This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
File: C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft (raw, json)
Hash identifier: ze5zznRHh79eGs5yA0Vmbt0UvxeBbRBzCvPSZd3RpxU=
Subject key identifier: 27:4A:E4:85:FD:41:8E:93:7F:53:32:B5:07:F7:A8:2D:EB:1F:93:FB
Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C
Certificate issuer: /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
Certificate serial: 1B21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
Manifest number: 1B08
Signing time: Wed 24 Dec 2025 16:06:13 +0000
Manifest this update: Wed 24 Dec 2025 16:06:13 +0000
Manifest next update: Wed 31 Dec 2025 16:06:13 +0000
Files and hashes: 1: C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl (hash: e+m8qsz06vUSRlslcDKBBySy5efQVZlXkC8xswHkBEI=)
2: 9D2302A4F1D011E88D564045C4F9AE02.roa (hash: VxTzxn1U/OXB+CWBddl3uRVosJ2/DdLLOs7eSbWCVE4=)
3: 06D9E242335211E79AC36F87C4F9AE02.roa (hash: cOF8JZVjOiBr4JiE8EO1rOQQwXV4Z3nniDklK+R3JE4=)
4: 9DD35B9AF1D011E88D564045C4F9AE02.roa (hash: BfNK79rwC7mJWHyNf4je/JUK8nGDNnAVVEA5gBoGvSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl
rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 15:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6945 (0x1b21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C
Validity
Not Before: Dec 24 16:06:13 2025 GMT
Not After : Dec 31 16:06:13 2025 GMT
Subject: CN=694c0f75-46b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:cc:21:a5:b1:8f:38:a6:5f:ed:e7:2b:c5:
f4:18:1e:b6:ad:e9:2c:70:2e:2f:58:a9:ff:37:6c:
85:a4:29:f3:8f:8c:02:ca:88:7e:e4:31:c3:00:2f:
8a:5d:33:94:84:be:26:5b:b4:99:19:fe:36:80:f6:
f6:01:d7:88:bb:c0:f0:f9:4d:ee:93:9a:f8:86:91:
49:6e:c3:e5:dc:74:7d:f2:db:65:a7:9c:ac:36:a9:
3a:bb:3e:0d:d7:f9:7b:9c:07:7c:d5:65:7b:43:f5:
e4:1e:d5:57:23:fb:87:97:78:0e:51:a4:a1:3c:d2:
6f:44:5b:ba:c3:2c:14:b6:0c:1b:21:fe:20:80:0d:
83:d4:28:57:8c:8c:de:11:d8:29:eb:f7:b1:0b:72:
47:1e:2d:18:1f:1e:1a:6f:40:3c:78:5a:4f:9b:72:
c3:b2:df:c4:51:fe:5b:f8:90:08:0a:19:fd:21:9b:
37:4e:95:86:4e:ab:1e:e4:a9:e0:c6:57:aa:52:38:
6a:c8:b8:fb:b7:dd:b3:e6:d4:d0:3a:8d:d9:f1:8a:
07:b2:a8:6b:84:10:19:8a:d6:40:39:b6:10:5a:e1:
2b:ed:2b:b4:da:c8:c5:62:3f:9f:61:2f:c6:9f:9b:
24:b8:76:4b:49:ea:88:b4:31:15:b3:02:7c:ca:9a:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4A:E4:85:FD:41:8E:93:7F:53:32:B5:07:F7:A8:2D:EB:1F:93:FB
X509v3 Authority Key Identifier:
keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:76:09:66:c6:62:da:e7:1a:53:11:be:e5:99:2a:5f:7b:79:
10:02:2b:3d:1d:39:72:54:53:57:ce:d6:b0:f2:52:b8:39:49:
00:1e:60:2a:d8:8a:da:01:23:be:6a:39:e3:04:58:d3:c8:19:
b1:79:6c:10:22:be:64:0e:cf:d6:bd:74:b7:78:55:8f:c4:69:
65:35:34:4a:9a:f5:17:d4:12:a6:f4:30:df:7d:4e:be:f2:a8:
9e:d4:4a:ec:49:8d:36:05:cc:ea:80:d5:bb:04:7a:ce:c0:cf:
02:bf:0b:b3:99:06:db:df:7e:0a:7c:97:69:f1:13:71:ec:aa:
1b:f4:69:54:38:3f:de:da:db:3d:ef:2f:66:95:86:9c:41:9e:
b8:2c:a7:1a:2c:c1:6d:30:f5:44:ac:8b:80:de:9d:54:a0:71:
2b:c4:7f:de:76:c9:8c:ff:70:bc:93:ad:18:85:64:45:72:81:
e0:8c:52:3c:f0:7b:69:b8:f2:ed:07:a5:09:89:83:70:18:79:
76:f8:a4:8e:d5:7d:a8:39:6d:30:24:34:0e:9f:c3:13:d1:a5:
78:6c:2e:7e:4b:45:4e:a3:31:1b:9f:5b:1b:62:b0:c4:84:74:
de:8d:9f:75:ec:da:c2:45:49:9d:bc:37:91:81:25:a5:83:f6:
1c:f3:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:34:52 2025 by rpki-client