This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json)
Hash identifier: Ii4vbWuDgcfMZWJaQS140If7+Do9qbGv6/XKuTOeYcg=
Subject key identifier: 61:53:20:C8:6A:09:12:13:4A:2B:7F:23:36:19:51:98:82:13:5E:54
Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3
Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3
Certificate serial: 0C07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
Manifest number: 0C00
Signing time: Thu 18 Dec 2025 18:31:45 +0000
Manifest this update: Thu 18 Dec 2025 18:31:44 +0000
Manifest next update: Thu 25 Dec 2025 18:31:44 +0000
Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: C4e3J3VQ25x3gHN9EBMZST7r5EMuUToj/68EbiiCf6U=)
2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: iz8rOu7sc7+N3/1kzdgDjJg5F86O0Z4mGrtUPPC8sj4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl
rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3079 (0xc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3
Validity
Not Before: Dec 18 18:31:44 2025 GMT
Not After : Dec 25 18:31:44 2025 GMT
Subject: CN=69444891-f23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:86:c1:8b:98:dd:2b:f4:bb:0a:2f:ec:75:
45:90:31:19:64:cc:4b:4b:6b:ea:53:c6:47:a4:35:
4c:de:7c:90:a0:91:92:ce:d9:36:32:e4:a7:51:24:
43:7d:e6:57:74:20:a2:47:ca:9d:ec:20:e6:5f:92:
89:a2:76:f5:94:8f:df:0c:96:73:11:7d:52:41:2c:
de:bc:45:36:4d:6d:e4:32:01:c0:99:ee:af:4d:18:
14:60:83:a4:41:fc:50:6f:10:d9:d6:df:b7:60:1a:
6b:66:1a:57:ad:c3:21:ab:8f:64:07:64:48:76:5d:
fd:4a:52:21:fc:ef:67:27:c8:8f:1a:6a:f9:72:de:
25:a8:c1:ed:7f:b4:a5:ae:46:a3:95:6b:02:ba:4b:
df:88:65:cd:d8:20:52:8c:47:4a:ac:c6:38:0d:3d:
f5:8f:43:32:71:94:59:a3:5c:f2:e9:b4:33:db:84:
2c:1b:30:cb:80:23:98:22:82:92:9c:e9:60:ff:f6:
6b:6f:c9:ae:1f:5b:63:46:af:63:75:3d:b7:df:ad:
c9:04:ce:93:d5:4f:b7:45:30:f4:8b:2c:15:e4:c6:
41:e4:7a:c7:ae:39:29:47:a7:6f:79:04:6d:da:6e:
87:9f:ff:a2:3f:85:42:47:a1:66:6c:ca:33:02:c2:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:20:C8:6A:09:12:13:4A:2B:7F:23:36:19:51:98:82:13:5E:54
X509v3 Authority Key Identifier:
keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:85:22:06:3b:22:62:bc:41:f7:28:c7:72:26:20:ce:ba:9a:
db:49:2c:01:ba:b8:e8:3b:3d:01:a6:00:91:23:6d:bf:77:6f:
36:df:91:26:7d:ee:bd:db:84:02:83:3f:18:db:12:85:cd:b3:
b2:3b:bc:9f:57:5e:7a:66:f6:07:90:fc:77:4b:41:c5:ce:b0:
36:e7:1f:ef:68:f6:e1:4d:d9:ae:2c:60:63:3d:50:98:48:cb:
82:14:f4:e2:63:6b:eb:10:ac:83:f6:c2:2f:d6:1d:e9:7d:a1:
5c:1c:6b:8e:6d:3e:10:29:57:36:74:20:7f:f2:d3:da:19:06:
af:b7:ef:02:46:ab:8c:93:a1:70:82:ca:ba:67:e0:b9:64:11:
16:16:55:37:3a:17:1f:03:7a:93:cf:24:1a:88:79:13:19:2e:
c6:b7:bf:75:67:16:ff:2e:99:94:ae:7f:25:a5:e8:1f:88:f9:
67:6c:76:ff:6f:56:3c:95:7d:b6:a7:5f:7c:25:01:fd:a8:1e:
88:7d:3f:e1:3d:ad:47:27:20:c4:92:92:38:5c:3a:a4:48:6a:
d9:52:f2:b9:53:6e:41:91:9b:1a:65:1f:5f:45:0c:3b:62:1e:
e6:38:d3:23:3d:37:e1:90:2e:5d:ef:3a:4c:73:d4:d7:be:10:
49:55:88:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:56:34 2025 by rpki-client