This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
File: 9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json)
Hash identifier: ne33bavr6zSnVybideaeZqhfFuzpMze5CiMcOyGp1EM=
Subject key identifier: A3:AE:28:86:B5:38:47:32:BB:EA:60:36:FF:F3:84:DB:E0:3D:15:25
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Certificate issuer: /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial: 0456
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
Manifest number: 0451
Signing time: Sat 06 Dec 2025 22:52:51 +0000
Manifest this update: Sat 06 Dec 2025 22:52:51 +0000
Manifest next update: Sat 13 Dec 2025 22:52:51 +0000
Files and hashes: 1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: eUMS+4pOXwEZCbBPph4+LpnD6DcaZDzQt1Qkg3yiqaI=)
2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: q3e8py5/C6+zKkUP8OOrbssys+IzckfYmM1B63yGsr8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 22:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1110 (0x456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Validity
Not Before: Dec 6 22:52:51 2025 GMT
Not After : Dec 13 22:52:51 2025 GMT
Subject: CN=6934b3c3-385b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fa:de:d6:c8:8d:18:87:40:db:fd:f1:f7:4a:
1b:5f:b4:3b:cf:62:98:fb:f9:78:73:39:2d:64:d7:
50:e9:c8:fc:43:82:7e:d3:39:15:d9:0a:b9:4b:67:
2a:04:c0:86:3e:ea:28:a4:c2:db:0b:fa:84:7f:98:
ab:9f:48:97:94:d3:66:76:40:53:3f:6a:bb:b2:42:
26:5a:66:e9:db:3b:b1:64:10:ca:9a:66:9a:13:6c:
6b:0a:e4:29:7a:d0:69:ee:eb:f6:c5:31:65:5a:b4:
f0:f7:c2:fd:83:5e:80:12:c6:61:d2:b4:4c:97:a8:
3a:ad:70:ad:6b:eb:a3:69:8b:d6:57:b4:e1:32:a9:
f0:30:90:c4:22:dd:c9:51:e5:bd:55:ad:f2:d8:a8:
5d:de:c5:b5:af:3f:d9:86:19:b2:f2:93:62:05:e5:
8a:62:67:31:e2:1f:af:0f:07:50:2f:08:7c:14:ea:
80:42:39:bb:7c:83:c5:50:dd:95:cd:68:4f:ef:9b:
40:64:09:27:44:c3:d2:f3:37:2b:32:75:f3:d7:22:
a7:20:8a:69:f8:88:3c:ff:d7:59:42:ee:36:52:6f:
f9:e4:67:10:b9:25:c5:6d:f1:7c:55:77:6f:32:f1:
31:8c:c9:ed:32:0b:53:6e:2f:5d:4c:16:0c:d6:c6:
de:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AE:28:86:B5:38:47:32:BB:EA:60:36:FF:F3:84:DB:E0:3D:15:25
X509v3 Authority Key Identifier:
keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:53:e3:98:39:6f:65:d2:7f:a6:fd:9d:6f:59:ce:08:4f:31:
f9:66:31:b7:44:98:d0:12:cb:7e:1b:53:7b:c8:55:fb:57:98:
c2:94:ff:22:9a:77:96:16:2f:22:ae:a7:b0:ba:ee:a4:2a:45:
14:62:c0:c3:aa:d7:ce:bf:d3:24:71:9d:fb:44:30:3b:91:ac:
60:f4:fe:ff:ea:66:4d:be:ae:7c:d4:c9:ed:5d:a4:32:3c:10:
55:a9:5e:f7:fa:83:9f:d3:e7:05:d3:0f:de:46:e9:b8:a4:4c:
10:9d:3d:53:25:83:d6:90:a7:af:ca:64:9b:f2:85:63:96:23:
a4:58:d4:4f:82:2b:75:44:99:0e:f2:44:2b:5c:82:cc:9b:2f:
2c:f2:cc:f0:5d:ae:c9:90:56:ff:01:12:ae:f1:52:3b:a6:cb:
25:07:2d:16:5b:f6:9f:93:2c:18:4a:38:6c:d3:09:f7:af:19:
5c:d3:6f:de:9a:59:fb:46:1e:83:92:78:06:71:1b:d4:69:a0:
18:91:a4:54:56:19:5d:b0:73:03:0e:f6:9c:2f:9e:13:f0:51:
ad:6e:c6:b1:8a:86:4b:b5:66:4d:45:5f:2d:91:b0:ba:21:9d:
dd:eb:8a:10:3a:38:73:56:9c:69:b8:bc:b3:ee:e4:b3:58:8a:
b0:ad:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:46:55 2025 by rpki-client