This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json)
Hash identifier: 2OvYTz3Q8+NJfI9duUjgBcquXcmYRPRyyFE/ULLnJtQ=
Subject key identifier: DC:9E:F6:E9:15:5A:8D:4F:C1:0D:44:D4:20:B5:34:A4:7A:EC:3A:EA
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial: 0D47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
Manifest number: 0D11
Signing time: Sun 14 Dec 2025 17:48:20 +0000
Manifest this update: Sun 14 Dec 2025 17:48:20 +0000
Manifest next update: Sun 21 Dec 2025 17:48:20 +0000
Files and hashes: 1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: 4nGyBZMgG0FWlFTiK5UrGw4Yg+R8mwLw5Rn2w1Md0zo=)
2: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: 1TLr5oM7v/qdbXCuWglO9MT2WfClZILhcDQljm7O2lk=)
3: 584733B48D6C11F09980DA5EC4F9AE02.roa (hash: h29koSbtR2J5ejxH0g/g8JKXTU/n2VhgMI8p7KUTTRI=)
4: F8C3F402870A11F0A015612EC4F9AE02.roa (hash: XvrYP38xvdCgdawfCh7HadAKH1aRcApDaLO6IdzBa/w=)
5: 7545D7688D6C11F0AB7BFE70C4F9AE02.roa (hash: Gso7riR6mhTBetdxhvBcEVx4lP0fazKGiY4D6n5IxPQ=)
6: 7617F5408D6C11F0AB7BFE70C4F9AE02.roa (hash: c7Vsr0eRAEmxWhobNGyEno1B5Pvs5ja8tO1BeT/ckVk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 17:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3399 (0xd47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Validity
Not Before: Dec 14 17:48:20 2025 GMT
Not After : Dec 21 17:48:20 2025 GMT
Subject: CN=693ef864-dafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:fd:bd:b8:f7:ad:13:a0:19:97:74:ec:7c:
41:b8:72:a2:29:58:88:c6:c2:c8:b6:e8:68:38:dd:
26:2c:e9:d8:06:89:0d:40:f1:9c:02:52:4b:4a:62:
ea:c7:b6:9b:c6:e1:10:8e:2a:95:c3:74:75:94:6a:
a6:e8:b5:8e:08:b8:f2:26:c8:d7:d8:c3:18:07:27:
8a:96:60:04:01:f0:69:8c:94:54:c2:20:6c:85:9d:
c6:59:c6:6d:1c:48:18:82:64:04:9b:c4:45:46:6f:
ec:ae:b2:b6:1d:b1:25:92:63:fa:6b:ad:e7:4f:79:
88:19:19:d3:42:83:34:75:60:f6:d1:af:31:90:95:
31:2b:42:86:17:27:07:35:04:dd:8a:2e:b3:57:3e:
45:b7:86:43:00:05:c8:68:64:72:fb:d4:74:a3:7b:
c7:50:2a:72:7f:12:ed:ea:19:eb:b7:d8:4f:3f:79:
87:68:8a:a5:31:df:cf:6c:e0:8f:5c:4a:09:04:9a:
d8:7e:b2:dc:97:2a:0c:40:0d:ed:b1:46:98:8d:e3:
f0:ec:ee:57:98:6e:1c:bd:30:77:f5:5b:dc:2f:ef:
f2:4d:ae:2b:5c:71:25:60:ff:6e:de:57:84:62:e9:
56:88:87:51:c8:7a:b4:6c:33:7c:45:b9:62:d5:ac:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9E:F6:E9:15:5A:8D:4F:C1:0D:44:D4:20:B5:34:A4:7A:EC:3A:EA
X509v3 Authority Key Identifier:
keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:f5:16:f1:41:ed:5d:ac:c9:40:ca:e5:59:c9:52:25:59:
1c:13:65:78:18:08:91:50:80:f0:40:00:cc:54:b3:c7:40:85:
5a:a7:53:f5:7f:ce:08:38:06:ff:00:c2:18:e4:11:f2:25:c8:
5a:d6:ab:5a:b2:c2:23:c1:3f:b7:0f:63:9a:b9:66:52:a3:99:
ca:0a:6d:bf:d8:16:db:b2:98:2d:35:71:8a:a3:b6:8f:14:e6:
b3:49:9b:aa:c9:01:e8:a1:d5:9e:a7:84:42:f8:21:14:ca:67:
1d:f3:f1:3f:27:68:30:8b:b5:6b:67:43:77:0b:e1:26:58:20:
7c:6c:1d:cb:ce:48:7a:b4:c0:b9:9f:ce:6c:4d:71:34:bd:95:
e7:3b:9a:62:47:32:e8:34:c5:22:36:24:09:86:d7:10:e8:45:
68:31:e7:31:8b:d1:b0:22:80:03:9f:87:76:26:06:67:8b:30:
42:4d:10:c4:b2:54:b4:9d:51:3f:2e:40:92:72:c8:c2:f5:16:
80:56:65:5a:4a:cc:31:c9:dd:02:bd:90:a4:68:70:60:1b:63:
f8:ff:b6:c1:be:35:5f:b4:89:5f:88:4c:c4:4c:fd:23:4d:fa:
b3:9b:3d:98:16:5b:4b:7f:8c:f3:3c:d9:a1:1e:16:64:78:cf:
2f:dc:90:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 12:20:16 2025 by rpki-client