This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft
File: q6TDlMi5vRUbOziWObjG_4BwSfI.mft (raw, json)
Hash identifier: HD0dwp1lM3V7hbt+DaS6ot8rJgCcAkO3pX4uxzSHhkU=
Subject key identifier: 15:7E:48:3A:1E:D2:9B:DB:E5:FB:86:6E:25:03:E6:38:4F:9B:B6:4F
Authority key identifier: AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2
Certificate issuer: /CN=A91F77FC/serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2
Certificate serial: 0E69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft
Manifest number: 0E60
Signing time: Mon 22 Dec 2025 17:25:16 +0000
Manifest this update: Mon 22 Dec 2025 17:25:15 +0000
Manifest next update: Mon 29 Dec 2025 17:25:15 +0000
Files and hashes: 1: q6TDlMi5vRUbOziWObjG_4BwSfI.crl (hash: kjaO0P67aincoyEoRCH5op7k11kgv59uLFzd+eGaejE=)
2: 70783ACCAF3411E99DF2F83EC4F9AE02.roa (hash: zDcQXuAykU10DhyikYZPwzsk10KGNkvQLJMhbZSIlBE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl
rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3689 (0xe69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F77FC, serialNumber=ABA4C394C8B9BD151B3B389639B8C6FF807049F2
Validity
Not Before: Dec 22 17:25:15 2025 GMT
Not After : Dec 29 17:25:15 2025 GMT
Subject: CN=69497efb-c659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e6:ea:9f:ea:c8:70:0e:13:57:81:04:8b:72:
9c:73:55:fd:2f:00:70:97:70:df:39:5f:c2:bf:f3:
36:2b:f5:b1:b8:be:1e:88:22:ca:4e:4b:41:ab:c8:
83:87:5a:5c:c7:fe:ae:b4:3c:07:a0:ef:45:58:03:
16:08:69:4a:e5:e9:4b:50:16:4b:26:21:91:c4:fd:
d0:0a:af:6f:1a:d4:29:56:3c:ca:56:fb:0f:d3:ec:
10:ef:78:47:32:99:fd:fe:5b:7f:6f:52:53:c4:6d:
c6:3d:1a:03:39:5f:1e:b8:88:82:0c:53:03:09:b2:
ab:7e:df:f5:0a:3f:5e:c8:71:2e:bc:04:68:b9:a2:
f2:c8:69:7a:19:92:3e:43:fd:d9:a4:ed:a8:3a:2c:
c7:d9:c7:e7:c1:02:16:58:af:dd:d1:26:69:d4:b7:
1f:38:46:31:c2:28:ac:82:cb:0d:a7:b5:a7:c6:b6:
cd:57:ee:c0:13:62:96:8c:e8:f9:9f:4a:8e:a2:47:
cb:5c:98:9d:82:ee:81:90:93:3c:50:16:43:1d:c5:
8c:18:3a:d2:86:5b:af:9d:5f:68:a1:de:8f:d7:99:
8d:ee:92:ee:1e:1b:b8:e0:fc:d1:ab:44:84:cf:a1:
40:a5:58:42:ce:c8:13:97:e2:2b:8b:af:0f:ac:0d:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7E:48:3A:1E:D2:9B:DB:E5:FB:86:6E:25:03:E6:38:4F:9B:B6:4F
X509v3 Authority Key Identifier:
keyid:AB:A4:C3:94:C8:B9:BD:15:1B:3B:38:96:39:B8:C6:FF:80:70:49:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6TDlMi5vRUbOziWObjG_4BwSfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77FC/FED90156AF3011E9AEE13E34C4F9AE02/q6TDlMi5vRUbOziWObjG_4BwSfI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:c9:7c:ad:bd:2c:ac:f1:d6:c5:1f:5b:42:48:82:16:1d:ca:
d8:82:48:42:75:5e:3d:42:34:0a:b3:29:fa:66:61:f3:8a:a9:
89:a9:0b:20:e0:af:45:f0:e2:a6:a8:10:af:3c:c8:7e:3d:4b:
92:bb:88:c6:b3:69:bb:d2:00:35:03:94:9b:eb:2a:7b:f6:7f:
75:14:3e:a4:d1:db:ea:73:0f:02:99:05:e1:35:a8:d1:fb:33:
fd:5e:72:3a:06:34:01:ab:4f:b4:94:0c:78:ab:04:77:40:8e:
72:18:f8:fe:9f:c5:39:63:8d:66:e6:38:af:b1:dd:cf:7c:0e:
cd:d3:6a:a2:18:1c:b4:31:5d:eb:c7:5f:e9:1d:e4:07:b7:3c:
0d:1b:c0:20:f7:8c:0b:f7:63:92:5b:27:0a:8f:a1:96:d3:32:
d7:1d:77:9e:75:a2:64:b4:d6:b5:0f:1f:11:3a:65:66:6b:02:
0b:fe:18:03:30:5e:9a:04:2f:d4:c6:bc:21:11:88:73:3c:02:
c8:a2:7d:ab:ba:72:60:5c:de:35:49:e6:31:9f:99:63:b3:7e:
53:6a:1f:91:8b:93:1e:e5:cc:df:a4:36:c0:0d:23:ad:41:29:
17:52:2e:60:c0:28:7b:6c:ad:c1:30:b3:3e:ef:d1:47:92:fb:
70:6d:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:35:07 2025 by rpki-client