This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json)
Hash identifier: 0HaZBxlsD2VgwOubueYkXLD2LyegpjycuTJ8MbMd9bk=
Subject key identifier: CA:09:35:20:4A:4C:19:87:49:2A:7F:E4:D5:F6:61:D5:A2:E1:16:D7
Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70
Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70
Certificate serial: 049E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
Manifest number: 049A
Signing time: Mon 22 Dec 2025 23:06:00 +0000
Manifest this update: Mon 22 Dec 2025 23:05:59 +0000
Manifest next update: Mon 29 Dec 2025 23:05:59 +0000
Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: hbnz0iZcHfmZxrDCRe4Oa+7GamECI4gsy2U5oZJtW6U=)
2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: WnBbCr/LbqKLlPeho3+8ztfmsdCgc5oHEWwkG3+ywSQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl
rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1182 (0x49e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70
Validity
Not Before: Dec 22 23:05:59 2025 GMT
Not After : Dec 29 23:05:59 2025 GMT
Subject: CN=6949ced8-a39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ba:92:da:a0:86:99:24:0b:75:05:1a:04:1e:
26:f0:f1:dd:23:cf:b4:5e:cc:0f:76:29:a2:37:c9:
29:02:3d:de:99:c8:c1:4b:13:f6:c1:c0:c7:ec:79:
4f:7b:80:95:d7:0a:a2:4e:25:76:e2:f1:46:7c:f7:
07:35:37:45:b5:97:e2:d7:90:11:8a:9c:12:46:15:
bf:46:92:7f:e7:37:1c:a9:ad:75:8e:70:a9:78:aa:
0c:ec:66:3f:94:0f:fb:1c:08:ef:19:39:d4:1b:5e:
a5:47:d8:40:79:60:5c:ab:f5:11:0c:48:c3:72:94:
61:4f:a2:72:16:79:b5:d5:7a:6d:58:b1:dc:f9:d0:
62:9b:41:d0:2a:de:46:fe:05:92:ae:25:ec:43:85:
97:1d:b0:fa:97:fe:d9:b9:cb:b0:0a:0a:ba:cd:1a:
31:3b:f8:e9:d2:35:e0:e6:32:a0:e3:09:00:1b:d2:
f0:54:f6:41:ad:3c:94:a7:8e:8a:aa:d2:9a:d5:54:
84:41:6f:7c:e2:22:80:f5:52:70:f1:52:42:d8:36:
7b:0f:f2:04:d3:b0:49:97:cd:36:8e:c2:a0:5c:3b:
fa:69:21:d4:6b:39:41:34:58:6f:14:c3:b5:b4:da:
6a:04:64:9e:f4:9c:60:82:d6:b5:70:58:55:62:21:
5b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:09:35:20:4A:4C:19:87:49:2A:7F:E4:D5:F6:61:D5:A2:E1:16:D7
X509v3 Authority Key Identifier:
keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1c:b3:6c:66:21:0a:e5:14:b6:d9:54:ea:d1:4f:e2:6d:fa:
c9:99:d7:fa:44:dd:b0:c7:fb:e7:c8:11:63:e8:76:3f:98:09:
ba:26:e3:45:39:cf:39:db:e9:8f:4c:b9:ce:73:0b:fd:ee:ea:
36:9a:7e:75:77:1a:49:30:f3:f1:6b:79:ea:99:ee:d3:fc:0a:
5f:87:f8:7c:a7:31:0c:ee:a2:12:ab:ce:12:a1:6b:bb:f4:3b:
80:46:7e:72:28:d8:d7:f2:43:5f:3c:3d:38:2a:87:fb:da:db:
5d:45:19:27:b7:e8:a7:7d:a7:6c:72:23:fd:55:72:04:e2:8c:
fc:a6:6c:3f:7a:66:c9:4f:d1:0c:27:1d:40:72:00:a1:8d:96:
e1:82:4d:cc:9e:a6:a9:a4:b6:11:01:8b:7f:bb:50:07:3a:a7:
0b:a3:25:8d:0f:37:b0:4f:95:c9:dd:9d:db:94:98:e2:1b:fa:
95:cc:a5:d4:38:db:6f:ac:d0:5d:d5:27:9f:1d:76:47:d0:f5:
4c:de:05:87:4c:d7:eb:f6:34:c2:cf:b0:4b:6b:36:d9:ce:0e:
5d:37:10:36:8d:47:94:c6:40:fb:d5:7e:dd:45:23:05:f9:2c:
04:3a:74:24:39:5a:68:e2:54:e2:06:fe:d5:fb:fb:20:c7:f1:
02:e6:2b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:15 2025 by rpki-client