This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft
File: 9TjVlahlU-nmlHrF6Pz8y8namyE.mft (raw, json)
Hash identifier: MV5TGF/fDzg/BSx/4S+1kpAq2/i93r2MHar2HScYCVE=
Subject key identifier: 64:BD:18:85:82:F9:F3:DA:04:52:91:66:28:D6:CF:69:89:C9:14:C8
Authority key identifier: F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21
Certificate issuer: /CN=A91EA115/serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21
Certificate serial: 34E6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft
Manifest number: 34E5
Signing time: Sat 06 Dec 2025 14:25:31 +0000
Manifest this update: Sat 06 Dec 2025 14:25:31 +0000
Manifest next update: Sat 13 Dec 2025 14:25:31 +0000
Files and hashes: 1: 9TjVlahlU-nmlHrF6Pz8y8namyE.crl (hash: P7PeIKVmuZ1zIyvfJ2SePKXOGrBuNnCsFotK6d4kQk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl
rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:25:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13542 (0x34e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA115, serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21
Validity
Not Before: Dec 6 14:25:31 2025 GMT
Not After : Dec 13 14:25:31 2025 GMT
Subject: CN=69343cdb-4b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:f8:d3:4b:79:84:78:4e:05:b5:a3:99:0b:
95:d5:e8:1c:37:b1:62:19:b9:eb:9b:60:a3:02:3f:
ae:ad:63:7f:09:5c:fb:35:e6:84:4f:c8:f8:82:f3:
16:8e:92:5e:b5:ed:88:9f:c9:c6:f9:ea:bb:4c:86:
df:c7:c6:fc:b6:ea:ef:2a:6b:02:59:4e:da:f2:16:
1c:4a:f4:a9:94:d7:cb:7d:06:ed:03:94:06:18:a3:
f6:6b:c3:c9:aa:06:a1:13:28:15:fe:ca:43:aa:50:
73:d0:d5:88:09:6e:db:50:5e:a6:f7:ea:56:71:3e:
01:45:cb:14:93:8b:26:39:82:ae:6d:8e:50:25:b3:
4b:52:cc:31:4d:c7:97:71:3b:53:97:59:67:24:fa:
19:ca:a8:8c:ae:d1:46:d4:2c:c8:da:b5:46:92:67:
c0:24:cd:42:31:19:fb:36:21:e7:76:aa:aa:9c:c4:
92:b9:aa:55:fb:76:d3:e4:5a:e3:85:1f:5f:27:e6:
7b:7d:3d:3d:b7:81:7e:54:68:33:07:61:34:fd:75:
91:61:0a:ca:09:e0:53:ea:91:a4:99:01:e2:da:4a:
92:8b:e8:f2:ec:de:81:a4:59:e6:7e:b5:95:12:2b:
e6:a0:96:fb:6d:cd:57:9c:26:2e:d5:4e:cf:93:56:
b7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:18:85:82:F9:F3:DA:04:52:91:66:28:D6:CF:69:89:C9:14:C8
X509v3 Authority Key Identifier:
keyid:F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:31:f4:1f:0d:71:94:83:a8:15:3a:68:52:c5:17:bd:e4:22:
30:e6:a9:07:ed:f9:17:95:36:b3:57:e8:32:7c:77:32:84:43:
11:1b:61:3e:ff:48:d8:52:82:ac:81:b5:50:a4:2d:e8:b8:77:
34:f7:b1:cb:99:bd:2e:5c:e4:09:76:92:93:61:bd:d6:bf:fd:
c8:5b:37:8d:79:b7:0a:b2:bb:f1:70:64:86:0a:bb:84:d4:f0:
73:0c:7d:f2:04:b7:86:c6:db:db:ee:a6:a0:1c:60:cd:d4:32:
07:d8:84:6d:52:eb:a7:14:e6:97:4e:4f:a8:49:99:72:03:74:
3b:3d:99:6a:2e:ec:83:05:02:8f:9d:3f:5d:16:e4:88:25:e3:
4d:fa:bf:18:00:d6:a4:81:b3:6b:1b:db:7d:9c:bb:94:5a:5b:
99:cd:49:8d:50:ba:16:00:8a:f9:26:85:e8:d0:79:cc:93:2d:
45:b8:df:b1:2a:a3:b7:7d:3a:59:ec:ec:19:c7:55:f9:e4:d3:
a6:0c:1b:be:9e:e2:e6:f8:33:92:c9:6f:b4:2a:1c:2b:93:35:
d5:d2:9f:96:fd:a7:c0:79:8a:11:c0:06:b4:ef:cf:bc:52:0d:
e9:77:41:fd:04:66:e7:bc:8b:81:d4:b5:24:a3:77:96:86:39:
97:9c:7e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:05:05 2025 by rpki-client