This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
File: 9dBHSQ3jpO3P3Df27KuUk42nxvY.mft (raw, json)
Hash identifier: lWHcyozw/pdSKKE3xWL2oM8/W1aq79QXUFy6vKa8Cnw=
Subject key identifier: 33:E3:90:2F:B3:1D:27:0B:D0:9F:14:85:0E:54:1E:1A:83:12:E7:BE
Authority key identifier: F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
Certificate issuer: /CN=A913990E/serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Certificate serial: 07F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
Manifest number: 07E9
Signing time: Sat 06 Dec 2025 20:13:13 +0000
Manifest this update: Sat 06 Dec 2025 20:13:12 +0000
Manifest next update: Sat 13 Dec 2025 20:13:12 +0000
Files and hashes: 1: 9dBHSQ3jpO3P3Df27KuUk42nxvY.crl (hash: Xl/oT5tihARu0EEAlt+Br4cXdScBhj+rkBq06NwDeoM=)
2: 86BB53D0105611EB85F56114C4F9AE02.roa (hash: KB1SASAODtHX4iXAOPqmH65jf2A2E+pYmVeLrVchSyo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl
rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2033 (0x7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913990E, serialNumber=F5D047490DE3A4EDCFDC37F6ECAB94938DA7C6F6
Validity
Not Before: Dec 6 20:13:12 2025 GMT
Not After : Dec 13 20:13:12 2025 GMT
Subject: CN=69348e59-58a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a1:a8:28:b9:dc:c2:8c:88:26:3a:ca:6e:b6:
79:ae:da:b6:8d:d5:38:02:44:79:b6:78:96:3e:e2:
7d:a7:5b:c9:cb:9f:e3:7b:cd:9c:b0:40:c8:70:e3:
04:1c:ce:7f:13:e0:2f:a4:3c:1f:00:26:9a:c0:96:
60:f4:01:34:77:7a:47:a2:ed:cd:03:6c:bc:f7:c9:
fa:da:ea:74:3f:0e:28:2f:16:86:5d:66:8e:c4:21:
7a:2e:e0:5f:9b:39:2c:c7:23:e8:e6:a8:9b:00:bd:
6e:b5:f9:d8:47:1b:bb:10:5b:28:e3:d3:ef:71:7e:
14:25:b0:41:fe:31:a8:10:a2:8c:e8:dc:80:5b:55:
cc:a4:3a:19:98:28:da:f0:f4:fb:46:78:54:9f:35:
02:a9:02:70:41:55:47:cb:c4:35:b6:21:16:4a:b4:
63:42:c6:18:e8:1e:c7:d3:1a:89:77:31:96:3b:37:
e3:a7:00:51:34:f5:71:47:ec:98:4a:7b:a4:98:a0:
9c:56:0c:90:a6:0d:a4:dd:f3:1b:dd:62:90:3c:24:
ef:24:4b:5b:76:36:28:8b:82:75:54:a4:c9:1a:0f:
60:2e:6c:e8:7d:ea:1d:14:8a:53:be:8c:2f:25:f9:
bf:b4:17:e3:f3:bd:84:d2:24:19:9e:80:55:f6:71:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:90:2F:B3:1D:27:0B:D0:9F:14:85:0E:54:1E:1A:83:12:E7:BE
X509v3 Authority Key Identifier:
keyid:F5:D0:47:49:0D:E3:A4:ED:CF:DC:37:F6:EC:AB:94:93:8D:A7:C6:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9dBHSQ3jpO3P3Df27KuUk42nxvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913990E/7E464B34105511EB80F88113C4F9AE02/9dBHSQ3jpO3P3Df27KuUk42nxvY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:55:47:82:ad:1f:7b:f8:d9:b9:7f:bc:b3:c4:cc:c1:15:04:
87:da:3a:b1:4c:55:62:5b:eb:2b:eb:2d:41:c1:dd:ff:cf:75:
6c:60:11:0e:a4:4e:06:f0:f7:3e:63:db:7b:51:94:c8:72:24:
11:bf:50:a7:0e:68:db:f2:2e:5f:80:db:7f:67:be:8b:b2:f6:
d8:0d:5a:93:cc:c9:b5:74:3d:3a:13:4d:99:1f:34:fb:12:e7:
9a:0c:06:4a:ad:91:5b:b4:26:cf:89:36:8a:cb:24:16:d3:01:
47:a9:12:48:98:07:23:16:3e:9d:76:a5:34:a9:9f:b9:ba:43:
37:35:80:b2:50:33:cd:bf:79:eb:62:cb:59:94:57:5c:5b:42:
80:3a:09:e5:3d:a9:a6:90:e8:1b:e9:ae:88:fe:d4:ba:fb:a3:
b7:54:61:3f:e8:ac:5c:f4:e8:76:cb:6d:5c:00:53:86:b9:4f:
06:af:53:62:53:f2:2c:ca:96:19:5e:50:bc:e2:e0:c6:ac:9b:
b7:52:71:fa:2b:27:71:f2:33:d9:71:5c:f0:7c:eb:e5:63:98:
d9:26:df:cf:78:35:ef:d9:56:66:2a:64:f2:d3:a8:bf:ff:3f:
5e:f0:7e:4e:c2:02:ba:cf:9d:18:c1:fc:86:77:5a:dc:ec:45:
8e:ea:fc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:47:50 2025 by rpki-client