This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json)
Hash identifier: bPeQxSy+8UiLBdsvfyygdem1J591d6DlpIO/hiR07E0=
Subject key identifier: F6:A1:51:25:6F:F2:38:8C:13:D8:0E:2B:65:33:1F:37:7D:7F:44:91
Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Certificate serial: 0AF2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
Manifest number: 0AD3
Signing time: Tue 16 Dec 2025 19:09:27 +0000
Manifest this update: Tue 16 Dec 2025 19:09:27 +0000
Manifest next update: Tue 23 Dec 2025 19:09:27 +0000
Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: SjH8B9HD5Q24roh7i1tqzbP1w9NJ7QXYJp1z3euQ3Fw=)
2: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=)
3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: ynLMF5PjpFkvP/pk/9zlgeaTF7AgzyDNzOj/EUi7rZI=)
4: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 19:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2802 (0xaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14
Validity
Not Before: Dec 16 19:09:27 2025 GMT
Not After : Dec 23 19:09:27 2025 GMT
Subject: CN=6941ae67-8539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:1f:d5:2c:3d:7b:46:29:40:be:1e:12:6e:
b7:4e:3f:bb:3c:86:ac:c4:3d:12:6a:90:b1:e8:a7:
69:f8:29:92:18:09:f8:97:d5:f2:09:6e:e2:59:d9:
fd:11:2b:32:70:b4:12:77:d7:31:19:61:b8:c3:6d:
13:ec:55:db:81:2a:94:35:7a:3a:8f:b5:5a:2e:15:
8e:d6:a9:84:00:3a:79:0d:20:09:9f:60:e6:3d:b8:
52:45:b2:0d:7d:2a:f4:1b:60:5b:4c:1a:d8:ac:2d:
1b:cd:01:64:b4:ad:5f:04:5d:9b:d7:b6:fe:f7:36:
d4:31:49:5c:60:9d:2e:08:9d:1b:b2:1d:d2:cf:09:
ed:9a:fc:7d:30:b9:d5:d6:e6:fa:39:f1:62:64:5f:
50:07:e3:59:cb:39:8f:c4:a4:61:0c:06:fb:68:cd:
f2:ba:9a:23:50:4a:c9:3c:49:3a:b3:4a:cd:66:52:
af:01:4b:42:4e:7b:cd:56:67:a5:11:01:40:40:7a:
25:0a:e1:3f:04:fa:26:6b:69:13:4d:01:8e:ec:bf:
eb:ae:95:88:0f:58:b0:2b:c6:83:ef:81:9d:42:1d:
a1:c1:e6:59:7c:2a:43:89:f1:b0:32:0a:b6:9b:25:
33:2a:b8:ab:1f:b5:f7:a8:db:20:d8:63:af:04:f0:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A1:51:25:6F:F2:38:8C:13:D8:0E:2B:65:33:1F:37:7D:7F:44:91
X509v3 Authority Key Identifier:
keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:9b:49:99:76:42:c6:b1:63:b7:5b:79:75:55:fe:ee:ca:b4:
f8:ee:a6:92:90:5b:67:5e:1f:87:5c:5c:42:2c:8c:9f:a0:47:
fc:8d:80:e3:51:f2:aa:06:84:0b:fa:1e:3f:a3:3f:f0:f3:b1:
7f:08:a6:0a:6e:9d:63:47:a3:d1:81:a3:ba:13:85:1f:b8:ad:
33:70:73:3e:86:d5:16:b6:18:bd:13:85:90:5c:db:a3:96:f2:
c6:c6:7c:4d:e2:eb:1c:a2:cc:ed:64:67:7c:27:bc:5c:ad:d6:
47:f9:ba:87:9c:44:3a:0a:0f:b8:00:36:d1:0d:df:a0:82:1a:
6f:9c:e7:d7:85:32:7f:b1:e1:7a:31:e0:c7:d2:c2:f4:52:cd:
68:d0:a7:b4:97:c8:f1:fd:7b:dd:b1:36:8c:16:91:dd:6d:74:
2e:4e:3d:61:12:fc:66:5e:db:70:e0:8f:56:c0:63:40:14:be:
ab:0a:21:b9:f5:1f:c3:a6:cf:0a:6c:75:af:49:4e:bc:e6:a4:
5c:9f:cb:6d:f8:de:e1:38:f1:42:43:a0:59:83:aa:39:05:13:
a7:68:51:f3:77:9c:cc:1e:06:ca:29:71:d0:e4:03:af:1d:ce:
17:6b:23:03:4a:f1:77:f9:59:10:ff:ba:ff:92:cb:d4:10:c1:
ed:11:05:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG
MUY2RUZCMTQwHhcNMjUxMjE2MTkwOTI3WhcNMjUxMjIzMTkwOTI3WjAYMRYwFAYD
VQQDDA02OTQxYWU2Ny04NTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwQf1Sw9e0YpQL4eEm63Tj+7PIasxD0SapCx6Kdp+CmSGAn4l9XyCW7iWdn9
ESsycLQSd9cxGWG4w20T7FXbgSqUNXo6j7VaLhWO1qmEADp5DSAJn2DmPbhSRbIN
fSr0G2BbTBrYrC0bzQFktK1fBF2b17b+9zbUMUlcYJ0uCJ0bsh3Szwntmvx9MLnV
1ub6OfFiZF9QB+NZyzmPxKRhDAb7aM3yupojUErJPEk6s0rNZlKvAUtCTnvNVmel
EQFAQHolCuE/BPoma2kTTQGO7L/rrpWID1iwK8aD74GdQh2hweZZfCpDifGwMgq2
myUzKrirH7X3qNsg2GOvBPAQKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPahUSVv
8jiME9gOK2UzHzd9f0SRMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0
MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt
eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dN
cS11VEtHeWlBbWJ4OXUteFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBmm0mZdkLGsWO3W3l1Vf7uyrT47qaSkFtnXh+HXFxCLIyfoEf8jYDj
UfKqBoQL+h4/oz/w87F/CKYKbp1jR6PRgaO6E4UfuK0zcHM+htUWthi9E4WQXNuj
lvLGxnxN4uscosztZGd8J7xcrdZH+bqHnEQ6Cg+4ADbRDd+gghpvnOfXhTJ/seF6
MeDH0sL0Us1o0Ke0l8jx/XvdsTaMFpHdbXQuTj1hEvxmXttw4I9WwGNAFL6rCiG5
9R/Dps8KbHWvSU685qRcn8tt+N7hOPFCQ6BZg6o5BROnaFHzd5zMHgbKKXHQ5AOv
Hc4XayMDSvF3+VkQ/7r/ksvUEMHtEQWq
-----END CERTIFICATE-----
Generated at Wed Dec 17 00:31:27 2025 by rpki-client