This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft
File: x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft (raw, json)
Hash identifier: 7dh8xoyh+8XrtCq7JpoFL0RgD3mivgLsyozY5KDJjlU=
Subject key identifier: 68:65:9F:E7:13:69:B0:A0:98:2A:3B:89:FC:29:3C:37:9F:D7:F1:AB
Authority key identifier: C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD
Certificate issuer: /CN=A91D8BB1/serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD
Certificate serial: 6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft
Manifest number: 6B
Signing time: Sun 21 Dec 2025 06:01:21 +0000
Manifest this update: Sun 21 Dec 2025 06:01:20 +0000
Manifest next update: Sun 28 Dec 2025 06:01:20 +0000
Files and hashes: 1: x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl (hash: oA5oCgnEIUvJ+e1WoXxNm2wtOxbftUPc1D3zBI56daw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl
rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107 (0x6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D8BB1, serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD
Validity
Not Before: Dec 21 06:01:20 2025 GMT
Not After : Dec 28 06:01:20 2025 GMT
Subject: CN=69478d31-1c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:6f:8a:9a:ad:29:53:6b:de:7a:11:b0:a2:
13:ef:07:9b:e8:09:fb:06:9f:3f:f4:79:96:7d:f8:
1c:18:f9:cf:ee:55:a8:89:9d:05:80:d4:21:37:c9:
b9:d4:6b:f2:33:92:a8:e4:58:21:45:05:13:79:dc:
86:d9:1c:4a:cc:42:1f:10:51:e0:84:da:bc:e4:d2:
a3:e9:f9:eb:e7:83:c9:a6:bf:d6:09:f5:1e:47:5d:
6d:52:1c:1e:79:88:9b:ee:e3:ab:d4:8e:bb:49:fb:
c5:5f:41:be:d1:bf:cb:e1:f2:f6:87:67:26:fa:1f:
71:9b:3f:41:71:63:49:ca:29:02:58:98:31:92:51:
25:ce:ef:c7:41:fc:1d:6e:95:0d:e1:9b:3f:0d:9d:
c3:9b:89:af:6e:6c:07:ae:3b:c9:3a:8c:c1:a9:3e:
c2:23:3e:d2:16:c1:47:cc:75:1d:48:bb:6c:b8:1a:
eb:93:0c:aa:e6:f7:eb:ed:cf:55:41:e3:bf:46:2f:
67:b2:db:46:03:fa:99:93:3c:7d:c9:58:21:3a:86:
0c:ca:e9:91:99:26:ef:ef:6b:01:6b:71:2f:6d:a0:
00:32:26:ab:55:7d:c7:07:c3:6d:39:9d:d5:ea:b4:
9f:9b:af:1b:03:40:cf:d0:62:47:a3:91:17:37:84:
58:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:65:9F:E7:13:69:B0:A0:98:2A:3B:89:FC:29:3C:37:9F:D7:F1:AB
X509v3 Authority Key Identifier:
keyid:C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:30:05:d3:13:1e:e2:ee:40:35:fe:b8:0e:6f:6e:94:85:2c:
52:6e:4b:12:c5:d3:d2:db:34:0b:68:0b:85:74:08:44:97:fe:
30:3f:8b:73:c2:4d:6d:c5:8e:0e:02:32:23:f5:5d:d1:5f:88:
b2:54:f9:b5:ed:2d:66:a6:d2:68:f8:01:50:41:9e:81:b6:6a:
9b:8d:97:41:61:d5:3e:64:99:45:2e:13:5f:b9:15:28:42:ee:
30:f8:ac:0f:ac:a3:7d:f3:78:c5:cd:73:9b:4a:1b:f0:14:32:
d6:ae:74:f3:0e:2e:3c:34:13:9a:e8:21:0f:b5:a4:d0:42:fd:
7f:ba:a6:da:85:37:b4:1f:78:d1:ff:53:25:fd:2a:87:c9:d3:
95:78:47:6d:ce:8e:cb:62:f6:1e:06:2b:b5:5b:85:53:1e:f9:
8f:35:5e:c8:95:de:98:6f:e7:8e:d3:d5:e8:db:ec:23:ab:4d:
26:f2:3a:3e:27:9d:95:88:c5:06:b3:fd:79:5b:a5:4d:6d:fd:
c8:74:ba:e5:20:9f:de:46:14:f9:bb:0a:8d:56:e4:44:18:70:
4d:70:3c:7a:2c:e3:60:40:1c:36:36:e0:04:45:c0:ac:1d:bb:
c7:58:d9:29:ba:1f:2b:31:2d:f2:cc:b9:e7:0d:f0:a0:4a:a1:
78:bb:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 15:39:16 2025 by rpki-client