This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json)
Hash identifier: 6LJLqTc5KfS+Qeh5PpyS9E+i/zqFXxMrHLDNOcc8G/A=
Subject key identifier: A1:F5:D7:FC:7F:BA:81:9F:19:B7:A0:08:8A:3D:DA:FE:04:4C:C5:52
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial: 0D1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
Manifest number: 0CFD
Signing time: Sat 06 Dec 2025 17:31:11 +0000
Manifest this update: Sat 06 Dec 2025 17:31:10 +0000
Manifest next update: Sat 13 Dec 2025 17:31:10 +0000
Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: VWPuTABgcq/IbrpAfK3s1p2kgJY9/p8yNSJ9jgMd9lg=)
2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0=)
3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=)
4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3355 (0xd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Validity
Not Before: Dec 6 17:31:10 2025 GMT
Not After : Dec 13 17:31:10 2025 GMT
Subject: CN=6934685e-c86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:94:31:75:91:fa:e5:59:d6:b7:f3:38:e4:ad:
73:99:ea:cf:ed:d0:93:2c:7e:9e:44:30:99:9f:c6:
2a:eb:4e:d3:2d:d0:1d:c8:97:c3:8a:a4:90:83:6d:
90:dc:98:1f:5b:61:f4:90:77:82:41:fd:3e:d6:f4:
f1:24:a0:c6:43:4f:1e:4d:88:1c:e6:5f:3d:87:9a:
c7:00:a9:dc:72:fc:71:7c:03:45:dc:af:14:66:c9:
97:ff:f6:4b:fb:4b:62:76:e0:4b:62:d0:37:e5:00:
16:d6:3d:fb:1c:29:20:ee:65:82:09:8c:56:f6:8f:
ca:f2:85:72:27:26:74:a3:a7:4b:32:06:c8:14:82:
70:29:3f:e3:0c:9a:1f:f4:b4:c6:be:c5:7d:ec:c8:
ac:4c:82:ce:6b:30:f1:21:7f:cd:07:1b:d1:93:5d:
e8:cb:80:97:0f:9c:9d:83:d4:ad:53:07:03:60:9b:
87:8f:ea:95:b0:f5:44:09:80:51:fe:40:26:9b:83:
8f:5a:9b:d1:43:d6:20:b8:53:c7:75:66:c7:b1:11:
02:6e:24:dd:59:d4:d6:47:07:19:40:d3:23:ca:0c:
55:42:f5:c4:88:00:29:d6:d8:90:58:5c:7d:4c:f7:
da:58:72:2a:00:07:6e:54:9c:9c:07:44:d0:5c:68:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F5:D7:FC:7F:BA:81:9F:19:B7:A0:08:8A:3D:DA:FE:04:4C:C5:52
X509v3 Authority Key Identifier:
keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:32:8e:eb:2a:b2:8e:16:a5:d4:cf:69:d1:ef:26:f9:97:ac:
1f:62:76:2a:80:27:5f:88:29:cb:f4:21:ee:ad:71:e8:a9:3a:
9a:81:1c:d7:aa:a8:55:ae:72:88:ee:0a:e1:d3:02:c4:a2:d4:
88:4a:75:d3:2e:1b:d7:01:12:f2:68:15:46:fa:70:37:73:40:
e2:17:ed:e5:9e:b3:13:42:b2:f8:61:68:4f:82:9c:01:12:af:
af:d2:e4:4a:4a:d2:62:cb:cd:df:c0:d5:72:bf:e3:7b:66:91:
cc:f3:89:84:b8:b0:35:9b:28:a5:ba:36:1d:34:7b:b1:a4:47:
53:b6:58:7d:25:6c:7f:fe:27:f6:a3:ad:3a:08:1e:20:51:de:
c2:8e:72:8f:10:c1:62:fd:e0:58:2f:64:78:1d:88:c7:48:8f:
17:3a:94:0b:e6:6c:ff:8d:83:c5:d8:34:38:8f:fd:40:fd:de:
7c:70:c6:09:d9:d4:28:ba:a3:fe:1f:e6:0d:2c:d7:aa:6a:47:
98:01:58:91:f0:45:0b:bf:f0:2a:e2:43:7d:c2:e5:8d:6b:c8:
02:78:cf:c1:7a:44:e7:b4:fd:f9:7f:32:25:48:a5:5a:0e:e1:
69:ab:87:f9:2f:e5:a3:55:43:d9:85:38:4e:03:fe:2d:1b:95:
40:6a:cb:43
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE
QjFBNTBEQTQwHhcNMjUxMjA2MTczMTEwWhcNMjUxMjEzMTczMTEwWjAYMRYwFAYD
VQQDEw02OTM0Njg1ZS1jODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA45QxdZH65VnWt/M45K1zmerP7dCTLH6eRDCZn8Yq607TLdAdyJfDiqSQg22Q
3JgfW2H0kHeCQf0+1vTxJKDGQ08eTYgc5l89h5rHAKnccvxxfANF3K8UZsmX//ZL
+0tiduBLYtA35QAW1j37HCkg7mWCCYxW9o/K8oVyJyZ0o6dLMgbIFIJwKT/jDJof
9LTGvsV97MisTILOazDxIX/NBxvRk13oy4CXD5ydg9StUwcDYJuHj+qVsPVECYBR
/kAmm4OPWpvRQ9YguFPHdWbHsRECbiTdWdTWRwcZQNMjygxVQvXEiAAp1tiQWFx9
TPfaWHIqAAduVJycB0TQXGhRewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKH11/x/
uoGfGbegCIo92v4ETMVSMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2
N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R
U3E5MXAzRWFVdmZiR2xEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBzMo7rKrKOFqXUz2nR7yb5l6wfYnYqgCdfiCnL9CHurXHoqTqagRzX
qqhVrnKI7grh0wLEotSISnXTLhvXARLyaBVG+nA3c0DiF+3lnrMTQrL4YWhPgpwB
Eq+v0uRKStJiy83fwNVyv+N7ZpHM84mEuLA1myilujYdNHuxpEdTtlh9JWx//if2
o606CB4gUd7CjnKPEMFi/eBYL2R4HYjHSI8XOpQL5mz/jYPF2DQ4j/1A/d58cMYJ
2dQouqP+H+YNLNeqakeYAViR8EULv/Aq4kN9wuWNa8gCeM/BekTntP35fzIlSKVa
DuFpq4f5L+WjVUPZhThOA/4tG5VAastD
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:37:38 2025 by rpki-client