This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json)
Hash identifier: LXESfYYLGffGQ932TbCovPm3Brk6ScESkFnulcI0tmU=
Subject key identifier: AC:06:F2:08:5A:40:78:10:12:42:8F:67:95:14:3E:DE:BB:E2:5C:03
Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Certificate serial: 0D63
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
Manifest number: 0D58
Signing time: Wed 10 Dec 2025 17:20:54 +0000
Manifest this update: Wed 10 Dec 2025 17:20:54 +0000
Manifest next update: Wed 17 Dec 2025 17:20:54 +0000
Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: prBibkWpjIGTOBteXID75PtHFqMklqEWdefyW6T6sZs=)
2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 17:20:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3427 (0xd63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A
Validity
Not Before: Dec 10 17:20:54 2025 GMT
Not After : Dec 17 17:20:54 2025 GMT
Subject: CN=6939abf6-5599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c0:43:e4:38:a3:02:5e:15:71:ab:9a:08:e8:
9a:8d:c8:cd:4c:3a:8c:5d:20:16:26:e4:c3:1c:b9:
fd:d1:c4:89:11:a3:8c:50:fe:ec:07:c3:c1:36:eb:
c9:0a:31:27:15:41:6b:b8:aa:12:d4:cd:67:8d:22:
3b:2d:59:d6:14:94:e7:a8:4c:66:59:06:79:e9:61:
99:a0:88:20:9c:c0:d8:d4:94:ad:a9:59:5d:7f:4a:
e7:6e:13:a0:b3:17:b2:25:0c:cc:42:92:92:8a:0b:
62:1b:5a:18:99:1d:bc:f5:a6:b3:f5:b5:8c:9e:9e:
0f:ae:b4:c5:a1:a5:1f:89:e5:8c:46:70:7f:df:78:
6f:13:49:c4:57:c5:3d:c7:85:6a:d5:4e:49:9f:44:
8f:2b:27:8d:04:a6:ae:d8:78:0a:75:c6:9f:0d:aa:
5f:e2:fc:58:25:0a:e7:cf:55:a5:81:fa:aa:9e:6a:
e0:cb:dd:ca:cf:cf:f2:14:93:a8:7d:f5:f1:19:6f:
b2:63:64:7d:a2:5d:10:4e:7f:74:43:0c:de:c5:88:
22:e7:e9:25:22:fa:e1:a3:87:d5:c7:31:08:1a:59:
36:ce:6f:eb:d1:98:a5:25:e1:fa:bc:d7:7f:ed:80:
5c:47:fa:d2:e6:84:f3:05:b4:c1:c4:12:28:cb:a4:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:06:F2:08:5A:40:78:10:12:42:8F:67:95:14:3E:DE:BB:E2:5C:03
X509v3 Authority Key Identifier:
keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:f1:ab:3c:ed:f4:c4:70:cb:bf:a9:5e:c3:e4:59:98:bb:b5:
da:16:64:54:18:43:b8:f1:c0:af:29:2b:78:31:d7:d1:60:6d:
f4:1b:e4:2c:17:dd:19:7e:55:14:b1:2a:ad:82:0c:2b:9d:e7:
88:fd:2c:84:1a:59:3f:a8:37:a4:24:45:a2:3a:95:61:1d:ca:
fc:7f:98:45:75:c0:a1:4d:a3:d0:1e:4a:7d:e7:72:0e:2a:15:
8e:f3:cb:cf:af:fa:d5:90:9c:4f:07:79:0b:a1:5f:1d:e7:7d:
5c:ba:92:bb:be:64:5c:43:cf:bb:c0:09:68:00:e7:d2:11:4a:
21:9e:1e:f7:40:e7:10:06:ed:3c:ac:a7:3f:42:9b:c0:d6:3f:
72:6f:a9:d7:22:a9:90:9f:c7:59:d9:08:90:9a:f5:61:ca:48:
48:25:7c:32:92:a0:d8:3c:22:76:8c:93:dd:a5:6d:91:41:18:
e8:45:d4:41:9c:f3:2b:da:a1:5b:55:40:a1:d8:f0:01:f4:34:
dd:c6:de:42:3a:af:a2:ed:2e:d5:02:04:c5:f6:b1:fe:0a:ef:
62:47:9b:d2:8f:ac:53:05:09:4d:46:04:fa:71:ed:59:f4:bd:
28:ba:b7:e9:19:66:a8:04:43:35:26:a8:42:a0:6c:ff:26:3e:
38:06:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 10:14:16 2025 by rpki-client