This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
File: 9pi1tHoG1TB97GCJaQYwdLaP9co.mft (raw, json)
Hash identifier: DyUXsIEmSQrtVUgj5yU3f4ZJlBujd3TCWjxOuGd7erU=
Subject key identifier: 88:1A:35:9E:F9:4A:30:7D:E1:9C:E3:B8:78:0B:EC:C6:22:31:B0:09
Authority key identifier: F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
Certificate issuer: /CN=A91685E9/serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Certificate serial: DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
Manifest number: C7
Signing time: Sat 06 Dec 2025 09:43:35 +0000
Manifest this update: Sat 06 Dec 2025 09:43:34 +0000
Manifest next update: Sat 13 Dec 2025 09:43:34 +0000
Files and hashes: 1: 9pi1tHoG1TB97GCJaQYwdLaP9co.crl (hash: XRENVqd603+RF28v+frqrAjlCN3VwVG5QPQMa9wY9XY=)
2: 974ADC40B6FD11F0BEBA196FC4F9AE02.roa (hash: dFlHoiKovBe7XL6W2rjfYVHX4DwruLCG9HZsmrV1dcw=)
3: D0680FF86AB211F0976F001AC4F9AE02.roa (hash: u4I6OcMWHr68B44EOHhKNv/9O12ptdqG8vuabhMlWB0=)
4: D1D03D026AB211F0976F001AC4F9AE02.roa (hash: SlcZUPBC731CkDPBH5QtG+XBH8C8VdxLmEudErYJG5E=)
5: D0E4A1946AB211F0976F001AC4F9AE02.roa (hash: mZq4ESa3sYKUhMXlPEh614v/+7uhBeYVmsv4x4LdoBk=)
6: 5BE6836E501B11F0928AD730C4F9AE02.roa (hash: ot0PiXgJFtG3ow9OOuQQJ5zHZoHZdTDEI+ufokydrtM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 09:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=F698B5B47A06D5307DEC608969063074B68FF5CA
Validity
Not Before: Dec 6 09:43:34 2025 GMT
Not After : Dec 13 09:43:34 2025 GMT
Subject: CN=6933fac6-27dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:ac:95:af:da:07:a1:fb:8f:9b:19:f5:18:
36:4f:29:62:f7:c2:5b:60:92:96:20:b8:6a:23:f8:
7a:78:0e:c1:c1:a6:a1:eb:04:b5:a0:17:4b:c4:2d:
f0:84:be:04:98:fd:db:f1:1b:be:7e:9c:45:bf:ce:
90:68:40:66:4a:67:c2:1f:ab:d9:fb:7d:74:b7:06:
03:f0:6c:48:fd:db:b0:71:f7:f6:2f:f3:8f:9a:6d:
55:41:29:d6:d6:59:0e:95:1c:bd:ac:e3:56:0a:85:
2b:0e:3b:7e:35:fb:46:a3:7f:14:03:46:39:7b:69:
c5:de:a7:2f:2b:fb:f2:01:bb:05:7e:c7:bb:bc:18:
a1:66:73:ca:38:f8:76:f0:57:00:64:81:72:5c:41:
29:fe:3b:94:8d:c6:8f:9d:e0:5d:ed:75:e2:9f:bd:
7c:7d:8a:2d:ba:4f:d6:5f:8f:1d:12:8f:51:1c:c6:
fe:da:29:d8:d3:3b:83:ad:5b:74:7b:c9:cb:ba:3b:
2b:72:64:3f:9e:eb:5d:27:8f:87:12:a8:c6:c0:64:
a3:99:bd:f2:6b:78:00:41:d0:7a:64:87:c1:62:fa:
e7:80:f4:7e:bd:d4:88:62:ee:93:44:41:6d:e8:c6:
b4:6f:e8:a1:27:70:f3:15:9c:a9:6c:7b:7b:17:36:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1A:35:9E:F9:4A:30:7D:E1:9C:E3:B8:78:0B:EC:C6:22:31:B0:09
X509v3 Authority Key Identifier:
keyid:F6:98:B5:B4:7A:06:D5:30:7D:EC:60:89:69:06:30:74:B6:8F:F5:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pi1tHoG1TB97GCJaQYwdLaP9co.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C928043AD17611EF95C5DE5AC4F9AE02/9pi1tHoG1TB97GCJaQYwdLaP9co.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:b7:b3:32:0f:eb:fe:5e:3b:2b:48:98:83:df:fe:ff:dc:af:
60:13:f0:44:7e:20:88:ed:64:c6:40:64:bb:e5:64:50:17:d6:
00:1e:56:45:dc:26:c7:1e:e7:d1:09:b8:94:64:60:3f:1b:74:
cb:eb:d9:17:70:a4:75:bb:2b:b8:a4:59:8c:2e:c9:e1:fe:61:
c4:26:e2:53:10:24:42:e3:17:9e:ce:6d:c9:fc:48:8a:30:92:
7b:4c:b2:6a:22:16:d8:5b:8d:55:d8:c2:1f:06:c5:b7:fc:18:
5c:fe:e3:cb:40:56:b7:5f:58:42:3b:0c:a0:60:1c:3d:5a:5f:
df:72:d8:43:ef:ac:00:0f:30:57:3d:f3:1e:d1:9e:13:23:7c:
f7:23:b3:64:f8:c4:27:f4:aa:69:82:cc:f6:da:fc:0c:3b:ad:
de:1e:75:fe:1f:41:8f:e2:bf:e5:fd:4c:9e:2e:f7:5a:ba:fd:
6a:60:33:02:ad:c5:2d:55:70:dc:b6:83:20:f5:ed:dd:8b:79:
dd:da:18:b1:96:44:de:00:1d:94:56:83:ef:ef:3d:2b:2f:8d:
54:f6:93:b4:86:74:8c:c7:6b:c9:d6:b6:55:98:64:20:c0:10:
fb:8d:12:ce:1c:a4:e2:98:65:f9:00:43:fb:0e:15:2a:90:66:
5f:61:3d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:52:49 2025 by rpki-client