This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
File: 9-pxtubNBKVdrrDRWOBE3poSIWo.mft (raw, json)
Hash identifier: j/YW2muQ17bqoou3hBji23Y8WPGbCgNc1qx5fTtL0Pk=
Subject key identifier: 7C:61:17:1F:D7:58:10:A2:06:F8:CB:AE:2D:0D:49:9A:0D:A1:35:45
Authority key identifier: F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
Certificate issuer: /CN=A914976C/serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Certificate serial: FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
Manifest number: F9
Signing time: Fri 05 Dec 2025 03:13:05 +0000
Manifest this update: Fri 05 Dec 2025 03:13:04 +0000
Manifest next update: Fri 12 Dec 2025 03:13:04 +0000
Files and hashes: 1: 9-pxtubNBKVdrrDRWOBE3poSIWo.crl (hash: lKiGTq6kvdzYHYIwBhdIXYH3HK//xJ/XQJyPT/ZbiOI=)
2: D65DAE8A595C11EF8FABE750C4F9AE02.roa (hash: nYA6qJYLssodvPidYdiPlhElm9th4J64wlRbRyUbQK0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 253 (0xfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914976C, serialNumber=F7EA71B6E6CD04A55DAEB0D158E044DE9A12216A
Validity
Not Before: Dec 5 03:13:04 2025 GMT
Not After : Dec 12 03:13:04 2025 GMT
Subject: CN=69324dc1-3308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:01:48:6e:2e:b0:fa:2a:99:a4:98:c4:0e:d6:
c7:77:dc:f2:56:34:ad:0c:42:94:10:20:33:31:0f:
86:e9:35:7e:38:92:6d:2b:54:b3:24:54:00:fd:01:
fb:33:45:71:1d:27:ca:07:56:bd:dc:2d:16:9e:f5:
96:8f:3e:4f:9b:69:b9:8d:ae:c6:86:c8:16:93:33:
a2:c7:94:c8:80:ec:75:20:57:fd:58:15:e4:fe:67:
96:aa:32:40:f8:c7:86:24:29:34:0d:65:8a:66:96:
3c:fa:7a:5d:a4:f4:51:55:ae:c0:26:6b:42:66:c1:
68:5c:5c:f6:22:84:c4:e6:fc:3a:15:e3:2a:de:6b:
5c:1d:8c:79:42:32:e3:b8:58:31:e8:87:5b:aa:86:
4f:d1:7f:86:43:7c:38:82:b2:ce:5d:4d:ac:ec:bd:
2b:b4:de:f9:fd:90:4a:7f:44:55:da:9a:96:83:8e:
2a:30:f1:95:e8:15:a7:f2:9c:6d:a4:7c:f4:40:3d:
f9:d2:8f:48:82:ac:4f:37:ee:d4:1d:0a:39:59:ca:
d7:12:b0:d7:83:44:c2:29:01:07:f6:91:b1:f0:97:
e5:d7:fc:66:eb:c6:4a:97:fe:20:96:e2:c2:b6:30:
10:70:d6:94:79:ab:57:1f:12:5e:c3:1e:c4:b4:a6:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:61:17:1F:D7:58:10:A2:06:F8:CB:AE:2D:0D:49:9A:0D:A1:35:45
X509v3 Authority Key Identifier:
keyid:F7:EA:71:B6:E6:CD:04:A5:5D:AE:B0:D1:58:E0:44:DE:9A:12:21:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-pxtubNBKVdrrDRWOBE3poSIWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914976C/8350D2BC595C11EF91596350C4F9AE02/9-pxtubNBKVdrrDRWOBE3poSIWo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:15:ac:07:70:15:27:2a:57:be:16:56:da:99:a9:06:04:e5:
fb:13:d4:a5:c2:85:4c:0a:cd:8d:9b:c3:a1:b6:e4:c7:43:56:
d4:7e:54:b7:66:15:66:3b:87:ee:3e:ce:ad:90:13:5b:91:ed:
70:a1:f6:5d:e6:e9:ab:81:2d:16:b5:58:f6:fc:23:41:ed:d9:
f4:09:ff:c1:bc:ef:ef:39:2c:4e:90:62:76:a1:06:5c:53:fb:
a2:a6:e4:4f:7b:8b:29:2b:be:41:aa:76:22:fa:47:9b:3a:df:
9f:93:7b:ae:7b:a9:82:d5:5a:c4:52:9a:52:81:60:0a:31:58:
18:07:71:96:ce:13:92:2c:af:eb:f1:81:da:ae:56:fd:85:89:
b8:e9:08:09:29:06:6f:bb:75:6a:9c:4c:a1:7d:ad:a9:95:b6:
c7:85:33:1b:8f:3a:60:5a:8c:71:cf:af:74:93:e0:74:92:b3:
d8:37:a9:e4:08:5c:2b:ce:d8:19:60:73:9a:0f:5b:ef:e0:76:
ed:83:4d:11:38:62:f3:43:1c:5f:d2:44:13:8c:92:e6:aa:5a:
66:45:63:08:5e:a9:98:c8:d4:49:15:73:c2:5b:14:65:0a:17:
95:a0:0b:7e:f2:cf:94:de:ed:ed:de:ce:77:49:a3:8f:07:e8:
4e:2d:02:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:42:43 2025 by rpki-client