This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json)
Hash identifier: qpIep2lubhyuY8VkisC1QnyM1j8hi0Khs/goC6WIDjo=
Subject key identifier: 42:E2:D6:52:EC:D4:49:5A:24:06:05:CB:82:9D:C7:01:A8:7D:00:DC
Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04
Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104
Certificate serial: 01E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
Manifest number: 01E5
Signing time: Fri 19 Dec 2025 01:51:39 +0000
Manifest this update: Fri 19 Dec 2025 01:51:39 +0000
Manifest next update: Fri 26 Dec 2025 01:51:39 +0000
Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: DogugpymJBcYYYq2Zhr+bZKr5x4uNJSyXzGvHENth/A=)
2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: /U2wldHiHrPFBo2wVFsGuIVi0YglDoRZcVdncnVvj2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl
rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 489 (0x1e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104
Validity
Not Before: Dec 19 01:51:39 2025 GMT
Not After : Dec 26 01:51:39 2025 GMT
Subject: CN=6944afab-96bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:52:e2:77:93:1a:26:2f:a6:55:2a:67:24:
c0:03:a6:74:5f:d3:41:b2:5c:a8:ee:9b:71:b9:cc:
04:d3:10:16:2e:a8:f9:fa:21:91:ce:32:17:99:98:
84:8e:48:c2:1b:71:ea:28:6f:48:fa:c7:9c:f3:33:
67:5b:99:83:e6:5d:59:01:73:d3:50:8a:ec:9f:c5:
43:10:a0:4f:97:cb:28:dd:ef:7e:eb:f0:6e:a5:eb:
17:90:bc:5c:46:63:c1:a3:cc:76:04:33:c2:00:23:
38:14:46:9e:db:8c:90:fb:48:6c:50:08:fe:8d:64:
12:40:c2:48:57:ec:b2:b3:15:c1:c8:aa:db:42:d8:
57:5b:37:d5:4e:e2:de:9a:07:2c:91:ea:54:4e:1e:
29:f6:14:ba:2d:27:b8:69:9b:d3:f2:75:63:98:3b:
f1:75:bd:93:02:ed:ed:a9:89:99:e3:a4:de:c7:c9:
fa:2c:dd:97:26:ca:ad:5e:07:71:44:9e:6f:65:8e:
82:60:85:6a:39:02:7e:9c:1c:d2:7e:ac:7e:8c:c3:
b5:e0:b7:38:e5:01:59:42:60:37:49:08:66:b4:7e:
95:66:5e:4b:9e:b3:fd:20:6f:c5:25:d0:63:9b:31:
6c:19:1b:99:17:80:87:90:05:a7:36:1e:97:6f:46:
b0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E2:D6:52:EC:D4:49:5A:24:06:05:CB:82:9D:C7:01:A8:7D:00:DC
X509v3 Authority Key Identifier:
keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:3e:17:de:a4:55:bf:fb:83:11:ed:e3:f6:76:f7:4e:47:b7:
55:3e:9e:b3:cc:ce:f2:dd:ef:c5:dc:c8:dc:64:cc:81:3f:94:
7a:9c:2a:0e:a9:59:e3:e2:86:8f:33:79:1b:d7:21:5a:4c:83:
4e:fa:4e:8f:5c:66:3c:94:36:ee:7e:6a:33:6e:d0:b3:01:8a:
b9:7e:d1:e0:d7:b4:92:85:b7:f7:a6:78:10:42:94:25:ae:b4:
f4:79:91:4e:3b:c4:d3:18:45:61:ff:c9:b4:86:1f:f7:84:94:
48:6e:50:c3:47:a9:46:4b:0a:b3:87:52:07:ab:63:82:8e:77:
35:ed:61:f7:a9:19:5f:58:75:2f:e4:87:1b:08:8f:15:f6:cc:
d9:9e:5c:c1:87:07:f4:81:e4:f7:96:b0:b1:58:d5:25:c1:18:
a5:8f:cd:e8:40:b3:ba:a7:e1:87:d8:1d:2f:da:da:ce:b6:5d:
03:fe:24:33:23:87:a3:6e:1a:83:9a:ca:b9:97:80:17:b6:03:
52:08:32:a4:e1:e5:71:93:03:74:3f:41:96:78:ba:58:b0:4c:
96:ec:fa:41:07:73:09:78:26:8a:b7:27:4f:2c:d9:fd:20:07:
d4:fb:a3:4a:cf:f7:07:9b:6a:69:ea:5c:57:54:a8:53:31:35:
ea:76:3a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:53:21 2025 by rpki-client