This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json)
Hash identifier: ZBxGRiNQXom+PGKRn6z+nioie0XY4uVv/OnPwVyTh7Y=
Subject key identifier: AA:0B:23:FC:30:7C:10:21:07:92:0F:7B:8D:46:81:4A:6E:B1:EF:16
Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Certificate serial: 0C0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
Manifest number: 0C03
Signing time: Sun 14 Dec 2025 18:24:27 +0000
Manifest this update: Sun 14 Dec 2025 18:24:27 +0000
Manifest next update: Sun 21 Dec 2025 18:24:27 +0000
Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: Aopj+CXWDFgMUExemcI1d7VjvGwMS7xKnvCZA520tNs=)
2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: RnlpXPDYIPfGNZjOgLnab/vPRagmWGYMa1TJEw32Q5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Dec 2025 18:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3086 (0xc0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Validity
Not Before: Dec 14 18:24:27 2025 GMT
Not After : Dec 21 18:24:27 2025 GMT
Subject: CN=693f00db-07bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:08:56:9f:c6:b9:c4:13:47:2b:9b:1a:48:
af:c8:74:35:63:82:f0:0b:8b:c5:62:32:45:32:92:
75:53:9a:1d:db:1c:da:96:f8:1e:8f:de:9d:32:a5:
d2:98:d1:e0:fe:36:a3:b2:fe:ad:c9:fc:e5:4f:4a:
7d:30:0a:32:2e:7c:6b:e6:22:a6:49:30:90:6a:85:
cd:0c:8e:42:a0:99:06:86:15:55:62:96:b8:d5:5a:
d1:ac:99:5b:da:44:ad:48:1e:49:c5:e0:18:05:a1:
5e:96:46:1e:3c:6a:13:fb:6f:1d:2e:01:b1:1f:36:
09:e2:00:1e:40:4e:57:90:f6:28:48:7d:bd:c3:1d:
fa:3b:55:da:47:e3:c1:b5:47:f3:ea:28:76:69:60:
75:10:5b:f2:b4:72:fb:89:77:78:b0:e5:ef:b2:2a:
f7:d1:eb:e5:89:fe:55:8c:fe:48:f7:8e:75:fe:21:
ec:4d:a9:a9:b1:a3:76:9b:d3:ef:8c:6b:98:3d:85:
59:87:ab:cd:53:97:11:23:7c:c8:f1:24:11:0a:2b:
26:53:1d:27:e8:f8:70:a2:6e:58:7c:a7:69:e7:1d:
04:e3:17:aa:f8:86:a3:57:06:7a:dd:4b:5b:42:12:
5e:01:8b:9d:ef:ab:d8:7d:13:69:7e:df:09:a9:38:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0B:23:FC:30:7C:10:21:07:92:0F:7B:8D:46:81:4A:6E:B1:EF:16
X509v3 Authority Key Identifier:
keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:e9:b3:fc:34:47:90:d1:6f:39:04:d8:07:b6:9a:c8:06:9b:
06:a9:27:85:61:54:66:02:8f:17:27:14:47:15:77:4b:7d:73:
0f:88:48:ef:4a:4c:ad:af:d1:1d:97:3e:57:ac:5c:5e:1b:2a:
14:53:c7:40:9f:ab:5e:14:61:bd:ef:91:1b:26:88:81:38:0b:
44:8a:03:dd:4d:ad:9c:88:48:9e:4f:4a:2a:93:7b:e3:1b:bc:
5d:56:80:39:c3:ef:ac:7b:c5:1f:5f:fe:28:c9:55:9a:eb:74:
34:cb:eb:db:40:33:b2:30:a0:79:24:98:3c:be:4d:b9:4c:40:
de:26:65:91:3e:8f:bf:1f:1f:37:7d:48:51:9d:ca:97:cf:92:
2b:80:6b:48:61:c1:0f:18:39:9e:99:28:b3:92:78:f2:f0:a7:
cf:cb:b1:7d:38:3c:3f:78:59:c1:69:51:65:e1:31:14:31:28:
2a:33:61:07:65:7c:21:a5:62:5b:4a:4c:3d:d1:de:69:8e:b0:
cb:a4:e6:af:d1:de:3b:e4:db:25:6a:86:fc:93:62:3c:e7:a2:
e7:58:8b:47:86:e6:1d:89:a7:26:d5:34:a2:93:4d:90:a1:3f:
c6:a6:61:cd:bc:36:2d:10:f0:d7:90:be:5b:c4:bf:5a:22:c1:
c3:b9:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 16:53:22 2025 by rpki-client