This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
File: N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json)
Hash identifier: L/sixJQ3xXDZwWZir7L3s2Rcd8WtiZ5ZaLpmMQWzeCM=
Subject key identifier: 82:69:3D:E6:F9:C1:9F:33:CA:83:77:0D:02:B1:78:30:69:4C:92:17
Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
Certificate serial: 03F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
Manifest number: 03F5
Signing time: Mon 22 Dec 2025 23:33:49 +0000
Manifest this update: Mon 22 Dec 2025 23:33:48 +0000
Manifest next update: Mon 29 Dec 2025 23:33:48 +0000
Files and hashes: 1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: NvSLepiRM0Gr12VoyRDPiCoMQYrYDQJTY4XmzCOvuqY=)
2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl
rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1017 (0x3f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A
Validity
Not Before: Dec 22 23:33:48 2025 GMT
Not After : Dec 29 23:33:48 2025 GMT
Subject: CN=6949d55c-639f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:10:4a:af:25:85:68:53:f6:c0:9e:97:f4:
a2:6d:bc:02:81:70:c0:cf:b9:78:6b:41:14:a4:54:
6c:3b:7f:82:cb:fd:f7:f4:ae:c9:52:e8:e5:25:65:
96:19:6c:59:d3:b8:61:1c:00:67:68:2d:24:9b:92:
f6:33:d9:49:5a:5c:58:4e:f1:5e:39:db:d0:e3:7f:
77:ad:ca:01:0b:d5:37:87:14:41:50:27:39:fb:ce:
5d:71:8b:7e:68:fb:75:6f:c7:ad:f8:e7:7e:a1:f8:
80:35:3f:f0:fe:be:97:71:f6:43:7c:90:d1:e7:c3:
27:ea:04:e1:e1:dd:80:d3:39:f7:cc:3c:c1:a1:27:
b0:9e:96:60:f2:b0:92:5b:75:7c:3f:01:ee:52:32:
ea:86:81:45:95:eb:45:66:67:f2:11:25:f1:b2:8f:
f1:07:ca:83:6f:2e:34:65:ae:ab:d7:d4:e0:90:90:
06:9d:11:f6:bc:d6:d7:7b:11:ef:37:78:d5:44:82:
27:ab:fd:bd:88:dd:5e:fb:c8:36:3b:61:72:48:9e:
ab:02:1e:cb:5c:91:da:34:41:5c:41:6d:c5:5f:d1:
b7:76:d1:1e:6a:1c:1e:7b:f0:79:13:59:8d:20:b6:
a2:c8:83:51:87:2a:65:b5:ec:d5:cb:52:02:a5:15:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:69:3D:E6:F9:C1:9F:33:CA:83:77:0D:02:B1:78:30:69:4C:92:17
X509v3 Authority Key Identifier:
keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fc:1c:05:67:28:8a:7c:96:25:18:f4:b6:dd:32:49:62:91:
af:3d:69:9e:be:96:c1:fe:cb:a8:66:1d:0a:41:1c:4d:33:1e:
06:ee:a1:62:24:e8:50:2f:71:25:a4:7b:c0:e0:65:37:08:c7:
b6:99:af:62:d3:48:6a:60:40:b8:f8:a8:59:3d:79:b1:78:c2:
da:2f:9c:c2:a4:e3:d6:2e:7c:11:d5:cd:33:93:b7:b0:38:63:
75:e1:1b:fc:1d:39:44:f2:76:ba:33:96:2a:9f:7a:8d:b8:c7:
f4:bd:80:b2:66:a6:09:6f:43:f0:e7:d1:cb:0f:e5:96:9a:d2:
5f:59:94:1b:8f:07:4b:a2:bf:42:04:8c:55:7b:01:b1:12:9d:
62:2e:6c:ba:3b:23:49:c1:de:47:f2:82:6a:62:76:5f:6e:c5:
8a:57:b9:b0:84:6d:4d:8d:34:ee:0d:36:5d:15:68:3a:b3:8f:
cc:de:f0:8e:8a:4e:09:f8:b8:cb:cc:83:f6:64:84:a8:70:15:
78:06:19:d0:55:3d:be:4f:17:95:05:83:e5:de:fa:a1:62:53:
3e:ad:79:0c:d9:bd:b9:8c:cd:ee:0e:41:ec:31:3c:e0:2e:b2:
37:2d:d2:18:be:ca:ad:ea:a9:e5:29:f3:d6:3a:ec:1f:61:5e:
a0:06:fb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:50 2025 by rpki-client