This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json)
Hash identifier: EHrpQDJefOM6bX1SVodcYLyLuGCr5qwZm1Kef6iKCOE=
Subject key identifier: 09:3A:A4:9C:86:48:51:3E:8E:AD:5C:B5:BD:B6:D4:A2:41:FB:15:29
Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1
Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
Certificate serial: 0800
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
Manifest number: 07F9
Signing time: Thu 18 Dec 2025 20:32:49 +0000
Manifest this update: Thu 18 Dec 2025 20:32:49 +0000
Manifest next update: Thu 25 Dec 2025 20:32:49 +0000
Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: YQKiohqWrfmY02YT2LFJOOrN8TCT0nbSXu9SLgyBiyo=)
2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: OxZStMenvNbbBM0B5p11XZWipGKvwq8HkkBRgx7lHnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl
rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2048 (0x800)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
Validity
Not Before: Dec 18 20:32:49 2025 GMT
Not After : Dec 25 20:32:49 2025 GMT
Subject: CN=694464f1-6e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e7:72:c3:4a:ec:58:6c:8b:03:ea:0a:1f:61:
aa:ae:bd:8f:2c:3a:5d:44:b5:28:13:8b:cc:f9:69:
0e:49:06:5a:5d:38:a1:d4:b6:73:a7:74:6e:97:13:
f9:dc:bd:1e:4d:a5:a2:3a:ac:03:bc:64:a4:14:fd:
cd:a2:4e:82:17:dd:29:51:62:57:8b:70:fc:bc:18:
3c:13:86:c7:c1:74:17:87:42:00:55:31:7a:18:3f:
e0:16:5e:d4:6d:84:c0:ff:97:7e:5a:3e:fe:59:2c:
1e:5b:4b:f8:89:6b:5c:f2:fa:45:8c:c0:70:25:50:
d3:58:05:67:0d:d6:5c:c7:b3:79:bd:48:cf:d9:be:
1f:fb:ff:bb:da:7c:04:64:1f:9d:55:78:ef:f2:a5:
92:9c:e8:f8:d9:7b:08:d1:8e:47:11:e7:d9:4b:c9:
aa:fd:40:a5:15:11:9e:80:6d:17:5e:c7:bf:92:c8:
f3:c5:0f:4f:72:8c:39:ae:3f:1b:af:3f:9c:ec:9d:
2e:96:b9:dd:0b:ec:96:f3:24:f6:91:fe:9e:3b:ca:
12:cc:9f:2a:58:71:fb:44:e3:98:df:62:bf:07:c1:
ab:aa:ea:0e:2c:e4:c4:07:0a:e9:43:73:5f:6b:62:
27:be:eb:f7:99:6a:2c:fb:c8:bd:cb:c3:08:44:b2:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3A:A4:9C:86:48:51:3E:8E:AD:5C:B5:BD:B6:D4:A2:41:FB:15:29
X509v3 Authority Key Identifier:
keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:2f:84:49:32:13:5d:d9:b4:a7:16:19:b8:ef:33:53:25:35:
a6:ec:74:6c:4b:0f:d4:c6:83:5a:60:99:bb:04:5d:97:0d:ed:
38:9d:c3:51:fd:fe:e8:26:49:75:be:c4:b9:d2:67:41:28:cf:
51:90:de:0e:4b:0f:e6:86:2f:6a:77:0f:4f:41:92:4d:c1:a5:
68:fc:c5:18:03:ab:bd:5c:f2:46:74:56:ae:1c:a4:65:b0:4e:
89:78:2e:cd:8b:e4:b7:37:b6:8d:31:27:70:f6:b8:9a:d0:e8:
16:ac:a4:40:ba:08:99:c6:f0:53:ec:f6:c3:b1:2b:da:ef:1b:
87:f9:92:b2:69:f7:83:0a:f8:36:db:aa:5a:e9:3b:e7:e9:d9:
13:21:6c:ed:0f:fe:6c:af:d6:5d:f7:0b:cf:c3:f4:36:cb:5c:
46:12:7f:b7:90:df:43:59:05:b1:17:1b:52:d9:20:c3:5a:0c:
a6:8e:e4:00:e3:b7:98:e6:9a:d6:c1:85:1c:cb:04:a0:06:1c:
8c:93:1e:00:15:8c:47:1e:01:1c:24:2f:83:d8:90:99:85:cd:
53:0f:d1:41:8c:21:8d:40:23:eb:82:4a:b3:a2:bd:74:32:76:
ad:31:be:ab:b8:48:15:ce:1b:6a:39:be:22:a8:58:89:3b:4b:
95:ea:f5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:17:10 2025 by rpki-client