This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
File: D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json)
Hash identifier: rHfexqij30gOnTvAM3NdSSopx9co3ymextnKcnMAdPU=
Subject key identifier: C8:FA:07:68:58:72:9E:AF:79:74:D4:24:78:B2:EF:E1:87:48:65:12
Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93
Certificate issuer: /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
Manifest number: 6B
Signing time: Fri 05 Dec 2025 04:51:29 +0000
Manifest this update: Fri 05 Dec 2025 04:51:28 +0000
Manifest next update: Fri 12 Dec 2025 04:51:28 +0000
Files and hashes: 1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: dxe0dMxxHhBZ2slUaMt4ij23pspHXhoK4pk0EDlR5ME=)
2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: dUOsQ8A8T6M3HiMz0rMI1OFkO2hKKT8HDlrVYJlbsAA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl
rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093
Validity
Not Before: Dec 5 04:51:28 2025 GMT
Not After : Dec 12 04:51:28 2025 GMT
Subject: CN=693264d1-6df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:cc:4e:18:22:3a:a9:0c:61:6c:a1:a8:f1:
c1:9c:3c:81:3c:04:c1:10:14:e6:1a:99:a7:6f:99:
fc:99:22:2b:c2:2f:d7:ac:79:a0:c5:d7:43:e8:36:
d8:bb:5a:43:f0:a2:8d:15:f5:8b:ac:4d:2f:ee:c9:
9d:59:5f:2a:ef:8d:b4:34:be:38:3f:58:b8:16:cd:
01:57:96:b5:5a:b7:04:ba:8c:f2:40:b8:82:6c:dc:
14:d5:1e:77:3c:8e:c6:da:6e:ef:21:84:0d:e8:28:
4e:55:e7:ee:f8:0c:93:86:92:de:58:55:38:30:26:
da:69:c5:3f:8b:84:2d:94:7f:b3:86:54:c4:61:06:
81:8b:74:e3:67:05:af:36:41:ef:f3:ad:6d:42:39:
31:ef:8c:fc:6e:01:9a:a9:08:91:9f:d5:81:52:cf:
f2:18:be:ad:84:e8:ac:08:62:e8:38:50:d7:b4:fa:
af:16:2a:13:9c:41:b1:cd:92:11:3e:67:22:d9:89:
69:2f:7f:1c:10:70:fd:36:92:85:3f:e2:aa:b1:51:
57:07:2c:bb:b8:ea:a5:9f:f2:1d:e6:99:e0:67:94:
c5:0c:f2:11:25:47:15:83:da:f2:8c:e2:43:fb:76:
e9:b9:b9:6d:7f:8b:99:e3:6b:fe:49:c8:ab:69:43:
06:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FA:07:68:58:72:9E:AF:79:74:D4:24:78:B2:EF:E1:87:48:65:12
X509v3 Authority Key Identifier:
keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:23:c2:cc:98:f8:ea:46:33:25:97:0f:ef:db:0c:c9:46:84:
83:98:54:60:52:2d:b6:f4:c3:c5:8c:78:44:43:f7:e3:a9:34:
51:66:51:69:02:9c:e4:69:bc:1d:9c:25:a8:26:63:4f:18:96:
6f:0a:61:e8:12:c5:bb:4e:9e:66:82:2c:86:46:e0:57:91:4e:
c2:d5:a5:7c:e0:06:4f:07:5c:de:45:52:8a:80:d5:15:9f:4f:
77:db:f3:2d:2a:cd:28:f5:c3:e3:e2:cd:c1:70:1b:87:9c:8e:
d3:c9:7c:d6:98:b6:b1:09:e6:48:83:34:e4:d9:54:1a:a5:c0:
ef:10:96:3b:06:f4:34:b3:05:06:6b:71:58:4d:38:bd:9b:5e:
1e:46:57:2b:cd:b8:70:4c:f6:18:5e:0c:1d:8e:64:83:1b:04:
29:70:cb:77:48:cd:01:1b:9e:10:1c:21:15:db:35:86:7b:61:
27:0b:82:16:fd:48:51:bb:c4:bd:5f:32:36:09:86:9e:6c:b8:
fd:78:0b:c4:8c:b8:57:b8:52:d1:d2:be:d4:45:c8:37:21:bd:
75:45:cb:89:54:dd:08:8d:72:6b:e9:95:95:06:3d:78:d0:dc:
81:41:00:5f:9e:9f:26:e1:ec:82:b7:b0:ae:23:a5:38:fe:40:
19:ca:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:14:14 2025 by rpki-client