This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
File: 15_6dyN1rrQCGo_1GC_qqjJZKP0.mft (raw, json)
Hash identifier: umNVopcbO4L9NBfR4blMNESIg7IBJuzH1EkGxnpoEdo=
Subject key identifier: FD:E3:3D:CF:C3:0C:03:4F:5C:52:1B:18:93:E0:99:28:6D:AE:A6:B4
Authority key identifier: D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD
Certificate issuer: /CN=A91A95AB/serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD
Certificate serial: 08C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
Manifest number: 3DB0
Signing time: Mon 22 Dec 2025 15:05:46 +0000
Manifest this update: Mon 22 Dec 2025 15:05:45 +0000
Manifest next update: Mon 29 Dec 2025 15:05:45 +0000
Files and hashes: 1: 15_6dyN1rrQCGo_1GC_qqjJZKP0.crl (hash: LCqX0SaiKjsYr3LHhjhkjoVYQ3amPeMt37ggiqkHUZ8=)
2: 355A29B8D6CC11EE99534F6EC4F9AE02.roa (hash: luZqCIjqnlKYbUcpH0XD0h67wo+vIREwLR7SC2P9HUQ=)
3: D127B58CF8EF11EEA2537576C4F9AE02.roa (hash: bjYMDtpJZNg5Y2L6Uj46FEgAtSCkkttriVFUrF2NgNE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl
rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 15:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244 (0x8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A95AB, serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD
Validity
Not Before: Dec 22 15:05:45 2025 GMT
Not After : Dec 29 15:05:45 2025 GMT
Subject: CN=69495e49-8654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:62:0e:e7:18:e2:d6:39:49:2f:27:af:23:
e7:37:96:79:a8:55:53:f1:93:69:ad:2d:bd:85:a6:
77:5d:08:ef:d7:d6:41:2f:c7:26:23:49:50:52:8e:
c9:4f:5d:e5:c1:57:21:70:30:fd:70:56:39:a1:4a:
6a:79:bf:01:95:3e:dd:2b:c1:21:db:1f:f6:67:dd:
60:2e:19:83:7a:ad:c1:c5:78:e1:d3:8b:b2:9a:5c:
90:30:52:c0:82:a9:19:7e:e8:62:c4:e9:ac:52:fe:
08:f6:55:3e:10:95:bb:bc:5d:e5:ef:d2:00:79:29:
12:a1:b1:36:9d:06:d8:28:e4:cd:6a:fb:70:cd:cb:
a8:be:6e:6a:26:05:a4:7a:42:8f:d9:4d:29:71:58:
f3:ac:7c:a0:d8:1b:39:2e:77:62:e9:90:0b:00:cf:
e0:b0:2d:3e:1e:78:81:ec:ba:6d:ab:45:30:0d:77:
01:4f:04:53:0d:5f:eb:31:3d:46:2a:18:f6:a3:57:
00:17:c1:75:c9:ae:aa:5d:a6:a4:03:e8:86:ee:fc:
bc:91:77:a1:05:8e:f4:4d:69:9b:fb:07:04:7f:b4:
f0:e2:bf:ab:d1:5f:5d:0a:d4:00:37:6a:25:cb:44:
64:0a:d4:25:ac:ed:69:c0:e4:56:65:ea:0a:46:6e:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E3:3D:CF:C3:0C:03:4F:5C:52:1B:18:93:E0:99:28:6D:AE:A6:B4
X509v3 Authority Key Identifier:
keyid:D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:34:68:21:2d:66:96:cb:c0:78:7d:65:9c:e7:5b:ae:43:53:
05:66:99:c9:e7:d8:51:c7:9b:60:a0:cf:52:b6:46:65:bf:6a:
82:a7:07:2c:a4:4f:cb:bf:0b:4e:90:47:ef:19:27:80:a4:53:
96:f4:26:a6:4e:50:f3:8a:52:93:3a:6f:9a:13:a9:ae:1c:4f:
39:4b:61:40:b2:b1:85:5e:9e:33:4b:3e:16:98:97:03:82:cc:
84:3e:af:ef:54:ee:52:51:f3:da:ac:11:12:de:44:c9:a1:e1:
79:09:70:58:35:9c:a0:5e:ce:09:7e:d6:7d:9a:59:80:5c:2b:
32:2f:c0:e7:63:5f:e6:45:f7:da:e6:79:ee:02:09:91:6b:51:
f7:40:bf:89:f9:99:53:e8:62:99:82:f9:d4:0a:81:df:8d:7c:
93:d2:ec:7c:69:fa:a5:1b:f4:74:b2:60:3e:36:8a:80:4d:86:
3b:e0:b5:28:95:0f:9a:31:a8:7c:a5:92:fb:55:e5:16:a5:72:
5d:02:ab:b3:c2:e0:6e:7b:4a:75:c0:bf:e4:71:d2:1d:2e:49:
55:50:8a:0a:c0:2b:01:33:66:d1:a9:89:6c:c0:f0:f3:ad:1c:
f2:fd:ba:73:9a:7d:2c:c9:a6:94:1b:08:ed:77:5d:50:37:22:
58:af:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:48 2025 by rpki-client