This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
File: --G6XF5MRXTo6VEiWGdWCd9Ba7c.mft (raw, json)
Hash identifier: CVem9Zms2dAA7ONEKK1SI5gGvojaPSkPwqYM8S+Bsew=
Subject key identifier: 81:94:D9:43:8A:5E:81:42:08:72:53:6D:A3:F7:71:DF:2B:1E:B6:93
Authority key identifier: FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7
Certificate issuer: /CN=A9172506/serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
Manifest number: E7
Signing time: Wed 03 Dec 2025 03:49:22 +0000
Manifest this update: Wed 03 Dec 2025 03:49:21 +0000
Manifest next update: Wed 10 Dec 2025 03:49:21 +0000
Files and hashes: 1: --G6XF5MRXTo6VEiWGdWCd9Ba7c.crl (hash: b+t8fhFIve9+zOlpG8A6sLWaFt5bOBIAfpH0r0ZUaAg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl
rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172506, serialNumber=FBE1BA5C5E4C4574E8E9512258675609DF416BB7
Validity
Not Before: Dec 3 03:49:21 2025 GMT
Not After : Dec 10 03:49:21 2025 GMT
Subject: CN=692fb342-8ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:44:d5:5f:e1:50:03:78:1d:23:d1:a2:e4:
56:d1:99:82:31:2e:83:c7:ff:46:a7:13:b5:ef:1f:
ce:4d:66:62:06:18:ab:2d:c7:cb:b2:40:11:c3:ed:
22:63:d9:35:62:fb:20:b2:0a:28:8b:9c:c6:75:bc:
60:f9:d1:dc:f3:01:d3:85:b1:8d:3c:e0:85:35:03:
f6:67:64:8f:a0:94:6e:eb:80:ef:11:fc:67:e5:a6:
0f:07:04:ed:60:26:a7:e3:6c:8b:f3:ba:2a:02:18:
19:ab:ca:68:0f:36:c7:24:11:d9:6e:f3:81:77:9a:
14:a7:bf:05:f8:06:80:dd:28:b2:63:a9:28:3d:0c:
f2:42:7d:98:03:d2:0a:2e:d7:ce:37:ea:6d:d4:32:
0a:b3:44:28:b4:e2:2c:02:97:79:67:66:d0:3c:d1:
12:aa:b1:23:8a:35:e7:4e:a5:c0:02:db:d5:f8:5f:
9e:45:87:c4:8f:48:0a:66:d8:97:f0:ed:be:58:48:
32:9b:03:c5:1a:02:d9:ef:f0:59:43:a3:b0:60:38:
18:7b:99:5b:e9:86:76:64:ed:35:5e:f9:f5:a7:f5:
be:ed:f5:c5:2f:68:a3:76:ab:55:e2:74:2e:e6:26:
63:2c:34:e3:31:44:3d:ba:80:87:54:72:1e:30:7c:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:94:D9:43:8A:5E:81:42:08:72:53:6D:A3:F7:71:DF:2B:1E:B6:93
X509v3 Authority Key Identifier:
keyid:FB:E1:BA:5C:5E:4C:45:74:E8:E9:51:22:58:67:56:09:DF:41:6B:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/--G6XF5MRXTo6VEiWGdWCd9Ba7c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/A5E4C45E6EDE11EFAAC2CB5DC4F9AE02/--G6XF5MRXTo6VEiWGdWCd9Ba7c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:b0:8b:94:3e:1a:db:ef:2f:df:a0:e3:56:15:d0:e8:25:6f:
d6:84:36:ff:e7:d2:58:d6:1c:0c:cc:4b:1d:7a:e2:58:67:bb:
57:ff:e8:1e:6a:18:7f:c6:19:5d:3d:74:3e:0d:96:bf:c8:d8:
97:31:3a:46:75:0c:e2:8d:80:1e:86:d0:db:a8:a6:d9:fe:68:
1e:f6:18:3b:6a:c6:09:5a:00:87:68:72:42:03:14:5a:d3:e4:
ae:59:1f:22:ec:26:cd:2b:1e:d9:bb:c2:ee:97:81:cc:02:14:
3c:c6:b6:3a:e0:36:ce:2b:fb:2b:3b:a5:40:3e:65:28:dd:f3:
3f:37:77:19:b1:15:98:e2:21:db:12:5c:4c:c4:5d:40:b1:37:
25:84:53:00:f4:d9:b8:fe:27:ea:a6:50:62:a8:e0:06:ef:86:
4a:71:d0:c3:64:e0:48:4a:6d:7c:16:1f:ad:8d:82:58:c7:74:
4d:30:bd:49:3d:1d:3b:d2:ad:4e:97:68:e9:ac:83:ec:f9:92:
64:97:e2:08:9d:7c:e5:68:18:1c:2c:bb:e3:b9:67:a4:eb:06:
4f:d7:f5:a7:8c:82:01:93:36:01:b1:70:8e:39:52:a7:47:10:
e3:ec:51:f9:2d:a7:0c:07:2f:1b:8f:0c:ee:1b:8a:cd:2d:18:
ae:5b:71:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI1MDYxMTAvBgNVBAUTKEZCRTFCQTVDNUU0QzQ1NzRFOEU5NTEyMjU4Njc1NjA5
REY0MTZCQjcwHhcNMjUxMjAzMDM0OTIxWhcNMjUxMjEwMDM0OTIxWjAYMRYwFAYD
VQQDEw02OTJmYjM0Mi04ZWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwWVE1V/hUAN4HSPRouRW0ZmCMS6Dx/9GpxO17x/OTWZiBhirLcfLskARw+0i
Y9k1Yvsgsgooi5zGdbxg+dHc8wHThbGNPOCFNQP2Z2SPoJRu64DvEfxn5aYPBwTt
YCan42yL87oqAhgZq8poDzbHJBHZbvOBd5oUp78F+AaA3SiyY6koPQzyQn2YA9IK
LtfON+pt1DIKs0QotOIsApd5Z2bQPNESqrEjijXnTqXAAtvV+F+eRYfEj0gKZtiX
8O2+WEgymwPFGgLZ7/BZQ6OwYDgYe5lb6YZ2ZO01Xvn1p/W+7fXFL2ijdqtV4nQu
5iZjLDTjMUQ9uoCHVHIeMHypWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGU2UOK
XoFCCHJTbaP3cd8rHraTMB8GA1UdIwQYMBaAFPvhulxeTEV06OlRIlhnVgnfQWu3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjUwNi9BNUU0QzQ1RTZF
REUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJYVG82VkVpV0dkV0NkOUJh
N2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLy0tRzZYRjVNUlhUbzZWRWlXR2RXQ2Q5QmE3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MjUwNi9BNUU0QzQ1RTZFREUxMUVGQUFDMkNCNURDNEY5QUUwMi8tLUc2WEY1TVJY
VG82VkVpV0dkV0NkOUJhN2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQASsIuUPhrb7y/foONWFdDoJW/WhDb/59JY1hwMzEsdeuJYZ7tX/+ge
ahh/xhldPXQ+DZa/yNiXMTpGdQzijYAehtDbqKbZ/mge9hg7asYJWgCHaHJCAxRa
0+SuWR8i7CbNKx7Zu8Lul4HMAhQ8xrY64DbOK/srO6VAPmUo3fM/N3cZsRWY4iHb
ElxMxF1AsTclhFMA9Nm4/ifqplBiqOAG74ZKcdDDZOBISm18Fh+tjYJYx3RNML1J
PR070q1Ol2jprIPs+ZJkl+IInXzlaBgcLLvjuWek6wZP1/WnjIIBkzYBsXCOOVKn
RxDj7FH5LacMBy8bjwzuG4rNLRiuW3Hy
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:45:58 2025 by rpki-client