This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
File: mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json)
Hash identifier: M56Uas4DCIuksJGzGFOIsO406zpKXqmDL92ipWop544=
Subject key identifier: 9B:E6:3E:5A:47:03:73:ED:0A:0F:9E:34:39:DC:BB:1F:98:53:6F:9A
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Certificate issuer: /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial: 0317
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
Manifest number: 0312
Signing time: Sat 06 Dec 2025 23:42:25 +0000
Manifest this update: Sat 06 Dec 2025 23:42:24 +0000
Manifest next update: Sat 13 Dec 2025 23:42:24 +0000
Files and hashes: 1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: aXUTCtCPsZZvkNhCBPjvwTgYdf4VLxQdnm+mCbpVy6I=)
2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: caDwJbItaMkMbYRFf35kercOFxduC/QaXG95XjbXJ4M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 791 (0x317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Validity
Not Before: Dec 6 23:42:24 2025 GMT
Not After : Dec 13 23:42:24 2025 GMT
Subject: CN=6934bf61-d6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:05:58:d3:67:a9:0d:15:fc:0b:ba:94:01:
ab:89:81:3b:9a:4a:8b:67:16:c0:21:06:39:a0:86:
37:45:af:a1:8c:ae:67:36:e4:17:c4:e0:e4:fe:bd:
48:05:71:2e:5f:9b:80:7e:2f:2b:c4:4d:39:4f:f3:
26:07:6c:0f:97:8a:24:7a:9e:ec:15:6e:a6:80:de:
3a:92:8b:c6:6c:62:71:63:77:2b:1f:b2:ef:28:82:
ce:8e:77:62:f9:7e:e2:d2:c1:db:3e:85:f7:8e:cb:
13:23:ac:35:d0:a7:8e:6c:65:6b:94:93:40:ae:65:
6a:65:af:44:1a:5b:09:13:a1:30:36:23:1d:73:66:
37:0d:c8:32:6b:fd:fb:0e:71:79:7d:b8:34:c5:a1:
a3:39:69:54:2a:6c:ae:d0:d9:3e:ce:f0:c4:10:f5:
6c:40:3d:8b:5b:21:74:69:a0:32:1e:a6:5a:95:dd:
64:db:cd:a9:dd:fb:26:8d:31:01:52:6b:da:07:81:
e4:9d:89:32:6b:d1:c1:e4:29:ec:f1:82:a3:d3:21:
25:62:51:da:eb:af:33:63:a5:0d:10:79:4c:f6:75:
1f:c1:7e:dd:6b:cc:70:e7:96:f1:e3:bd:51:19:c4:
0d:fa:8d:46:50:f6:16:98:a2:b4:31:35:a0:c7:19:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E6:3E:5A:47:03:73:ED:0A:0F:9E:34:39:DC:BB:1F:98:53:6F:9A
X509v3 Authority Key Identifier:
keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:b1:ed:aa:cf:6d:80:0c:34:30:3b:7c:db:44:28:e7:d7:ce:
88:54:df:71:b8:b3:ce:9f:46:dd:1a:58:ba:d2:46:e1:de:c5:
ef:52:9b:e1:68:6a:c1:21:fb:eb:ae:24:5c:b0:83:22:da:28:
41:2f:a7:68:87:77:a1:bf:40:98:2a:94:3c:12:2c:bc:29:fa:
1e:f9:c4:0a:3c:46:45:72:7e:c8:fd:d8:e4:22:b9:82:3c:d0:
80:4f:d7:54:37:5e:a9:8d:6c:35:8f:d8:c2:fb:b5:40:d7:62:
c5:b1:8b:35:c3:31:93:61:82:be:31:32:e5:e1:e4:2e:8a:db:
a9:02:82:4a:7f:72:5e:31:5c:48:61:ac:58:9c:e3:ea:a9:0b:
2b:62:91:68:0a:22:83:07:dd:4a:05:6a:4b:b8:97:df:20:b7:
32:a9:fc:66:35:c7:60:7a:a8:5b:3d:78:35:8c:58:f6:1b:d2:
0a:b8:cc:1f:8e:fc:0c:a3:2a:ce:36:0c:0e:2e:26:fc:10:63:
83:d4:49:6b:f1:b7:da:ea:2f:fa:d7:55:de:3e:8a:aa:3a:d3:
7e:f2:99:b6:9e:55:cc:7e:09:1e:4c:8f:2b:41:d3:85:29:de:
65:9f:39:bf:bd:25:51:e7:3e:7b:8f:6f:b0:9b:84:c8:ba:ba:
9c:d7:36:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjEzNDgxMTAvBgNVBAUTKDlCMUYzQTgzNUZCNDI1NTU3NjgxQ0ZENjY3NkI3MjFC
RTdBMjM4QzUwHhcNMjUxMjA2MjM0MjI0WhcNMjUxMjEzMjM0MjI0WjAYMRYwFAYD
VQQDEw02OTM0YmY2MS1kNmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo0YFWNNnqQ0V/Au6lAGriYE7mkqLZxbAIQY5oIY3Ra+hjK5nNuQXxODk/r1I
BXEuX5uAfi8rxE05T/MmB2wPl4okep7sFW6mgN46kovGbGJxY3crH7LvKILOjndi
+X7i0sHbPoX3jssTI6w10KeObGVrlJNArmVqZa9EGlsJE6EwNiMdc2Y3Dcgya/37
DnF5fbg0xaGjOWlUKmyu0Nk+zvDEEPVsQD2LWyF0aaAyHqZald1k282p3fsmjTEB
UmvaB4HknYkya9HB5Cns8YKj0yElYlHa668zY6UNEHlM9nUfwX7da8xw55bx471R
GcQN+o1GUPYWmKK0MTWgxxko6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvmPlpH
A3PtCg+eNDncux+YU2+aMB8GA1UdIwQYMBaAFJsfOoNftCVVdoHP1mdrchvnojjF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTM0OC8xMjMxMjM3RUY4
MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpWVjJnY19XWjJ0eUctZWlP
TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL214ODZnMS0wSlZWMmdjX1daMnR5Ry1laU9NVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTM0OC8xMjMxMjM3RUY4MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpW
VjJnY19XWjJ0eUctZWlPTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCvse2qz22ADDQwO3zbRCjn186IVN9xuLPOn0bdGli60kbh3sXvUpvh
aGrBIfvrriRcsIMi2ihBL6doh3ehv0CYKpQ8Eiy8Kfoe+cQKPEZFcn7I/djkIrmC
PNCAT9dUN16pjWw1j9jC+7VA12LFsYs1wzGTYYK+MTLl4eQuitupAoJKf3JeMVxI
YaxYnOPqqQsrYpFoCiKDB91KBWpLuJffILcyqfxmNcdgeqhbPXg1jFj2G9IKuMwf
jvwMoyrONgwOLib8EGOD1Elr8bfa6i/611XePoqqOtN+8pm2nlXMfgkeTI8rQdOF
Kd5lnzm/vSVR5z57j2+wm4TIurqc1zbk
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:58:14 2025 by rpki-client