This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
File: F6I2W2QK2rIDQznh5f80TkeLWJg.mft (raw, json)
Hash identifier: BslVpuBmaXTFOSInhGDv8KuVC2EAgQrFlg7me04aDqY=
Subject key identifier: B8:CD:75:93:0A:10:1E:20:D5:AD:B0:A5:38:26:B9:84:11:47:BB:B2
Authority key identifier: 17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98
Certificate issuer: /CN=A91E1BB0/serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898
Certificate serial: 0A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
Manifest number: 09
Signing time: Wed 03 Dec 2025 06:10:47 +0000
Manifest this update: Wed 03 Dec 2025 06:10:47 +0000
Manifest next update: Wed 10 Dec 2025 06:10:47 +0000
Files and hashes: 1: F6I2W2QK2rIDQznh5f80TkeLWJg.crl (hash: KN9/T5DPrH7TiRTqr2YV23vWOulm3OAteuenTnWVV2U=)
2: CAA5A90CC47811F0833DFF5DC4F9AE02.roa (hash: qXETRU+GynJDK8p52SWay/hILThEiMclY+eMG2SJhMY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl
rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 06:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E1BB0, serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898
Validity
Not Before: Dec 3 06:10:47 2025 GMT
Not After : Dec 10 06:10:47 2025 GMT
Subject: CN=692fd467-9769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:03:d2:b4:e6:72:fd:81:f3:ce:9c:00:31:4a:
6a:04:5a:a2:4f:cc:82:0f:ad:1c:f4:96:10:b7:4f:
11:c3:b3:d9:2b:f0:71:71:dd:72:a4:25:3c:2f:1c:
9c:90:a3:78:fd:ba:f7:fa:d3:98:65:25:f6:ac:97:
18:4a:de:8e:a1:77:85:02:72:b6:94:e9:68:db:58:
7f:d6:35:90:4a:42:10:76:95:ca:d8:b4:29:0c:aa:
92:1d:bc:43:70:ef:b3:d6:27:a6:c3:59:31:08:54:
59:dd:d9:fd:a5:2d:85:ef:94:73:0f:e6:83:0e:0d:
e9:92:f5:2a:cd:61:6a:9e:47:b9:07:cb:1c:5e:b1:
bf:f8:b0:e2:dd:df:89:00:d9:1a:4d:1a:37:9d:4b:
95:ed:da:9e:b0:71:01:c7:9d:c8:4a:bb:d5:53:e8:
31:f1:8e:24:e1:b1:eb:76:4c:70:80:9c:1c:cd:f2:
48:8e:17:24:d1:5f:80:ff:9d:88:50:36:ff:c0:ed:
79:cb:77:fd:37:e5:a1:88:1a:54:7c:e7:d6:a6:96:
1a:78:d3:25:6c:14:a3:ff:e4:14:69:23:3d:9c:5e:
54:9e:63:79:a4:43:68:2b:8c:0b:1e:91:9b:8b:43:
e2:a5:49:76:61:1f:c7:87:ce:f5:e4:50:e7:ee:c3:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CD:75:93:0A:10:1E:20:D5:AD:B0:A5:38:26:B9:84:11:47:BB:B2
X509v3 Authority Key Identifier:
keyid:17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0e:a0:f2:74:38:a3:83:a7:2f:93:6a:ee:95:47:4a:cd:ad:
7f:d5:1f:79:1c:19:84:d9:e5:12:f8:ca:c8:ea:f2:e8:b5:71:
b1:b7:fd:4c:a1:34:64:06:12:f2:a5:de:dc:9e:fd:12:55:a5:
ee:93:22:34:ce:1f:45:f7:1c:5c:9a:f0:b9:98:ed:04:db:98:
15:3a:00:d2:32:fe:80:56:b6:ce:7a:db:03:3d:13:b2:8b:a2:
91:80:65:44:8a:0b:9e:e4:cc:98:1a:28:8a:ab:fe:04:85:ed:
c3:2e:59:3c:69:a9:dc:e5:61:42:f6:06:29:ef:d0:f9:67:9c:
82:36:a6:c8:ab:2f:9e:55:de:d6:47:08:92:12:18:ad:04:a0:
a8:6b:20:03:26:96:44:7a:eb:8d:31:c6:59:be:3f:0e:2b:e2:
9b:16:93:94:1f:eb:e1:1d:fd:b8:28:a6:a7:b6:75:d0:1d:6a:
83:31:0b:03:5b:38:49:b6:48:c8:fe:1d:8d:66:a9:40:67:f4:
d3:4d:60:a2:a9:5d:97:74:ab:5a:81:1a:72:46:ca:c2:cf:b8:
47:2e:ae:52:fe:09:a1:5a:42:d5:bc:af:ac:7c:2d:4e:85:db:
df:eb:68:fc:da:87:1b:b4:f8:58:d5:ed:7c:4c:ba:ca:9e:8b:
a7:9d:eb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:00:12 2025 by rpki-client