This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
File: t6pTc4MhTWSOYzvMQg071oYWeP0.mft (raw, json)
Hash identifier: 8W8IEC79tIVGwjgcGUZwZyu3by87ewijzUOavwL4ZPA=
Subject key identifier: 40:F8:1F:B2:68:BD:CD:F7:09:F6:9C:75:71:29:37:D8:2C:48:81:2D
Authority key identifier: B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
Certificate issuer: /CN=A91C3083/serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Certificate serial: 1B8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
Manifest number: 1B42
Signing time: Thu 18 Dec 2025 16:11:25 +0000
Manifest this update: Thu 18 Dec 2025 16:11:24 +0000
Manifest next update: Thu 25 Dec 2025 16:11:24 +0000
Files and hashes: 1: t6pTc4MhTWSOYzvMQg071oYWeP0.crl (hash: 0GaootGjnjGARNuWpG+dEaaRAxgky6OMS6a7XdSzOuY=)
2: AF7700B2B52A11EAB9426C7DC4F9AE02.roa (hash: EBfpSajs+p8kmDGMcsROIkdAjLRuCAc9bxp8aA0ImwI=)
3: B35788BC2E6111E7B9FA6971C4F9AE02.roa (hash: hXTTzP3kFcpIZ/DM7zay0NC5KhlwF/RDBBTbxArfKKA=)
4: BF6CF7EE1D1811E89AF8344EC4F9AE02.roa (hash: 2FdeFk6BkACA2x84QQhSx1d4f7hfVmpEG3T9lZ0KKs8=)
5: 2504266C1D1A11E8BDAD4F54C4F9AE02.roa (hash: Y4AICBsuBLbr1eccCbbUOeleXrW+auIswSTrvYqJTo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 16:11:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7052 (0x1b8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C3083, serialNumber=B7AA537383214D648E633BCC420D3BD6861678FD
Validity
Not Before: Dec 18 16:11:24 2025 GMT
Not After : Dec 25 16:11:24 2025 GMT
Subject: CN=694427ac-7aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:97:05:db:a5:43:6c:dc:67:f7:5e:e8:79:c7:
54:da:ac:c7:3b:75:d6:2d:3e:b8:69:a9:85:3a:4d:
26:6b:95:bc:64:eb:f2:e4:8f:c7:7e:00:28:5a:06:
ba:da:64:e2:b5:29:c3:5b:b8:5a:f9:21:b6:46:a4:
d1:08:bf:0d:ba:bf:19:b0:a8:c4:bc:19:28:eb:31:
9f:59:cf:e8:f0:c2:64:54:9a:e7:2a:45:eb:f4:37:
f2:a1:11:bc:e6:45:cf:30:b5:0f:7e:6f:ce:f0:74:
e6:71:d3:fb:ad:07:3a:68:3d:28:ad:5d:d6:05:5e:
32:45:41:88:4e:88:d5:2c:6d:7a:b2:57:24:4c:12:
e3:08:2e:22:c7:f8:83:d9:1e:eb:b6:dd:36:af:ea:
a7:e9:62:99:42:73:9c:e5:0b:78:12:68:e2:ee:80:
06:cb:d1:50:24:83:1b:f2:0d:3b:ee:b4:b8:f3:a0:
dc:19:7d:fc:22:32:15:55:80:3f:05:5c:01:83:63:
98:3f:a6:3b:0d:13:a6:d3:bd:c7:89:75:c1:d9:d9:
d5:37:77:e2:41:d9:8f:4f:5b:cb:d7:79:b7:d9:c6:
f4:f8:e3:cd:12:a8:01:14:3d:2b:cf:bf:79:2f:ec:
c2:89:2b:10:57:48:54:a9:53:d2:82:a9:16:7a:a5:
45:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F8:1F:B2:68:BD:CD:F7:09:F6:9C:75:71:29:37:D8:2C:48:81:2D
X509v3 Authority Key Identifier:
keyid:B7:AA:53:73:83:21:4D:64:8E:63:3B:CC:42:0D:3B:D6:86:16:78:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t6pTc4MhTWSOYzvMQg071oYWeP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3083/A0CF059A2E6011E7B7473E70C4F9AE02/t6pTc4MhTWSOYzvMQg071oYWeP0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:69:13:a5:de:40:82:bd:ee:be:ca:39:ff:36:d9:e8:f6:0f:
6f:bc:75:04:51:f0:f5:e0:42:27:ed:36:ff:fb:8b:12:8c:83:
e8:14:fe:4b:37:2b:bc:4b:95:3d:6c:75:47:6d:eb:59:c8:05:
94:6d:2b:b6:c7:59:fb:57:6b:38:10:3a:4d:9b:6b:b7:27:01:
d0:d8:77:62:a3:c0:7f:5d:bb:d9:79:bb:a5:84:63:7c:a2:50:
2d:a2:ed:0e:7b:e5:bd:a7:47:5f:78:cb:fc:65:35:01:89:5f:
02:10:c0:cd:76:c7:2f:6b:2a:7b:76:86:b4:80:d0:e0:66:db:
64:26:33:41:65:24:67:91:ad:41:e8:35:3b:1d:b9:54:fb:48:
64:70:04:f0:f9:f6:37:52:9d:8b:fe:13:db:ab:d6:51:f7:69:
fc:5f:1b:0f:05:8a:d7:f5:6b:ae:bb:96:15:4b:c4:73:74:6e:
5a:ab:b7:b2:b0:4c:1c:7a:6b:53:15:6e:3e:50:56:85:94:4d:
af:29:f2:cd:24:bf:d6:2e:08:b0:e6:04:3a:f0:9d:a7:1f:75:
89:29:dd:57:de:63:d0:b2:57:7e:bc:97:9f:01:dc:2f:7a:16:
be:60:f1:41:2d:e4:34:ea:0e:5d:f2:46:8f:1d:b7:6c:c7:b9:
d9:53:80:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICG4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzMwODMxMTAvBgNVBAUTKEI3QUE1MzczODMyMTRENjQ4RTYzM0JDQzQyMEQzQkQ2
ODYxNjc4RkQwHhcNMjUxMjE4MTYxMTI0WhcNMjUxMjI1MTYxMTI0WjAYMRYwFAYD
VQQDDA02OTQ0MjdhYy03YWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkJcF26VDbNxn917oecdU2qzHO3XWLT64aamFOk0ma5W8ZOvy5I/HfgAoWga6
2mTitSnDW7ha+SG2RqTRCL8Nur8ZsKjEvBko6zGfWc/o8MJkVJrnKkXr9DfyoRG8
5kXPMLUPfm/O8HTmcdP7rQc6aD0orV3WBV4yRUGITojVLG16slckTBLjCC4ix/iD
2R7rtt02r+qn6WKZQnOc5Qt4Emji7oAGy9FQJIMb8g077rS486DcGX38IjIVVYA/
BVwBg2OYP6Y7DROm073HiXXB2dnVN3fiQdmPT1vL13m32cb0+OPNEqgBFD0rz795
L+zCiSsQV0hUqVPSgqkWeqVFYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFED4H7Jo
vc33CfacdXEpN9gsSIEtMB8GA1UdIwQYMBaAFLeqU3ODIU1kjmM7zEINO9aGFnj9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA4My9BMENGMDU5QTJF
NjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRXU09ZenZNUWcwNzFvWVdl
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Q2cFRjNE1oVFdTT1l6dk1RZzA3MW9ZV2VQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MzA4My9BMENGMDU5QTJFNjAxMUU3Qjc0NzNFNzBDNEY5QUUwMi90NnBUYzRNaFRX
U09ZenZNUWcwNzFvWVdlUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCOaROl3kCCve6+yjn/Ntno9g9vvHUEUfD14EIn7Tb/+4sSjIPoFP5L
Nyu8S5U9bHVHbetZyAWUbSu2x1n7V2s4EDpNm2u3JwHQ2Hdio8B/XbvZebulhGN8
olAtou0Oe+W9p0dfeMv8ZTUBiV8CEMDNdscvayp7doa0gNDgZttkJjNBZSRnka1B
6DU7HblU+0hkcATw+fY3Up2L/hPbq9ZR92n8XxsPBYrX9Wuuu5YVS8RzdG5aq7ey
sEwcemtTFW4+UFaFlE2vKfLNJL/WLgiw5gQ68J2nH3WJKd1X3mPQsld+vJefAdwv
eha+YPFBLeQ06g5d8kaPHbdsx7nZU4AV
-----END CERTIFICATE-----
Generated at Fri Dec 19 21:11:13 2025 by rpki-client