This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
File: 9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json)
Hash identifier: 4uLSTUFlOyadRpHFaV9qKdEsAdgOB5rTxZJz66WoSQw=
Subject key identifier: 71:B1:C3:0A:20:92:09:6E:FE:1F:E6:D5:06:49:D2:E5:E4:A3:FE:50
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial: 0F1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
Manifest number: 0F0E
Signing time: Sat 06 Dec 2025 17:03:57 +0000
Manifest this update: Sat 06 Dec 2025 17:03:56 +0000
Manifest next update: Sat 13 Dec 2025 17:03:56 +0000
Files and hashes: 1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: Kgwk8oNZbKeADy5MQwkBQs+EA5RRkHthGqc8dzX6mbg=)
2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: oL0maWqOk1WBmFKK+iZrpTSZZSpD3rBTTNKLPVPOQyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3868 (0xf1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Validity
Not Before: Dec 6 17:03:56 2025 GMT
Not After : Dec 13 17:03:56 2025 GMT
Subject: CN=693461fd-f3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:8f:4e:2b:2a:8b:a5:05:9f:aa:26:11:ff:
e4:81:14:f3:f8:06:71:8c:27:66:49:27:45:29:98:
75:4f:7e:bb:47:21:f2:02:50:0f:91:a7:76:3c:59:
7e:3f:43:25:93:58:fb:48:23:d2:72:bc:81:2c:55:
da:c3:0c:62:4e:4e:79:db:ee:f6:12:a5:2d:67:d5:
25:2d:44:9b:59:cb:b9:d4:3f:42:c0:14:54:77:78:
bf:30:3b:a4:9f:fd:ad:92:48:cb:fb:1d:09:a0:29:
24:a2:da:77:5c:be:de:c2:b1:fd:e0:e8:dd:d2:b3:
b7:ae:03:74:ad:a5:99:d3:f5:60:53:e3:6e:18:f5:
e2:a8:09:46:ca:4e:21:0c:97:be:8f:83:a0:b5:b2:
ae:bc:86:8a:96:17:74:70:bb:8f:3b:0a:29:5b:61:
2e:2a:73:c4:bd:94:3b:aa:fb:0c:a4:d4:99:04:fb:
d0:a5:cc:0d:9f:2b:e5:d4:81:4d:70:c0:9c:11:52:
4f:54:16:5b:32:ea:8d:e8:de:c8:d4:7a:45:95:cc:
f8:bd:d4:2e:70:0a:5d:5a:74:8a:a2:fc:f0:e6:a3:
e1:c5:8c:65:60:2c:81:e3:78:5a:de:49:11:34:f3:
15:db:1c:82:26:21:d1:3d:44:82:d3:32:56:3c:4b:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B1:C3:0A:20:92:09:6E:FE:1F:E6:D5:06:49:D2:E5:E4:A3:FE:50
X509v3 Authority Key Identifier:
keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:ee:a4:7b:6e:af:c7:99:d8:68:86:68:b4:be:1e:d6:3b:5e:
9f:59:ed:0d:4e:79:62:76:56:7d:e8:7f:6d:9a:da:90:0a:29:
f7:89:3d:1d:69:90:78:b5:c6:96:e0:1b:f3:47:2e:a8:49:23:
1c:a8:5b:57:c3:1b:6c:ef:4a:80:a7:8b:13:e6:6d:29:8c:80:
b3:75:03:8f:c7:fa:d4:35:75:01:6d:44:9f:04:8a:4f:14:94:
1d:f3:b4:ce:a6:f9:b7:46:46:88:e5:0f:d6:68:8e:52:f1:4e:
34:bf:65:1c:6f:2f:35:b8:a4:58:98:64:59:08:f4:02:b5:eb:
11:f2:8e:b4:e0:37:23:71:35:12:17:77:e8:b5:92:ad:55:2f:
92:bf:80:f6:d9:a3:eb:53:d6:b6:9b:7f:f5:7d:a8:8f:fe:0d:
c0:9b:a0:af:6f:ec:e1:a3:13:08:e1:4e:80:db:f3:57:ba:16:
c0:7b:08:0b:07:fd:b2:e1:a8:2d:39:aa:29:9f:87:45:8e:c3:
fc:d3:86:6c:b9:00:b4:f0:34:ed:b3:db:07:e1:ea:5e:f3:89:
b6:09:c9:37:61:2b:6e:9d:a0:c4:d3:40:87:29:87:3f:b9:13:
8f:9f:55:44:2a:a2:8f:46:8b:cf:da:2f:fa:48:3e:87:72:c9:
03:86:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:21 2025 by rpki-client