This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
File: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json)
Hash identifier: mERVyB+G3cQJOa8Ul0+rgDJPp8P3Sp01B/K69T0RRCo=
Subject key identifier: 03:7C:2E:E2:6C:B7:B0:84:CA:9A:0B:17:6C:1F:F6:06:AB:DF:EB:AC
Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
Manifest number: C2
Signing time: Fri 05 Dec 2025 03:55:23 +0000
Manifest this update: Fri 05 Dec 2025 03:55:23 +0000
Manifest next update: Fri 12 Dec 2025 03:55:23 +0000
Files and hashes: 1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: 1Wes4W0wI14zhY7HNBS3tAAxyVpHGS8yfrKY48phBkw=)
2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: sKOTsNVX+CZUe222IvZsyt4goGILGlPT7qY6Zl0V7Cg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Validity
Not Before: Dec 5 03:55:23 2025 GMT
Not After : Dec 12 03:55:23 2025 GMT
Subject: CN=693257ab-10e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:b8:54:7b:4f:82:c5:bd:d3:54:04:99:bb:
e4:9a:86:15:ff:5b:5c:c1:02:72:6e:01:24:36:65:
f5:b6:46:ea:de:90:ad:0b:52:3e:92:9f:7d:1d:cd:
0a:c0:fc:f1:0b:71:36:7f:d2:92:be:99:44:ea:98:
ad:aa:72:39:4e:89:4c:90:e4:c4:1e:eb:13:5c:36:
3e:38:60:78:b0:28:93:eb:40:59:97:d6:5d:af:44:
5b:80:70:68:5f:28:e2:f1:6c:c9:a1:b2:03:33:40:
f1:cd:b8:36:1b:09:de:1c:da:6a:b7:e0:69:7d:b4:
e1:58:23:28:a4:bd:3d:ac:67:2e:c0:4e:51:49:26:
90:a3:3d:a1:cd:34:e0:fd:91:4b:5a:63:ed:89:70:
e4:08:66:6d:06:b3:89:9a:c7:57:19:29:28:08:24:
04:52:a6:b7:b6:95:06:a5:26:3d:5a:0d:d7:fd:fb:
c6:f8:13:00:a7:5b:e0:c3:ce:53:9a:db:19:9b:1c:
aa:e9:e9:e2:cc:e5:04:0d:95:35:45:be:2d:70:0e:
7f:75:8f:a5:65:06:57:9d:58:a0:45:8d:38:4e:55:
59:18:76:9e:79:72:2f:05:17:d9:e7:71:64:5b:9d:
1a:39:c4:09:48:30:0e:e6:3f:1d:a1:d3:37:aa:51:
e4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7C:2E:E2:6C:B7:B0:84:CA:9A:0B:17:6C:1F:F6:06:AB:DF:EB:AC
X509v3 Authority Key Identifier:
keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:89:18:02:25:c3:e3:5f:c4:ad:18:a9:e0:d6:66:69:3e:cb:
45:5a:f7:b0:f1:3c:cb:f7:d5:02:fe:8c:cb:d2:1c:f4:27:6e:
af:6d:12:2e:ef:31:b1:6f:18:09:b8:c0:c5:db:35:62:df:0a:
89:41:f6:fb:3a:f4:47:cd:c8:6a:5a:76:cf:51:93:f6:59:e9:
29:3e:b5:ad:62:d7:f9:b5:13:d1:6f:08:f2:70:5c:f7:b8:db:
03:5a:ac:c1:08:06:a9:38:26:19:87:83:74:02:39:05:37:fb:
94:5d:fa:f3:df:1d:23:4b:ab:c7:94:9c:c5:b7:7f:f6:d4:88:
4d:72:8d:dc:89:6c:1b:bb:50:b2:b3:70:d4:59:39:1d:b8:ef:
b1:ec:fd:d5:be:b7:37:f6:52:d8:c6:e7:41:cd:89:24:92:60:
40:15:15:b5:e8:9c:c2:4c:f2:c7:c6:3f:f2:ab:48:43:bc:06:
ae:e9:98:fc:51:11:45:36:bd:72:14:c9:9c:2d:93:e6:a4:ee:
7f:60:3b:11:cb:b9:fa:a8:d4:4f:9a:6c:6f:fc:84:35:00:f8:
16:48:aa:e0:af:9a:a3:da:10:c0:37:7f:01:04:cb:aa:0b:da:
88:46:e3:68:f1:71:77:e1:5b:58:bd:82:34:5d:7a:5b:3a:a7:
f2:30:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:39:25 2025 by rpki-client