This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
File: 6tNqfTCwZhVrgDAlqqpf-SetdcI.mft (raw, json)
Hash identifier: Xx8M8Qa17B3dU8jTngcdiB9k6utBaGavgvBtENoADJM=
Subject key identifier: 4B:4D:87:A5:B6:9D:4A:35:7F:9D:15:BE:7B:B0:53:53:EA:90:5A:E8
Authority key identifier: EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2
Certificate issuer: /CN=A91722C3/serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2
Certificate serial: 16DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
Manifest number: 16D6
Signing time: Mon 22 Dec 2025 16:24:25 +0000
Manifest this update: Mon 22 Dec 2025 16:24:25 +0000
Manifest next update: Mon 29 Dec 2025 16:24:25 +0000
Files and hashes: 1: 6tNqfTCwZhVrgDAlqqpf-SetdcI.crl (hash: 9/W24G9mfjfHTAMeU+dxbpp/Kwr6pWA1ODzTqjABub8=)
2: 3B7EBA5C7D7411EBAEFB906AC4F9AE02.roa (hash: mV+/VnB1dymZjoP35PFaMEUl6rHyBnmoFDTjGl58OCM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl
rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:24:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5854 (0x16de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91722C3, serialNumber=EAD36A7D30B066156B803025AAAA5FF927AD75C2
Validity
Not Before: Dec 22 16:24:25 2025 GMT
Not After : Dec 29 16:24:25 2025 GMT
Subject: CN=694970b9-768e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:f0:bb:5a:c8:5c:89:6b:7d:ed:ca:8f:dd:
22:0f:1d:5f:34:0a:43:62:bd:88:93:1f:27:98:97:
bb:27:8f:12:46:bb:0a:eb:26:e7:5e:89:cc:70:c4:
86:cc:6e:b2:6c:d0:d2:04:40:f7:59:3a:2b:2a:ae:
ec:60:9e:9e:80:9b:f1:9c:8f:8d:fb:74:c4:16:fa:
93:50:c5:f1:09:46:c4:24:c9:54:0a:ab:08:7f:28:
ba:af:71:46:53:65:73:2a:62:70:76:9d:bb:b2:a8:
05:27:3c:1d:3a:dd:86:f8:32:ee:7a:9b:2d:ce:96:
a2:f1:26:33:ba:54:3a:aa:49:d7:09:99:72:2f:25:
be:e2:ff:68:ad:6a:4e:88:c3:9c:fc:1c:5a:29:ee:
a7:8e:23:db:21:7f:04:c3:7e:42:db:15:fa:4c:af:
56:33:71:8c:08:59:5c:ff:c8:2d:70:15:79:47:ae:
f4:4a:e9:b1:e9:7c:a7:03:1c:da:82:aa:79:79:76:
79:8d:87:be:0b:68:cb:8e:87:31:42:c0:19:4f:16:
ad:9e:14:ac:7f:1c:b4:b5:0a:e0:1b:ff:75:05:8c:
e8:8c:4c:6f:37:27:4c:45:75:cb:63:94:ad:c4:3f:
cc:8e:96:cf:5f:77:84:04:26:8d:83:55:98:49:b3:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:87:A5:B6:9D:4A:35:7F:9D:15:BE:7B:B0:53:53:EA:90:5A:E8
X509v3 Authority Key Identifier:
keyid:EA:D3:6A:7D:30:B0:66:15:6B:80:30:25:AA:AA:5F:F9:27:AD:75:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tNqfTCwZhVrgDAlqqpf-SetdcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91722C3/1523D2E407AB11E8AE5DFE64C4F9AE02/6tNqfTCwZhVrgDAlqqpf-SetdcI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:3a:be:15:1d:16:dc:09:45:50:f8:3d:53:b7:57:ef:6b:60:
3d:70:d6:72:90:b5:21:f5:ab:94:e4:5c:c0:70:4b:b4:4e:a2:
23:72:63:90:30:e1:17:6f:d1:92:20:c9:83:f8:8f:b6:ef:ea:
02:7e:8c:d2:35:a4:02:6c:f4:a8:fc:ca:0f:c2:03:01:83:58:
da:e8:cb:5a:36:40:af:27:12:2f:40:87:9f:da:4b:40:d1:0e:
26:62:82:04:40:74:92:85:d3:3b:aa:a9:bf:97:81:3d:c6:da:
3d:8f:91:cc:22:e4:d1:85:7a:c5:c6:c1:52:fc:0e:02:c2:ea:
64:1e:69:63:5b:8e:c4:21:4a:a8:50:4c:12:4f:fe:45:52:6d:
12:04:8a:27:ec:9b:8e:d3:45:a6:93:90:28:00:25:d3:c1:29:
5b:20:65:23:e8:aa:99:c3:8f:08:96:67:9a:71:57:b0:08:77:
51:c6:42:1c:20:e5:01:3a:59:87:fc:fd:09:2f:fc:26:2c:f6:
e4:9d:33:4b:20:46:0d:60:c2:2e:8a:9a:61:20:ae:4d:e0:de:
b3:14:aa:26:ce:09:7d:a2:fb:94:9d:0c:6c:ce:73:48:c7:d1:
98:90:a2:0b:65:38:8d:4a:e0:04:40:3c:18:1e:c2:20:bb:b8:
49:a4:43:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzIyQzMxMTAvBgNVBAUTKEVBRDM2QTdEMzBCMDY2MTU2QjgwMzAyNUFBQUE1RkY5
MjdBRDc1QzIwHhcNMjUxMjIyMTYyNDI1WhcNMjUxMjI5MTYyNDI1WjAYMRYwFAYD
VQQDDA02OTQ5NzBiOS03NjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9rwu1rIXIlrfe3Kj90iDx1fNApDYr2Ikx8nmJe7J48SRrsK6ybnXonMcMSG
zG6ybNDSBED3WTorKq7sYJ6egJvxnI+N+3TEFvqTUMXxCUbEJMlUCqsIfyi6r3FG
U2VzKmJwdp27sqgFJzwdOt2G+DLuepstzpai8SYzulQ6qknXCZlyLyW+4v9orWpO
iMOc/BxaKe6njiPbIX8Ew35C2xX6TK9WM3GMCFlc/8gtcBV5R670Sumx6XynAxza
gqp5eXZ5jYe+C2jLjocxQsAZTxatnhSsfxy0tQrgG/91BYzojExvNydMRXXLY5St
xD/MjpbPX3eEBCaNg1WYSbPCtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtNh6W2
nUo1f50VvnuwU1PqkFroMB8GA1UdIwQYMBaAFOrTan0wsGYVa4AwJaqqX/knrXXC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjJDMy8xNTIzRDJFNDA3
QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1poVnJnREFscXFwZi1TZXRk
Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ0TnFmVEN3WmhWcmdEQWxxcXBmLVNldGRjSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjJDMy8xNTIzRDJFNDA3QUIxMUU4QUU1REZFNjRDNEY5QUUwMi82dE5xZlRDd1po
VnJnREFscXFwZi1TZXRkY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZOr4VHRbcCUVQ+D1Tt1fva2A9cNZykLUh9auU5FzAcEu0TqIjcmOQ
MOEXb9GSIMmD+I+27+oCfozSNaQCbPSo/MoPwgMBg1ja6MtaNkCvJxIvQIef2ktA
0Q4mYoIEQHSShdM7qqm/l4E9xto9j5HMIuTRhXrFxsFS/A4CwupkHmljW47EIUqo
UEwST/5FUm0SBIon7JuO00Wmk5AoACXTwSlbIGUj6KqZw48IlmeacVewCHdRxkIc
IOUBOlmH/P0JL/wmLPbknTNLIEYNYMIuipphIK5N4N6zFKomzgl9ovuUnQxsznNI
x9GYkKILZTiNSuAEQDwYHsIgu7hJpEPw
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:01 2025 by rpki-client