This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft
File: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft (raw, json)
Hash identifier: wN/pW09YPtlnCNG3QqucieQlGnwK8FfgVW617IHzYmY=
Subject key identifier: 41:8D:4F:2B:47:F3:95:C2:ED:AD:46:77:4B:C8:CA:09:1B:C3:F3:29
Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30
Certificate issuer: /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730
Certificate serial: 0B43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft
Manifest number: 0B3A
Signing time: Thu 18 Dec 2025 18:54:07 +0000
Manifest this update: Thu 18 Dec 2025 18:54:06 +0000
Manifest next update: Thu 25 Dec 2025 18:54:06 +0000
Files and hashes: 1: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl (hash: N4RYQ6vyLa7MKmk2GZnprTDAtyN8oGqUxUVSpvoMUwg=)
2: 0FFE5282122811F0AC9B4112C4F9AE02.roa (hash: qP7+uhy7LyLUv4jd3g7zWSe0a9FYblcgiMmuUDc4eAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl
rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2883 (0xb43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A1BE, serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730
Validity
Not Before: Dec 18 18:54:06 2025 GMT
Not After : Dec 25 18:54:06 2025 GMT
Subject: CN=69444dcf-285d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:c4:cd:9f:94:e1:9c:91:05:80:54:68:42:
46:21:39:77:58:91:50:76:c8:bb:91:47:72:09:88:
71:87:c3:8c:f0:c1:6b:e2:1b:d5:de:f1:28:54:48:
3b:04:67:dd:53:e1:e9:34:67:9f:31:80:1b:27:84:
e3:09:b8:62:5e:aa:0c:85:6d:fd:71:17:b1:37:d3:
42:3f:07:29:08:d7:c1:ca:d1:73:04:76:1f:e2:f8:
c9:9f:bc:d2:b8:c9:c9:de:66:f6:16:fd:85:3d:83:
8a:5b:c1:80:17:76:fe:8b:76:6a:fb:f3:0f:fa:3d:
29:b9:ba:28:32:87:99:6b:20:a9:f2:27:45:55:39:
5c:f6:92:54:38:5d:b5:bf:48:e2:55:7a:6c:4c:7e:
b0:a7:a1:2e:7d:cf:58:88:2e:c0:9d:4c:a1:be:df:
ad:8d:e1:48:17:e6:7c:5f:9a:63:eb:1d:e7:5e:9d:
9e:1e:06:74:f3:af:f2:ee:ec:65:e2:07:ff:64:96:
49:c3:24:d9:88:27:48:af:5f:c7:69:d6:3d:a5:d2:
5e:9c:61:d4:09:bf:23:d8:5e:8d:9b:2e:59:89:72:
e2:cd:e4:fd:56:d8:7f:08:31:19:62:6e:73:cf:12:
be:4e:65:d8:7c:7a:d3:ee:c6:65:db:1a:ed:98:2c:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:4F:2B:47:F3:95:C2:ED:AD:46:77:4B:C8:CA:09:1B:C3:F3:29
X509v3 Authority Key Identifier:
keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1d:43:2c:58:63:5d:5b:57:49:6a:e2:fb:5d:71:85:4c:ca:
50:91:20:30:94:61:89:73:63:b5:33:f1:7a:8f:3f:c0:78:64:
6a:df:46:d2:c6:98:5b:1d:b8:a7:57:ac:81:98:4e:18:bf:8a:
89:df:9c:f2:c4:27:f0:bf:29:7e:af:97:cf:66:ea:cd:ce:6c:
3c:46:96:46:90:10:2d:e9:c7:68:77:de:87:14:37:5b:45:74:
53:9d:ce:a0:a1:66:8c:f8:4a:18:0c:e4:3a:76:2c:68:e5:d4:
f7:89:ef:60:ce:00:55:59:06:56:c7:2d:ec:33:a5:c2:d2:43:
af:a9:9b:02:50:92:b1:11:28:2d:4c:aa:fa:cb:10:b0:9b:bd:
05:b7:3f:3b:c6:02:0b:27:2c:db:ff:3d:a2:01:9f:c8:0c:4a:
ad:50:c0:96:43:18:f0:30:0c:83:48:d9:00:df:b1:4b:6b:c8:
02:8a:0b:b8:ab:b4:3c:4b:d1:ac:47:6d:ca:1e:41:e9:e7:8c:
7a:a7:0c:24:c6:33:62:9a:11:2b:9f:dd:b9:28:a1:3d:e3:7e:
ea:6f:bf:18:96:72:63:e8:ad:64:11:32:2b:0d:df:c5:54:57:
b8:da:26:4a:19:33:7b:ff:55:de:46:b2:cf:2f:15:ba:d9:2a:
27:63:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 11:34:28 2025 by rpki-client