This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
File: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json)
Hash identifier: GIhTEebs6o69gzcG7LN0Thpv6rD+dvbulnsVGoieXV4=
Subject key identifier: B8:11:AA:31:02:E0:94:8B:A5:68:5B:18:8E:0B:D0:08:B7:C3:4E:FA
Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
Certificate issuer: /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Certificate serial: 038B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
Manifest number: 0383
Signing time: Thu 04 Dec 2025 23:15:45 +0000
Manifest this update: Thu 04 Dec 2025 23:15:45 +0000
Manifest next update: Thu 11 Dec 2025 23:15:45 +0000
Files and hashes: 1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: wgA0qpdR5isRcYZpzqIMDHCDHNRhIC4BL3NSLigB0S0=)
2: 148BC3E8833B11EEA71E1715C4F9AE02.roa (hash: ZO4FyXUvWQjoBnjdYas53x9mwxjL1ZSYmacbdFPrIGc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 907 (0x38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Validity
Not Before: Dec 4 23:15:45 2025 GMT
Not After : Dec 11 23:15:45 2025 GMT
Subject: CN=69321621-e5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:15:c4:95:10:3a:1b:57:df:ec:da:62:d5:
fa:0e:d0:66:3b:a1:01:50:43:91:54:bf:9d:35:4f:
3e:c5:52:43:29:93:27:5d:c4:5c:b7:c5:2d:09:47:
62:d7:03:34:45:83:25:03:8b:a4:0b:d7:c0:18:41:
22:f2:52:5e:c1:03:73:85:af:e8:7a:b9:3e:78:79:
d8:b5:86:11:b9:1c:5c:82:44:99:b9:98:2e:52:11:
56:df:1e:2b:62:81:f3:96:5b:3e:72:ca:ae:90:3e:
83:d5:e8:99:63:d2:70:f9:fe:51:fc:cf:d4:df:17:
f9:dc:04:bb:0d:c4:b8:91:23:ef:51:64:92:d0:9a:
1c:a1:63:86:e1:7c:c2:6c:78:ee:63:e8:62:38:80:
73:e4:71:17:fa:c0:c2:63:36:81:a4:3a:91:1b:a3:
dd:aa:81:a6:84:f2:4c:31:70:03:07:62:23:b1:60:
47:45:1a:a0:b7:6a:f8:c0:57:97:49:87:42:ae:d3:
fa:31:06:8a:fc:dc:b1:ea:65:9b:46:b4:e0:a8:cf:
47:ec:a8:e1:96:e9:8d:8f:81:c5:8c:7e:7a:77:d4:
d2:ca:69:de:9a:e5:06:8b:ec:8f:4f:b8:0d:1a:f3:
a8:11:af:98:66:1b:5c:50:7f:90:10:be:19:f0:56:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:11:AA:31:02:E0:94:8B:A5:68:5B:18:8E:0B:D0:08:B7:C3:4E:FA
X509v3 Authority Key Identifier:
keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:61:a6:a3:7e:c1:ef:7f:e0:2f:eb:71:4d:48:f7:26:87:cf:
43:80:ae:5e:38:e8:0c:66:df:4f:4a:03:f2:c0:15:8e:86:81:
f1:86:a3:e9:f9:57:cb:f3:6a:2a:7f:e7:73:43:9a:c9:95:36:
b8:3f:7d:a5:ce:40:18:fe:52:b6:9a:4f:09:24:2a:ac:f9:d7:
26:12:5d:4f:5b:ad:f7:2d:ae:61:17:79:a9:e1:af:bb:6f:81:
a9:9f:89:c4:79:90:a0:ab:2a:a1:6f:31:45:52:7e:2a:23:c9:
97:75:16:84:ca:e8:fc:e0:e2:45:1d:9b:b7:7b:28:7b:f9:f5:
4f:90:f0:bc:3a:0b:1b:ba:e8:0a:f2:25:11:7f:41:86:c4:d7:
ad:e3:b9:0c:10:56:03:20:f3:c1:c4:fa:1c:02:8d:e9:a5:19:
51:15:fb:75:2e:97:0c:b0:be:36:62:da:90:46:70:64:29:a4:
e2:f6:bc:68:eb:54:73:bd:6c:2b:3c:bf:2b:1b:46:1c:17:f8:
97:e7:3b:f4:ed:50:1e:ab:82:30:89:bd:11:31:ff:cb:f9:c3:
49:48:82:03:75:9f:7a:2b:46:e4:61:f7:aa:3b:80:e2:1a:f6:
be:bf:0e:ec:9d:34:5f:e8:ac:06:06:f5:32:c2:2a:ad:30:60:
11:bd:4c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:43 2025 by rpki-client