This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
File: xsGRae6n0Ga8m8py3YgwvBg6EmY.mft (raw, json)
Hash identifier: 6zjRPp8K/p8981VwJ0tQYpTowvRctq0VjZakuP+BDVY=
Subject key identifier: 63:8F:8B:53:69:1E:4F:5C:A2:7E:D3:94:03:B0:8B:CA:01:A9:C5:E5
Authority key identifier: C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
Certificate issuer: /CN=A91F1C46/serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Certificate serial: 0848
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
Manifest number: 083F
Signing time: Mon 22 Dec 2025 20:06:52 +0000
Manifest this update: Mon 22 Dec 2025 20:06:52 +0000
Manifest next update: Mon 29 Dec 2025 20:06:52 +0000
Files and hashes: 1: xsGRae6n0Ga8m8py3YgwvBg6EmY.crl (hash: u8gGXh4uT0pmEFgSFtofW4QuHe6/gfN7aDHc1cFigtk=)
2: D3EA977EF32D11EA8498822CC4F9AE02.roa (hash: W17rFdVVlgGDVf5Sl4I92TD7UhWdwp3Z8iY6u8GBaHw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2120 (0x848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1C46, serialNumber=C6C19169EEA7D066BC9BCA72DD8830BC183A1266
Validity
Not Before: Dec 22 20:06:52 2025 GMT
Not After : Dec 29 20:06:52 2025 GMT
Subject: CN=6949a4dc-c032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b6:1b:22:52:ab:20:05:2f:7f:c2:ff:bf:f3:
20:e5:43:c0:2a:b0:85:98:10:a7:eb:61:1c:05:72:
28:b5:94:91:e1:ff:e4:fc:bb:2f:f3:26:d9:17:ce:
ec:f0:b6:8c:e2:0b:d8:22:d5:42:30:4a:ad:66:e2:
74:88:ff:7b:19:37:ea:26:fe:92:08:77:74:55:64:
fd:8c:c1:78:fd:c2:6e:37:31:d6:58:63:9c:02:a3:
98:81:6a:2b:03:87:da:78:ea:81:79:e6:8d:7c:15:
91:23:57:35:92:aa:b7:0c:3f:24:5a:d5:fd:09:10:
be:e9:23:d3:f8:93:39:65:10:fd:d2:fc:86:de:47:
55:dc:73:c0:b7:f5:e9:e3:27:d8:43:78:6a:88:5d:
19:a3:25:9c:a9:c8:47:ac:42:c2:91:dc:b9:50:e5:
78:95:2b:65:8f:24:26:5d:89:0d:d7:55:61:cd:d2:
43:17:d1:88:7d:d3:76:ac:40:08:9f:ea:bf:a8:e4:
9e:4a:46:67:d5:b6:33:73:19:45:0e:78:28:1a:10:
76:e0:0e:b7:2c:ae:63:c5:5c:96:63:97:35:df:d3:
c0:05:51:54:e2:de:e8:b9:27:64:f6:94:f5:fe:30:
88:1c:4b:ee:4a:31:f3:3d:a5:d5:7c:d7:b2:53:83:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8F:8B:53:69:1E:4F:5C:A2:7E:D3:94:03:B0:8B:CA:01:A9:C5:E5
X509v3 Authority Key Identifier:
keyid:C6:C1:91:69:EE:A7:D0:66:BC:9B:CA:72:DD:88:30:BC:18:3A:12:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xsGRae6n0Ga8m8py3YgwvBg6EmY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1C46/05CADD16F18611EA8DEC3C14C4F9AE02/xsGRae6n0Ga8m8py3YgwvBg6EmY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:d6:b9:04:5a:d6:27:54:92:05:9f:80:ff:35:81:dd:88:38:
1e:27:a0:88:58:c6:2c:24:70:da:9b:c0:2c:79:b3:31:3b:37:
5a:03:1b:ae:cc:d3:12:9c:05:35:cf:16:ef:ee:6d:b2:34:21:
23:a6:77:14:ed:b2:22:7c:a7:45:8b:99:24:82:d4:0d:42:cb:
8a:a8:a9:cc:78:35:c3:a5:69:34:68:c2:aa:72:51:93:3f:58:
c1:35:46:c4:bb:01:54:5d:8a:e0:41:ee:ad:28:d9:c6:97:50:
3c:8c:80:eb:fb:cb:95:db:d4:90:8a:3e:bd:09:7e:67:48:50:
d9:ac:2d:3a:92:7a:87:5d:cc:c8:2b:01:0b:9c:0c:7c:76:bc:
35:c1:50:6c:65:c0:ce:87:ef:79:26:28:a7:25:91:30:91:13:
bb:be:df:8a:71:7e:11:8f:35:82:de:b2:56:5b:0a:53:f9:48:
2e:e7:2c:0f:7d:d8:de:ba:00:f4:cc:fa:1a:7c:58:bb:78:96:
dd:48:b9:1e:64:3f:9b:4f:bf:15:ec:7b:ef:0b:db:b7:d3:e4:
80:8b:17:7b:54:a0:73:94:e5:c9:6f:b0:4f:4e:9e:31:e4:01:
63:07:f4:da:6d:b7:f6:0b:db:d1:82:74:49:df:97:14:b3:b9:
cd:c1:a6:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjFDNDYxMTAvBgNVBAUTKEM2QzE5MTY5RUVBN0QwNjZCQzlCQ0E3MkREODgzMEJD
MTgzQTEyNjYwHhcNMjUxMjIyMjAwNjUyWhcNMjUxMjI5MjAwNjUyWjAYMRYwFAYD
VQQDDA02OTQ5YTRkYy1jMDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5LYbIlKrIAUvf8L/v/Mg5UPAKrCFmBCn62EcBXIotZSR4f/k/Lsv8ybZF87s
8LaM4gvYItVCMEqtZuJ0iP97GTfqJv6SCHd0VWT9jMF4/cJuNzHWWGOcAqOYgWor
A4faeOqBeeaNfBWRI1c1kqq3DD8kWtX9CRC+6SPT+JM5ZRD90vyG3kdV3HPAt/Xp
4yfYQ3hqiF0ZoyWcqchHrELCkdy5UOV4lStljyQmXYkN11VhzdJDF9GIfdN2rEAI
n+q/qOSeSkZn1bYzcxlFDngoGhB24A63LK5jxVyWY5c139PABVFU4t7ouSdk9pT1
/jCIHEvuSjHzPaXVfNeyU4OzrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOPi1Np
Hk9con7TlAOwi8oBqcXlMB8GA1UdIwQYMBaAFMbBkWnup9BmvJvKct2IMLwYOhJm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUM0Ni8wNUNBREQxNkYx
ODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBHYThtOHB5M1lnd3ZCZzZF
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hzR1JhZTZuMEdhOG04cHkzWWd3dkJnNkVtWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MUM0Ni8wNUNBREQxNkYxODYxMUVBOERFQzNDMTRDNEY5QUUwMi94c0dSYWU2bjBH
YThtOHB5M1lnd3ZCZzZFbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCR1rkEWtYnVJIFn4D/NYHdiDgeJ6CIWMYsJHDam8AsebMxOzdaAxuu
zNMSnAU1zxbv7m2yNCEjpncU7bIifKdFi5kkgtQNQsuKqKnMeDXDpWk0aMKqclGT
P1jBNUbEuwFUXYrgQe6tKNnGl1A8jIDr+8uV29SQij69CX5nSFDZrC06knqHXczI
KwELnAx8drw1wVBsZcDOh+95JiinJZEwkRO7vt+KcX4RjzWC3rJWWwpT+Ugu5ywP
fdjeugD0zPoafFi7eJbdSLkeZD+bT78V7HvvC9u30+SAixd7VKBzlOXJb7BPTp4x
5AFjB/Tabbf2C9vRgnRJ35cUs7nNwaaH
-----END CERTIFICATE-----
Generated at Mon Dec 22 22:36:43 2025 by rpki-client