This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json)
Hash identifier: f2PRYWH5T3LrpVCUL8dWIn46F8AVrehEenSxw0p8HBU=
Subject key identifier: E2:D6:7C:32:E9:BC:8A:85:32:E9:4F:FD:9D:5F:9B:A6:D8:34:EF:28
Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Certificate serial: 089D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
Manifest number: 088B
Signing time: Thu 04 Dec 2025 19:41:46 +0000
Manifest this update: Thu 04 Dec 2025 19:41:45 +0000
Manifest next update: Thu 11 Dec 2025 19:41:45 +0000
Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: Tn2dr3Dzpxu0dlWe8SFU1hFrcN/QJ6MJejQSYr9+HQg=)
2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: p0dIujYYWiasSIWvw6oLscevhcZ90zAQp0NU1grDjpM=)
3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: p+z2UT/W5OYfrXw3co6VYs+yj2ELqUUcJwCs0uSGYiM=)
4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 44y5fkFaBcGQTsnME/P81706WXBnFbq6HjZsUti9jmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:41:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2205 (0x89d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Validity
Not Before: Dec 4 19:41:45 2025 GMT
Not After : Dec 11 19:41:45 2025 GMT
Subject: CN=6931e3f9-99fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:2b:9d:94:9d:dd:d3:22:3c:da:7c:1b:9c:
d1:8e:e5:8a:60:ea:79:9d:b0:38:35:ca:f0:9d:ac:
b4:c4:11:95:5f:c5:c1:c4:84:85:92:6c:29:1c:0b:
8e:5e:8a:f8:5b:9b:e1:79:12:c6:1a:5e:d1:75:c1:
05:39:4b:38:93:43:18:c3:a6:30:85:ca:42:a4:a1:
7d:0a:c5:f6:29:ce:71:f5:a3:fb:2a:51:85:43:92:
2b:6f:19:63:10:fa:4e:9c:7a:b9:76:b1:81:62:fb:
a5:75:fe:6a:de:fe:04:9f:62:b8:ce:55:a7:a0:9a:
8e:73:ee:22:10:03:f1:d8:48:f4:02:34:ca:fb:35:
14:a1:74:c4:76:eb:d6:23:c3:1e:0f:3b:a1:4c:61:
c3:b6:c3:40:22:68:4b:04:c0:1a:11:e7:2f:7c:a9:
0e:ac:cf:1e:5e:e8:9a:1b:bc:63:ea:5d:6d:4a:95:
ab:27:ff:4d:69:de:74:a8:90:46:b1:a6:48:d2:f1:
c2:9b:28:72:85:3c:e0:23:86:15:fe:73:94:45:98:
1f:ec:5f:a6:6b:9d:7a:17:80:7e:ab:d6:f1:b1:c5:
78:94:7d:30:f3:4a:da:5a:85:86:19:e6:00:d8:9f:
97:a4:b1:07:d9:5d:17:73:f9:50:88:eb:bf:4b:96:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D6:7C:32:E9:BC:8A:85:32:E9:4F:FD:9D:5F:9B:A6:D8:34:EF:28
X509v3 Authority Key Identifier:
keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:fc:ac:40:b5:b3:d1:83:11:49:aa:1e:0c:9f:58:ff:01:76:
2e:e1:58:60:ad:c6:46:4a:b2:ba:b7:94:87:39:c3:5d:7d:c8:
36:8a:fe:9b:f3:d4:12:2d:e5:de:12:18:fc:f4:7d:92:2f:7c:
4a:c4:9c:bf:32:a6:f8:c0:9f:5e:c7:33:15:e6:9b:b5:4f:f7:
70:26:07:6c:45:70:1c:2b:f6:aa:bd:91:e8:f2:e2:d6:81:d6:
b4:b1:9a:1e:6f:e2:27:b8:9d:dd:8e:2b:e8:63:eb:7f:f5:bb:
a8:d2:6c:02:e9:e2:f1:4c:21:22:76:87:50:99:30:22:84:ba:
8b:12:17:67:f5:b5:f4:48:9f:c0:08:82:43:a1:18:dc:33:da:
74:9c:b0:d9:fa:03:f5:47:81:01:9c:4e:ce:5a:cf:ea:6f:9d:
5d:f4:af:3b:4a:85:9a:74:9b:a1:3f:c8:71:68:a0:47:10:9b:
c8:e9:f7:fe:2c:0f:f8:e6:f3:6e:1f:0e:91:b4:ff:f1:da:4c:
57:fd:10:27:ca:e7:a3:a7:27:7b:a8:03:1d:95:85:62:6f:6f:
76:26:1a:2c:9c:f2:8c:b7:43:0c:7d:45:ec:2b:8c:b0:4d:e4:
f4:a9:aa:b9:91:87:11:60:fb:ae:98:b4:e9:1a:3f:a1:9f:4d:
87:f8:11:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:27:15 2025 by rpki-client