This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json)
Hash identifier: aSwwlQddvSZax2j3PVWjSIzwgjMskKjnsZqy0BeEGOg=
Subject key identifier: 68:C5:61:94:10:CB:A1:B8:D5:43:53:A7:96:F8:B2:11:20:07:EB:C0
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial: 0872
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
Manifest number: 084B
Signing time: Thu 04 Dec 2025 15:43:43 +0000
Manifest this update: Thu 04 Dec 2025 15:43:43 +0000
Manifest next update: Thu 11 Dec 2025 15:43:43 +0000
Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: mkm+5zUhd8xSBkVHpZIVzqg0PIWCe6jBpJ1hmMUEpJc=)
2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: tG1HGaU5DUimsEMDFRA50jlq68FCzHx0C3arFNqcuaY=)
3: 0CC38EEC80E711EBB8CFF825C4F9AE02.roa (hash: MfRtvCwn59famvfu05RMk6NPUwzQW1gti+aq8XhNzyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 15:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Validity
Not Before: Dec 4 15:43:43 2025 GMT
Not After : Dec 11 15:43:43 2025 GMT
Subject: CN=6931ac2f-3370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:ca:a3:40:51:39:70:d6:ce:32:9f:8c:13:
39:d2:d5:82:1b:c4:3d:52:73:4b:86:31:9e:64:22:
ac:73:6d:13:b9:b1:83:5f:0c:e7:18:60:e8:67:ff:
df:57:a1:28:8d:df:79:3c:27:ed:fa:76:0e:d4:38:
fd:52:bc:2c:a3:79:70:82:6c:c4:6d:5d:44:c0:d7:
cb:dd:98:74:ad:92:1c:b6:f3:10:6e:19:a6:4c:cd:
de:86:ea:62:3a:1e:96:df:43:4f:86:de:8d:c2:85:
e0:11:4d:ad:67:d3:c3:c9:d8:09:39:75:c5:fb:c4:
d0:d8:d4:60:7c:b4:6a:c1:74:48:77:ac:60:80:16:
6d:4e:fa:40:e1:3d:90:dd:20:92:a5:b8:32:72:c1:
44:3b:35:6b:ce:9c:1d:cc:7f:19:26:cb:3a:c8:2a:
ef:41:ca:ef:d1:d2:ee:95:bc:ce:64:cc:03:dc:05:
40:ff:64:ff:a1:c1:25:0a:9c:5b:f7:97:a3:3f:a4:
41:75:f1:ba:1e:cb:72:7d:a2:ca:b2:ea:3f:1a:0d:
cb:bf:15:31:35:09:08:49:6b:47:c2:13:6b:a5:7d:
1c:3f:fe:61:30:9c:25:c7:e0:65:82:6e:39:fd:eb:
92:67:19:7a:ac:ba:82:da:c7:fb:4e:2d:b9:9a:83:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C5:61:94:10:CB:A1:B8:D5:43:53:A7:96:F8:B2:11:20:07:EB:C0
X509v3 Authority Key Identifier:
keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:9f:b7:71:52:a7:07:6f:5a:ee:4a:52:18:e9:59:2e:20:e5:
97:4a:21:08:d6:19:8d:7e:8d:ec:93:1a:32:30:f2:20:3f:f0:
7b:88:c3:1d:dc:d9:37:ec:c9:8e:5e:f7:6b:68:24:af:41:01:
d2:df:25:fa:79:4b:98:2e:c1:a0:2d:9a:ef:93:7c:70:8a:c4:
f9:c0:c6:b0:27:3a:c5:19:84:5d:54:0e:55:1e:1d:c1:93:85:
60:5a:d9:61:f4:1f:0b:51:4a:12:37:6c:ab:83:13:87:66:0c:
a8:04:dd:7c:f2:f1:55:80:dd:25:26:1d:cf:51:f3:60:4d:92:
ce:80:0d:d0:1d:90:e2:4a:f1:32:5b:44:64:cd:3e:78:50:36:
9e:7d:6f:a1:9d:c9:9f:6c:ed:66:01:d3:d1:8f:ca:a1:b8:1f:
e9:48:71:e7:d6:3b:46:79:fe:2e:08:86:32:ae:31:23:e6:83:
cc:2e:41:aa:9e:88:79:bf:ba:32:84:fd:ee:f5:a2:b2:bc:59:
d2:ad:a8:62:39:26:3b:1c:a1:8a:55:b6:db:88:b0:83:dc:ed:
7f:ad:5c:56:59:a1:7c:84:7d:83:54:a0:33:fa:35:ef:57:26:
41:15:a6:16:23:48:ee:12:78:aa:c0:69:20:39:c8:23:85:85:
37:5c:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:00:59 2025 by rpki-client