This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier: SMGHSnKbPxGzrL7RkEViM1EHOjMhGKmdnaGtug+UnS0=
Subject key identifier: 8B:78:4C:D7:0E:25:76:01:78:38:A0:10:86:08:BD:9B:BA:A6:23:44
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer: /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial: 356F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number: 352D
Signing time: Sat 06 Dec 2025 14:36:26 +0000
Manifest this update: Sat 06 Dec 2025 14:36:25 +0000
Manifest next update: Sat 13 Dec 2025 14:36:25 +0000
Files and hashes: 1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: 0OD9nQh6pZcnsQcxT05RfpLny4wsGqXDpbn3keo3Cow=)
2: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: V+iG3uoTEhOB1RpnqXAIwFGBw4WNdCYvL4uQOduviF4=)
3: 31745126CD1811EC917CB819C4F9AE02.roa (hash: we2qvgf2vxZ4ZPjgEZi4dnNDvsLxezsmqMuBAL4C+Nw=)
4: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: ku0ByaK/68w8G7tu0tDiWUq8Zdb9YUsOCXoz+0AOmhM=)
5: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: 4O6f6zO4+rp67RvHt+QYmoPjYNWBYX03aCYC6rT0bKY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:36:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13679 (0x356f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Validity
Not Before: Dec 6 14:36:25 2025 GMT
Not After : Dec 13 14:36:25 2025 GMT
Subject: CN=69343f6a-a5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:fe:ef:8d:72:1c:30:ef:c9:88:81:9a:a7:
aa:27:bc:f7:6e:70:26:9c:c1:22:f1:ff:35:0e:b9:
4e:38:f0:eb:67:fd:d4:18:c6:e9:57:4a:9d:fd:34:
e8:ba:d2:3d:7b:da:19:3b:2a:98:da:46:8e:d2:78:
c2:ee:19:ba:8e:f9:a6:e5:8a:93:46:03:dc:d9:f4:
bf:63:bf:86:8e:75:f0:72:48:5d:ae:03:e1:70:af:
00:e9:d1:7b:ec:9a:ea:4b:9a:78:7d:48:33:7a:c5:
f1:0b:91:1f:cf:a2:5f:3b:49:da:ff:a0:e0:9b:3d:
6b:39:8e:00:10:6d:48:69:06:08:a5:bf:d5:78:51:
93:b9:91:51:e7:7a:d5:a5:6e:58:83:8d:93:a5:2c:
18:41:10:af:c6:ae:ac:71:75:0e:7d:5f:fa:22:83:
c2:43:49:53:c1:88:7e:d1:03:c9:32:e2:de:79:33:
43:ed:93:96:34:a0:03:6e:1c:94:10:b1:fa:70:34:
41:cf:31:fa:eb:5a:de:b5:e9:f7:c0:1b:e2:12:ac:
f5:5b:58:53:34:f5:6f:11:06:01:ef:ae:0d:9f:8b:
84:94:45:9f:b6:8b:98:98:e5:0f:32:d8:b9:24:b2:
4b:6c:30:a3:73:f8:79:86:c3:ac:03:8d:56:82:3e:
1b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:78:4C:D7:0E:25:76:01:78:38:A0:10:86:08:BD:9B:BA:A6:23:44
X509v3 Authority Key Identifier:
keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:a1:90:85:2a:81:43:63:e2:49:f8:a7:01:e5:fa:a1:67:33:
d8:ec:e8:c2:9a:d4:5b:d1:9c:c3:8d:69:b9:7d:c2:c9:10:48:
eb:61:8e:d5:15:98:98:a3:86:c1:2e:96:c5:3e:bd:7c:eb:06:
cc:45:8b:ea:71:39:4b:45:11:74:73:58:cd:5b:84:8f:ce:65:
f2:37:ed:28:c4:b4:0c:e8:03:8b:89:cc:9d:60:0f:b9:4c:b7:
0f:84:cd:e3:bd:76:41:33:1d:b4:a1:6a:e4:96:d9:fe:a1:d0:
26:f6:88:ad:30:31:03:6f:69:83:5c:93:ff:7c:76:bc:f1:80:
79:3b:4f:fe:0a:10:3f:d2:d8:14:79:0d:27:e6:b5:2b:c6:8f:
c3:a5:13:71:73:83:a1:21:f9:db:23:53:be:bf:f8:c9:e6:3c:
6e:ea:42:97:91:ae:00:ab:e7:55:d5:23:80:b8:ab:3d:88:30:
b8:95:10:f1:d7:bd:2f:3c:1b:5f:48:3c:a8:e1:9b:18:9e:cb:
db:88:31:fb:7b:86:0d:c1:40:ec:e5:ee:e5:bc:6d:1f:44:af:
da:28:08:26:81:61:9e:a8:13:9c:af:00:b6:a4:b2:42:d8:70:
f6:82:c3:7f:16:bb:69:84:24:cd:45:ec:92:0f:88:87:48:ca:
f5:df:ca:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:27 2025 by rpki-client