This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
File: SSgoWwzlZAMAEAFOY147esxilFc.mft (raw, json)
Hash identifier: lSF/DJWtwDgf4HRi/EWWEm5AaXSTrEIGjN0KYPb6NJ0=
Subject key identifier: D9:2E:35:19:6B:03:10:9F:5C:EA:3F:4E:FD:C0:6D:9B:58:50:4C:79
Authority key identifier: 49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
Certificate issuer: /CN=A9191E77/serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Certificate serial: 0333
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
Manifest number: 032F
Signing time: Thu 04 Dec 2025 23:26:08 +0000
Manifest this update: Thu 04 Dec 2025 23:26:08 +0000
Manifest next update: Thu 11 Dec 2025 23:26:08 +0000
Files and hashes: 1: SSgoWwzlZAMAEAFOY147esxilFc.crl (hash: gsXpriJJLqUJO/85Q8bxtEV5+j4KHuVyOokaU8ufotg=)
2: 26E6B114EB2B11ECBE328172C4F9AE02.roa (hash: zp7diYZyS1B16dfR5MTFlL1sXr/xLNNAHhoA9yGKRIw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:26:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 819 (0x333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191E77, serialNumber=4928285B0CE564030010014E635E3B7ACC629457
Validity
Not Before: Dec 4 23:26:08 2025 GMT
Not After : Dec 11 23:26:08 2025 GMT
Subject: CN=69321890-3ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6d:c4:eb:fa:1b:ce:dc:11:6b:27:fb:b4:a6:
40:c9:3c:a6:08:e6:99:f5:ba:ba:c6:a8:37:fd:88:
e7:d7:4d:4a:17:1c:32:e5:e0:2b:a7:cc:2a:ad:25:
d9:b9:52:5e:09:df:e2:ed:8a:bf:18:4e:da:b6:9f:
43:a1:52:46:0c:12:79:ae:fb:d6:f6:34:42:e1:ec:
f0:4c:cf:bf:54:45:a6:75:15:cc:ee:13:ee:21:89:
fe:61:37:53:db:31:7a:07:ee:ed:84:d0:d3:37:e9:
e0:6b:29:df:ad:1f:ab:8f:7e:58:c5:4c:d3:55:b6:
a8:65:1c:58:88:20:31:a9:cb:23:61:97:9f:84:99:
f3:2b:ae:89:41:73:9a:a2:7c:4c:66:8b:79:8f:dd:
65:09:82:5f:bc:bf:2c:a6:73:51:5a:e9:fe:b1:25:
ec:4a:4a:6a:1a:53:92:5b:55:39:54:78:d2:79:b2:
7d:07:68:18:78:26:1e:32:18:04:d3:2d:78:8e:6c:
ce:6e:a3:2d:69:7c:34:50:a2:51:ed:ac:a0:8e:bd:
fb:3e:59:62:8d:a2:56:a7:92:cf:2c:3e:01:a6:6f:
08:f5:80:b9:aa:e4:9e:45:08:2b:f5:f9:cf:dd:76:
3a:b1:3d:f7:f2:3c:38:b2:cd:c6:bb:4c:32:bb:eb:
b4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2E:35:19:6B:03:10:9F:5C:EA:3F:4E:FD:C0:6D:9B:58:50:4C:79
X509v3 Authority Key Identifier:
keyid:49:28:28:5B:0C:E5:64:03:00:10:01:4E:63:5E:3B:7A:CC:62:94:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SSgoWwzlZAMAEAFOY147esxilFc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E77/121CF134EB2711EC928D0A6FC4F9AE02/SSgoWwzlZAMAEAFOY147esxilFc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f5:46:44:60:da:61:b3:6a:2c:a0:f8:a2:c9:91:07:01:39:
ce:84:66:6a:bd:74:93:f0:ea:68:a2:48:d5:c6:f6:0b:84:08:
ae:ad:57:1a:e8:06:e3:9d:82:37:fa:c0:2a:af:93:97:8b:44:
74:59:2b:1a:b1:05:69:c9:fe:8a:76:ca:42:bb:a4:8e:c5:0c:
91:ed:cf:e2:bd:09:be:82:33:19:c6:f7:67:6d:51:c5:5c:8a:
ae:ce:d9:c6:e3:5e:e7:3c:c7:88:cb:86:62:70:4c:80:24:18:
b4:6d:27:da:48:f6:29:01:89:89:9b:ea:2e:89:c6:64:0f:e5:
ef:30:87:51:07:cb:e0:c1:5f:aa:89:01:66:32:c4:98:72:84:
0f:17:04:05:56:0c:b6:c3:38:ac:1c:0e:2f:08:6b:a8:45:4e:
82:b1:94:cb:00:44:e9:b9:d0:c9:4a:52:39:99:19:41:c0:3d:
a1:93:31:a3:3b:89:dc:71:fc:70:a5:3b:68:ba:c6:af:c1:81:
9e:30:ff:14:63:e0:bc:6c:6f:bc:4e:1b:d3:2e:a9:c5:7e:97:
15:68:96:ec:e1:97:7b:67:b3:87:23:19:a3:f6:54:0b:d7:fd:
ac:2f:52:e2:84:c0:d7:31:c4:f9:73:68:ff:81:20:4a:7e:2f:
b7:1f:a4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:27:36 2025 by rpki-client