This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json)
Hash identifier: Vx6gpGalZ/6jGCfcNi4crtlpVz5JQYVpwqcldm5jWHo=
Subject key identifier: AB:43:89:68:36:25:D0:A7:DF:5E:0A:E5:CD:43:70:20:4C:CE:4E:C8
Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Certificate serial: 06E0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
Manifest number: 06DC
Signing time: Mon 22 Dec 2025 21:16:54 +0000
Manifest this update: Mon 22 Dec 2025 21:16:53 +0000
Manifest next update: Mon 29 Dec 2025 21:16:53 +0000
Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: 4EWou2/6YMfdLt6F9U+/V6T2+uFgK0vN7xQBOQaL6a0=)
2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: QJpUBqNgws3PM1RQ/YpxcOLuHjSbFEKESqjd/lkWkNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:16:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760 (0x6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Validity
Not Before: Dec 22 21:16:53 2025 GMT
Not After : Dec 29 21:16:53 2025 GMT
Subject: CN=6949b546-34c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:cf:03:14:e2:80:55:9d:05:e8:4c:9b:b0:
b5:d8:20:62:23:c1:19:d1:cd:c9:76:15:ea:09:f2:
64:69:16:9c:f3:ad:fb:e3:51:4b:6b:c3:ff:9d:29:
5d:a8:fe:81:c2:c9:eb:f7:f0:8c:10:9d:ef:af:a9:
de:f6:ff:01:27:f0:ca:b6:c5:0b:82:91:ec:28:f8:
98:35:64:f7:e3:14:8f:73:ac:8f:6f:2d:3e:b9:52:
c8:8f:05:eb:81:d6:b9:92:d9:e9:a1:7a:3a:06:09:
75:fa:4f:0a:a8:ff:8b:fe:a6:a1:58:38:82:2d:24:
0e:85:34:f8:66:4d:11:ed:ee:06:d7:10:b5:ae:ff:
60:1d:be:67:04:1a:23:10:6f:ef:25:fa:da:50:1c:
04:17:38:07:d4:92:b9:57:f8:38:b7:5c:82:a6:99:
18:eb:8d:bb:00:d4:26:9c:b4:ca:ff:8e:df:94:35:
4f:21:d2:97:bc:47:c3:d6:e6:e9:a3:e7:7e:e1:4c:
c5:61:19:4f:80:ab:4d:16:7a:d4:13:89:d9:4b:53:
a1:17:85:70:b5:09:d3:d5:9d:5a:65:74:3f:cb:b3:
21:69:fe:09:ba:8b:5a:08:30:08:2f:da:df:a7:6b:
ae:45:45:3f:36:60:11:0c:e2:e6:db:67:e4:68:20:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:43:89:68:36:25:D0:A7:DF:5E:0A:E5:CD:43:70:20:4C:CE:4E:C8
X509v3 Authority Key Identifier:
keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7d:19:3f:0f:37:cd:95:3e:55:1b:f1:b4:d5:a0:66:c5:a7:
08:ed:2e:39:da:60:84:fd:27:ae:ee:f4:77:51:e3:8d:da:ae:
7e:1c:30:0e:b9:80:bd:37:c8:1d:a2:c7:30:83:3e:f8:2f:4b:
4b:a7:07:cf:ef:bc:37:cd:3e:69:f7:fb:55:8c:cf:97:c5:c5:
e4:25:6c:02:e7:5c:3e:db:b6:26:7e:f5:ff:a8:45:8c:58:18:
b2:39:5d:ea:06:d1:d7:11:67:d3:56:38:b6:bc:63:33:20:c7:
0e:87:4f:d8:38:61:70:d4:a0:07:ab:5c:1b:93:73:72:f7:01:
5f:eb:3a:e1:98:a1:29:3a:34:78:de:d0:d6:ca:61:bd:3b:58:
44:dc:e9:4a:31:7d:f4:d3:19:13:b7:19:0a:82:66:63:3d:96:
f7:7b:98:8b:5d:85:01:9a:23:1f:95:55:51:b3:ce:cd:ac:db:
e5:bf:b0:3e:22:e9:57:e7:b7:f4:ca:54:1b:54:22:a4:d1:ca:
ff:f7:b7:f2:a1:e1:e4:ff:fe:1f:65:fe:93:bb:83:3b:d8:40:
11:65:52:33:29:5a:d8:e1:df:a5:d6:f0:a5:44:dc:2a:36:60:
e7:8f:85:40:b2:ac:c9:9c:f3:23:64:a9:c5:ea:2e:3d:50:11:
1c:ce:d8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 12:33:42 2025 by rpki-client