54:1b:56:e6:f8:eb:68:ca:26:b0:ea:4a:68:e2:
76:cf:1e:a2:e4:c1:07:3d:15:34:3a:1b:84:e5:7c:b0:50:ef:
a6:fd:c3:3c:bf:34:68:f5:c2:3a:0e:6c:12:e9:f8:a5:8b:0c:
50:c2:c4:91:56:3a:ec:07:ef:c8:c8:99:2a:d6:3d:ee:32:2e:
9c:f2:b1:fa:93:59:9e:c7:78:f7:5c:63:9d:53:ae:23:6b:f7:
b9:55:11:6a:44:88:39:86:02:c8:5a:a5:b1:76:5f:ad:18:a3:
a9:cb:62:95:f2:41:f0:c5:b4:6e:de:c5:b8:44:9b:28:40:5b:
1b:dc:03:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:34 2025 by rpki-client