This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
File: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json)
Hash identifier: HUjbb2JvMRwXHusoVL8ByJ4bEgP2RBC6MMk6SvlJ97A=
Subject key identifier: BB:87:84:1F:48:0D:8B:E5:E0:05:45:6F:42:7D:AA:DC:63:02:33:9D
Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Certificate serial: B8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
Manifest number: A4
Signing time: Fri 19 Dec 2025 05:43:44 +0000
Manifest this update: Fri 19 Dec 2025 05:43:44 +0000
Manifest next update: Fri 26 Dec 2025 05:43:44 +0000
Files and hashes: 1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: fTbV8FqTuVPxWfIMjHhfInXIIxmZ2Va18iqZIzzmd1A=)
2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: 61Maf4HdTVjL1p15SmMO0sDKtCDOS9JEKlRjMIwn4Cg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:43:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184 (0xb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Validity
Not Before: Dec 19 05:43:44 2025 GMT
Not After : Dec 26 05:43:44 2025 GMT
Subject: CN=6944e610-5604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d8:d9:c2:78:a4:1e:cb:66:bb:a2:71:61:23:
bc:da:f1:d9:69:b1:a3:a9:23:c3:43:50:34:df:d7:
dd:93:1a:fb:1c:90:e1:05:3b:a2:75:b4:c9:5e:3a:
b1:e7:2e:d2:29:94:8b:5c:22:0b:d0:8c:b5:93:9e:
0e:9c:fe:4a:54:73:82:77:60:93:38:0d:57:ef:c4:
b4:e7:66:f0:b8:a0:bd:36:d6:81:02:a5:e0:ef:fa:
f1:c1:e5:6d:7e:40:8e:05:5a:d1:64:41:a8:d0:57:
77:58:a9:05:63:7d:e9:91:29:46:b7:1f:92:2a:8e:
a0:41:fb:6e:bd:ed:ed:e3:40:f7:ed:67:a9:82:06:
68:24:6d:a9:88:37:0a:c2:21:48:51:5d:19:59:ed:
7b:52:29:ce:58:8c:0c:a1:cb:79:55:24:81:89:d5:
ec:dc:49:9e:64:98:1f:e7:83:fc:26:1c:ba:62:14:
bf:7b:53:ec:a1:12:26:64:8a:38:f6:ff:db:84:6f:
19:92:0c:f7:45:bf:89:31:08:4c:d8:c6:77:aa:83:
17:a4:d9:45:1a:68:97:86:9a:3a:f6:09:f0:6b:14:
0e:e2:a3:66:04:90:57:e3:31:b3:7a:fe:23:04:54:
2f:50:12:22:0b:09:fa:8d:6c:ff:2c:fd:9f:80:44:
53:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:87:84:1F:48:0D:8B:E5:E0:05:45:6F:42:7D:AA:DC:63:02:33:9D
X509v3 Authority Key Identifier:
keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8f:a9:84:73:1b:dd:2d:af:da:84:60:0f:8d:df:e4:52:b4:
db:dd:95:20:d0:5c:fe:4b:c0:81:ff:a2:5b:e1:93:52:f9:49:
65:9a:82:0d:44:f2:35:24:41:16:37:b7:20:ab:f2:05:dc:57:
77:ed:93:5b:95:1f:92:a3:0a:78:b9:a5:1a:02:4d:a7:0d:6a:
53:3c:30:d3:a8:5d:c3:52:46:55:ff:38:19:d6:f6:c7:40:cb:
4e:01:21:90:e4:32:0c:a2:23:f7:12:a9:ca:5d:66:e6:ca:d6:
e1:06:6a:25:f4:c8:9e:4a:98:0f:34:a7:24:fc:e7:f0:47:35:
55:5d:0d:67:c8:14:93:e7:89:68:1b:bb:11:df:a1:06:70:e9:
a9:38:67:e2:53:a5:12:08:cd:1b:24:c8:6a:11:65:4c:3e:03:
3e:6f:09:80:df:77:e6:b4:93:fc:6b:79:38:ac:f3:7a:52:d7:
ef:4f:fe:d0:3d:21:de:8e:59:67:2f:ab:a6:f4:29:94:d8:c5:
c0:e6:c7:bf:80:c3:ed:f3:34:f5:0e:5e:c1:63:e8:72:8a:bf:
57:27:05:c9:08:ec:2d:24:79:89:dc:b5:56:f6:9a:14:59:e0:
f0:4f:96:0d:d1:22:22:e7:70:df:3b:8e:0c:52:df:1d:93:e2:
81:e8:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:36:35 2025 by rpki-client