This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
File: 6EKSkSMrng-5SFoKrUk9fgfH5NE.mft (raw, json)
Hash identifier: luY5pSlHcCEFN9yM6kOHqzyzf7FrA24MH2T/m0XxBKA=
Subject key identifier: CE:37:3A:40:4D:1F:BB:C5:1E:38:C9:2A:24:3A:B8:99:7C:F2:68:B9
Authority key identifier: E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1
Certificate issuer: /CN=A9199696/serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
Manifest number: 9B
Signing time: Tue 23 Dec 2025 05:18:05 +0000
Manifest this update: Tue 23 Dec 2025 05:18:04 +0000
Manifest next update: Tue 30 Dec 2025 05:18:04 +0000
Files and hashes: 1: 6EKSkSMrng-5SFoKrUk9fgfH5NE.crl (hash: T2hz7XVI9NESbukaX+rH2dOQ02a+0NeAM4n8+r/XUL4=)
2: 1A44E27AF1A711EFA441E72CC4F9AE02.roa (hash: +T8xPEy3qOwqRDiq3fa/SHDl3cgx+ER91jGPjiK2GbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl
rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199696, serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1
Validity
Not Before: Dec 23 05:18:04 2025 GMT
Not After : Dec 30 05:18:04 2025 GMT
Subject: CN=694a260d-c85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:59:32:32:3d:a5:ec:af:39:0f:49:6c:5d:
e0:5d:63:eb:e2:97:e7:6d:b9:a2:8e:05:1e:b1:66:
c8:cd:d1:0b:ca:22:5c:43:ce:24:45:29:5c:28:5a:
7d:c1:02:fa:a2:5d:ea:66:31:55:87:4b:10:17:82:
e7:70:35:72:59:22:26:20:35:7c:0f:15:23:3f:68:
39:ad:bd:93:ed:af:ad:60:44:23:7c:c4:71:86:46:
19:5c:b8:86:25:5a:ce:d1:f0:09:9e:ce:86:9a:d5:
d5:97:8d:67:4a:f5:47:b7:8e:40:9b:b3:a2:c8:08:
80:c2:94:c9:7d:47:92:51:54:69:f2:96:f9:92:d5:
84:15:5e:05:66:84:56:96:9a:74:db:47:dd:07:83:
0e:45:a2:9f:a2:76:b4:10:f9:ef:53:82:5a:18:a9:
38:27:b1:0d:c3:b7:f4:66:70:10:2a:73:98:8f:40:
e4:43:4d:ac:fb:6a:fd:1c:c7:f6:18:ef:4c:d0:6d:
3a:9b:ab:1d:88:15:9e:08:e4:58:f2:11:5c:7d:e8:
7e:6d:6c:81:5f:d2:8a:bf:9d:3f:29:ec:99:aa:77:
17:93:47:e6:8f:e1:7b:68:49:36:af:3d:02:c6:cc:
dc:c4:81:dd:b1:01:0d:a3:8d:9a:08:59:94:ee:6c:
4d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:37:3A:40:4D:1F:BB:C5:1E:38:C9:2A:24:3A:B8:99:7C:F2:68:B9
X509v3 Authority Key Identifier:
keyid:E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:21:ad:70:fc:48:eb:7a:b0:b6:d5:fd:8a:46:21:40:87:80:
11:60:42:54:1e:1f:63:58:11:83:d1:b4:66:a8:f2:d9:69:39:
b0:5f:cb:8f:3a:50:36:00:1b:cd:28:82:76:0c:20:f5:25:e5:
a9:58:50:f6:db:6c:f3:9d:2a:c8:c8:fa:25:ac:fc:3d:c4:d0:
64:49:03:27:ac:45:bd:e6:44:f6:b6:97:c2:e5:5f:44:1e:d6:
76:ff:ff:19:c1:14:35:e5:c3:eb:71:d0:82:e2:3f:ac:9b:79:
c4:dd:1b:68:ba:0e:dc:e6:f9:57:6e:c1:6b:a4:9a:95:1d:0b:
c1:c6:c1:fe:af:7b:c6:80:50:50:29:39:ba:bd:05:1d:0d:9f:
50:66:25:2d:c0:15:2b:02:be:da:89:55:8e:a4:1b:e2:fe:4b:
5f:74:e6:b1:af:e0:b9:a3:a1:90:b4:1c:fa:00:0a:f9:90:7a:
eb:47:77:b5:a6:43:8a:35:14:b1:f2:5f:a0:61:55:5f:35:cf:
ce:49:c3:36:b3:7f:db:bf:9a:3d:3c:4f:d1:3b:f4:46:97:a4:
ee:6d:15:7c:28:22:6a:47:2c:42:2c:c6:22:84:92:a0:6f:ae:
c4:1e:c1:64:93:e2:49:bf:77:22:2b:28:cd:7d:e2:4e:34:58:
b9:4c:38:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:30 2025 by rpki-client