This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json)
Hash identifier: yJpX55f20MLCZrTHETnvjugq/Y5GYonaINPTY2Ay+Js=
Subject key identifier: F3:12:AB:93:C6:2D:0E:55:97:CA:C4:15:EE:11:AC:20:D8:20:28:2F
Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Certificate serial: 016D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
Manifest number: 0168
Signing time: Fri 05 Dec 2025 02:06:17 +0000
Manifest this update: Fri 05 Dec 2025 02:06:17 +0000
Manifest next update: Fri 12 Dec 2025 02:06:17 +0000
Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: H2Spt+LltimlfWvh1S3f89gUheJ5Edfk6u7mTChBYbg=)
2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: lgKxQZBfyyGJs2ybuFT3lxPMvRUJgCHgG0F2ANjIDdA=)
3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: sWbEBie3r4Rs9tqZdxaTO4p/g0MLaIAVIR769Fluhr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 365 (0x16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA
Validity
Not Before: Dec 5 02:06:17 2025 GMT
Not After : Dec 12 02:06:17 2025 GMT
Subject: CN=69323e19-b4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:90:c6:90:e4:e6:38:ed:4b:01:fe:11:bd:
e0:5b:a7:1f:12:cc:f0:8e:7d:e9:5c:ca:8a:27:d0:
41:e8:cd:3d:01:2b:55:cc:80:f2:3b:92:8f:d0:1f:
f4:1e:51:27:cd:7e:5d:de:24:f0:48:ba:fa:71:d2:
73:27:06:27:68:01:c4:39:72:11:4b:58:4b:18:66:
42:6d:be:a2:cd:05:b4:b1:29:02:4f:d0:be:1a:d6:
bd:84:52:fd:63:fb:b4:46:75:cc:a6:8a:c5:65:a1:
ed:e4:7a:0e:f3:d8:56:c2:28:fe:2d:5b:62:bb:0a:
47:61:86:be:b9:d3:9c:5e:b0:68:31:c9:81:17:08:
72:2f:b2:50:c2:80:63:ae:3a:a2:94:62:2c:e3:ff:
7c:b4:f5:09:3f:04:27:22:bc:06:6d:93:e3:6e:4c:
05:93:cc:bd:da:2a:8b:23:25:86:9f:b6:4b:4e:5d:
bd:56:5c:5b:1e:fa:da:7d:2c:8f:69:82:57:64:d8:
1e:49:2e:20:b2:ce:f9:4e:ae:4e:7d:b6:34:7b:09:
64:34:a9:f1:57:68:79:40:e3:bb:fa:cf:a6:22:c1:
1a:61:b0:ad:5c:e9:0f:44:52:fb:bf:09:65:d6:5f:
8d:b6:7e:d4:af:29:f4:05:70:62:85:13:5e:5d:2a:
a1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:AB:93:C6:2D:0E:55:97:CA:C4:15:EE:11:AC:20:D8:20:28:2F
X509v3 Authority Key Identifier:
keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:43:6c:7f:59:31:5c:90:40:d9:e9:ee:2e:c2:73:d2:fa:6e:
e4:bf:2f:26:6d:c3:7a:86:26:eb:32:b9:da:36:d9:30:21:7f:
ad:9c:6a:d8:ee:9d:f3:f6:49:ea:5e:56:c9:eb:fd:9f:66:85:
90:30:18:6f:9d:84:3b:d7:0c:e0:98:dc:7a:37:05:bc:84:a0:
a9:d5:aa:2b:30:9a:8b:b4:9b:62:a2:22:c9:99:9c:a7:c1:e0:
03:ef:a5:1c:20:f8:fb:a2:7e:aa:fe:a1:52:b3:11:8d:4b:ec:
bb:c8:ef:86:a8:83:30:97:d6:3a:d4:31:8f:84:57:60:1e:ca:
7d:16:67:20:d4:35:26:ef:be:35:52:1a:03:41:d1:57:a8:ca:
b1:d1:89:3c:2a:ef:7b:f9:b7:4a:84:a4:ce:6c:c7:7f:64:57:
c5:64:2e:0f:f5:3f:0a:05:0b:7e:f8:d7:ef:13:a3:cf:01:c2:
dc:a5:8b:6f:ce:c6:7a:50:32:f7:c3:16:e2:2a:10:42:64:cd:
b2:88:dc:24:f9:40:69:bf:8a:73:d9:e5:ea:4b:e6:24:de:d0:
5d:78:ac:f1:35:25:41:55:6e:63:b5:a1:43:46:22:6b:c1:1f:
7c:c2:16:b3:2a:fc:fd:8a:e0:e8:8c:e7:37:ff:9d:23:b6:7c:
aa:ec:de:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:16:59 2025 by rpki-client