This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
File: a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft (raw, json)
Hash identifier: HzXVvn/K6uKP2IxCBIa2wuGTu7Ntt9W8Ay5d99byhZY=
Subject key identifier: EA:77:B6:E3:AD:28:B3:1A:22:34:D4:48:0F:2A:CD:96:B4:7D:07:59
Authority key identifier: 6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
Certificate issuer: /CN=A912AF79/serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Certificate serial: 01DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
Manifest number: 01D8
Signing time: Sun 07 Dec 2025 01:15:40 +0000
Manifest this update: Sun 07 Dec 2025 01:15:39 +0000
Manifest next update: Sun 14 Dec 2025 01:15:39 +0000
Files and hashes: 1: a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl (hash: QXf46cy1DaAnF6mCB61L8g59BJdOv9yUX88/E0Kksxw=)
2: 476C306204A711EEA68A0D2FC4F9AE02.roa (hash: RyO6brDZcon28lskHekrQI6icOmLyy8RHSVJF6PV6RM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 01:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476 (0x1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AF79, serialNumber=6BD8C0A11500B3CA0FEC4A9FD340C3120595B0C7
Validity
Not Before: Dec 7 01:15:39 2025 GMT
Not After : Dec 14 01:15:39 2025 GMT
Subject: CN=6934d53b-5052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:cf:05:48:a6:8c:ab:dc:07:03:b2:91:a7:
ca:d7:c4:df:90:92:11:ff:9d:8e:ac:26:66:c7:25:
c6:14:ef:25:e6:58:85:10:8c:18:66:a8:28:c7:6a:
48:ba:e2:91:be:47:d1:7a:74:b1:7d:0e:50:29:1a:
18:21:0e:61:51:d4:99:51:34:25:20:13:a1:9d:69:
63:c2:03:c6:30:bb:e3:eb:cd:02:36:dd:29:62:06:
64:2b:63:0b:29:34:78:fd:60:88:66:2f:c8:f5:48:
92:d4:21:fd:f2:d2:df:d2:44:85:a5:2e:4e:11:7a:
08:b5:84:69:9a:ec:71:16:db:81:66:21:f1:7a:63:
49:5d:8c:42:2c:01:6a:f1:09:06:cb:28:7f:e6:91:
24:f4:73:f7:93:82:05:cf:bf:e6:f8:4c:7b:b4:12:
35:b3:e4:d8:d7:07:7a:c2:23:c4:18:1f:ab:07:40:
c9:e5:bc:e8:1a:e8:65:bc:7d:b4:bf:b2:65:f5:f2:
a6:77:e8:a6:79:74:f2:15:8c:11:bf:56:6b:87:3c:
86:29:f0:e9:22:ab:19:fa:07:db:2e:92:ee:a4:41:
7c:06:20:36:d3:a5:fa:86:79:8e:80:33:5a:dd:b0:
e1:4d:17:1b:f9:bd:66:02:87:3e:70:74:48:81:e4:
e3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:77:B6:E3:AD:28:B3:1A:22:34:D4:48:0F:2A:CD:96:B4:7D:07:59
X509v3 Authority Key Identifier:
keyid:6B:D8:C0:A1:15:00:B3:CA:0F:EC:4A:9F:D3:40:C3:12:05:95:B0:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a9jAoRUAs8oP7Eqf00DDEgWVsMc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AF79/D0F86D72FE0411ED905E216BC4F9AE02/a9jAoRUAs8oP7Eqf00DDEgWVsMc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:20:2c:33:7d:28:e8:dc:46:c3:b3:fe:6c:3d:0d:36:86:93:
b1:c1:ac:4b:80:38:6c:62:71:a3:4c:d0:fe:b6:a6:3d:a7:5b:
6f:ea:81:d7:59:74:3c:95:9b:d7:f1:b2:7f:1b:bd:18:7f:29:
8b:bf:5a:aa:ec:6e:e4:d8:ff:e7:d5:b9:70:94:7b:a9:db:9e:
fd:79:5e:4d:7e:98:c9:13:b1:09:99:48:16:35:f9:72:07:5d:
b9:47:98:ad:78:cc:0a:96:c7:1a:18:94:04:b1:e0:ff:59:c3:
a9:5a:7d:4d:2c:74:c3:82:02:9f:64:d4:16:a4:7e:e1:5a:af:
3d:0b:c3:59:fe:9a:ca:4d:c7:9b:47:27:a3:30:33:69:b5:08:
b7:9f:d7:a6:58:3a:3d:72:e8:d1:25:9b:93:a3:d2:59:e8:c0:
68:dd:66:ac:b8:b2:aa:3b:04:57:db:26:43:1f:f7:84:87:34:
bb:14:9e:09:d6:c3:84:4c:96:cd:69:9a:1e:3c:16:a8:ae:f4:
18:8d:ef:fa:33:f5:5c:f2:36:5f:c7:40:0b:81:74:53:81:5e:
79:55:f6:f9:0c:b0:b2:0b:47:6c:2f:7f:64:84:b8:e4:b8:13:
0d:a0:82:19:48:c0:3c:e2:51:44:cf:e9:dc:7f:c6:23:a4:4a:
ed:63:47:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFGNzkxMTAvBgNVBAUTKDZCRDhDMEExMTUwMEIzQ0EwRkVDNEE5RkQzNDBDMzEy
MDU5NUIwQzcwHhcNMjUxMjA3MDExNTM5WhcNMjUxMjE0MDExNTM5WjAYMRYwFAYD
VQQDEw02OTM0ZDUzYi01MDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxQDPBUimjKvcBwOykafK18TfkJIR/52OrCZmxyXGFO8l5liFEIwYZqgox2pI
uuKRvkfRenSxfQ5QKRoYIQ5hUdSZUTQlIBOhnWljwgPGMLvj680CNt0pYgZkK2ML
KTR4/WCIZi/I9UiS1CH98tLf0kSFpS5OEXoItYRpmuxxFtuBZiHxemNJXYxCLAFq
8QkGyyh/5pEk9HP3k4IFz7/m+Ex7tBI1s+TY1wd6wiPEGB+rB0DJ5bzoGuhlvH20
v7Jl9fKmd+imeXTyFYwRv1ZrhzyGKfDpIqsZ+gfbLpLupEF8BiA206X6hnmOgDNa
3bDhTRcb+b1mAoc+cHRIgeTjawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOp3tuOt
KLMaIjTUSA8qzZa0fQdZMB8GA1UdIwQYMBaAFGvYwKEVALPKD+xKn9NAwxIFlbDH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUY3OS9EMEY4NkQ3MkZF
MDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4b1A3RXFmMDBEREVnV1Zz
TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E5akFvUlVBczhvUDdFcWYwMERERWdXVnNNYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QUY3OS9EMEY4NkQ3MkZFMDQxMUVEOTA1RTIxNkJDNEY5QUUwMi9hOWpBb1JVQXM4
b1A3RXFmMDBEREVnV1ZzTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeICwzfSjo3EbDs/5sPQ02hpOxwaxLgDhsYnGjTND+tqY9p1tv6oHX
WXQ8lZvX8bJ/G70YfymLv1qq7G7k2P/n1blwlHup2579eV5NfpjJE7EJmUgWNfly
B125R5iteMwKlscaGJQEseD/WcOpWn1NLHTDggKfZNQWpH7hWq89C8NZ/prKTceb
RyejMDNptQi3n9emWDo9cujRJZuTo9JZ6MBo3WasuLKqOwRX2yZDH/eEhzS7FJ4J
1sOETJbNaZoePBaorvQYje/6M/Vc8jZfx0ALgXRTgV55Vfb5DLCyC0dsL39khLjk
uBMNoIIZSMA84lFEz+ncf8YjpErtY0ee
-----END CERTIFICATE-----
Generated at Sun Dec 7 06:32:39 2025 by rpki-client