This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
File: g6pYiXoVH0rLc4TwtV8R7Z164X8.mft (raw, json)
Hash identifier: VLMcfQTkmeJtTjhQDv4NHOJRO3iEM+FepCT0gE8Vt9U=
Subject key identifier: 1F:F1:D4:C8:B2:84:30:F4:39:49:70:9F:51:F6:F1:82:09:91:58:B8
Authority key identifier: 83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F
Certificate issuer: /CN=A915B3AE/serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
Manifest number: 0153
Signing time: Wed 03 Dec 2025 02:42:09 +0000
Manifest this update: Wed 03 Dec 2025 02:42:09 +0000
Manifest next update: Wed 10 Dec 2025 02:42:09 +0000
Files and hashes: 1: g6pYiXoVH0rLc4TwtV8R7Z164X8.crl (hash: c6BFtISTstL8Lxbpzigpl1TdoiBKmpLdmflZi7gyQS4=)
2: 1AD9E28ECA9411EE9062590AC4F9AE02.roa (hash: ReL28hF+/x2h0RKcTZEQ3GcIbkXQcDw6s6esZ8caJwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl
rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 02:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B3AE, serialNumber=83AA58897A151F4ACB7384F0B55F11ED9D7AE17F
Validity
Not Before: Dec 3 02:42:09 2025 GMT
Not After : Dec 10 02:42:09 2025 GMT
Subject: CN=692fa381-f290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:74:35:71:58:b1:25:70:87:60:3d:ec:fe:
e1:08:c1:41:1c:ca:53:19:c8:1b:67:36:7c:90:70:
52:53:ac:b2:b9:cd:f2:0f:fd:96:8d:27:5f:81:d0:
47:83:72:39:d5:e0:ca:27:92:18:6f:51:38:60:a8:
1b:77:3d:69:81:3a:e2:74:27:2a:b2:76:d9:44:0d:
1e:a4:c5:6a:90:6d:51:32:f3:52:d1:e0:82:26:a5:
9b:a5:00:e2:c6:b0:b8:a6:21:54:89:07:7d:15:c5:
7b:3b:35:f4:bf:6e:29:b4:68:52:35:b3:b4:c7:7b:
c5:82:fb:dd:6b:a2:fb:77:9d:5c:f2:b3:73:40:1a:
ce:f6:ca:0c:c4:a6:8e:d2:04:17:a5:03:b7:c7:27:
85:39:e2:d7:02:f6:36:a8:7a:18:02:b9:8e:40:7d:
8e:1c:07:25:85:2c:bc:4e:54:b6:7d:e2:5e:01:1f:
9b:03:bf:40:db:32:d6:ae:a2:6a:1e:c9:99:c8:a9:
c2:82:e7:80:9c:c2:f6:b9:a7:82:d5:d7:90:c5:f6:
a6:7a:13:30:f6:8d:c9:7a:9c:fb:0e:dc:f7:63:56:
25:83:f0:a5:fd:ad:9c:cc:8d:af:22:1d:97:fe:8d:
8d:67:23:36:c2:ff:5d:04:63:38:7b:50:5e:c7:91:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F1:D4:C8:B2:84:30:F4:39:49:70:9F:51:F6:F1:82:09:91:58:B8
X509v3 Authority Key Identifier:
keyid:83:AA:58:89:7A:15:1F:4A:CB:73:84:F0:B5:5F:11:ED:9D:7A:E1:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g6pYiXoVH0rLc4TwtV8R7Z164X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/C2D054F6CA9311EEA726CC09C4F9AE02/g6pYiXoVH0rLc4TwtV8R7Z164X8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:60:b8:1e:7b:b9:f4:f3:c0:4e:4c:4c:b9:cc:ce:89:40:9e:
b3:ad:a3:f5:23:6d:72:9a:89:bd:15:e1:51:96:b7:ab:95:c7:
81:98:d8:33:30:af:1e:6b:ec:b0:c7:45:0b:87:8a:1d:81:90:
3d:5d:85:ad:b8:8d:52:a2:cb:8e:dc:b8:1d:90:2c:5a:2e:99:
d3:0e:12:3f:dc:30:4e:0d:f2:0f:8e:9c:05:e2:12:5b:e4:a3:
c9:9b:e2:89:09:40:3e:96:96:00:d0:36:c2:e5:dd:da:a9:b8:
66:08:3d:9a:f1:7b:5c:af:e1:d5:c7:77:0f:99:1b:0d:c2:16:
4c:b3:b1:25:37:f3:40:f7:c6:61:6e:1f:f7:9e:81:26:de:62:
52:2e:35:f4:96:c1:19:ef:6d:f7:a8:8b:23:57:30:7b:e4:13:
f1:58:14:f7:af:26:0d:e8:49:d2:72:6d:f8:a9:71:64:6b:bc:
b3:0f:88:cf:a0:5c:0f:75:76:a9:b7:a8:42:fc:9a:00:b5:3c:
72:eb:1e:1f:ed:0a:1c:b3:02:cd:45:a8:f5:60:b4:62:03:6d:
c9:51:41:20:f6:ac:14:43:70:e4:9b:28:0a:5c:f9:e2:7c:97:
63:06:af:9c:0a:9e:c1:35:8c:5f:85:f7:9d:af:c8:dd:94:ae:
56:47:b1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:22:48 2025 by rpki-client