This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json)
Hash identifier: s6K+oTFUqvYCk0EQ1m5bhXoJPrzn8pJl4M0e133LdBs=
Subject key identifier: 10:BB:69:48:A9:1E:2E:E1:75:05:0C:11:7C:9B:77:C7:5A:FC:AF:D4
Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Certificate serial: 08A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
Manifest number: 0893
Signing time: Sat 20 Dec 2025 19:57:00 +0000
Manifest this update: Sat 20 Dec 2025 19:57:00 +0000
Manifest next update: Sat 27 Dec 2025 19:57:00 +0000
Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: fugtLrmBZ0IKGYeFtsotz96cmt1dqDPd6OLnf0oMgtI=)
2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: p0dIujYYWiasSIWvw6oLscevhcZ90zAQp0NU1grDjpM=)
3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: p+z2UT/W5OYfrXw3co6VYs+yj2ELqUUcJwCs0uSGYiM=)
4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 44y5fkFaBcGQTsnME/P81706WXBnFbq6HjZsUti9jmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 19:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2213 (0x8a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Validity
Not Before: Dec 20 19:57:00 2025 GMT
Not After : Dec 27 19:57:00 2025 GMT
Subject: CN=6946ff8c-8a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:57:f9:01:37:0d:78:be:12:21:65:6f:6b:f9:
be:43:39:78:00:46:7b:69:9b:ab:15:eb:62:79:2f:
3c:4e:b2:b5:76:c4:bc:06:b8:07:ad:99:27:d7:fc:
ad:d7:dc:3f:53:3c:d1:74:e5:d8:f9:eb:6a:d7:dc:
95:dd:b5:19:25:fd:39:86:69:80:1f:58:26:3d:37:
31:61:20:8b:d2:f9:17:e1:aa:21:fd:cc:60:08:f2:
e2:52:a3:ea:09:bc:f3:6a:7b:fa:13:dd:ca:5e:0e:
55:75:35:75:4f:0f:25:c1:f8:19:82:d8:6a:cb:e9:
89:a6:14:3e:e3:df:c1:98:c0:af:f1:8d:29:91:01:
b8:55:e6:cf:2f:ea:e1:e7:49:00:03:d6:89:0a:9e:
d8:71:1c:13:1a:49:29:1b:17:c1:28:ca:f4:ba:fa:
1f:18:34:86:d9:62:83:34:39:0b:0e:45:52:33:e2:
13:46:5e:ca:41:4d:ed:f4:5a:19:59:b7:56:50:08:
68:32:23:2c:11:34:32:9b:92:1b:2c:23:21:7f:f7:
56:b8:51:95:11:29:99:78:e1:44:08:55:ef:79:dd:
c5:8b:68:a1:b0:4c:64:18:03:5b:5b:b6:8e:fe:85:
da:dc:c5:3d:eb:a5:72:13:77:03:d6:cc:10:9d:1b:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BB:69:48:A9:1E:2E:E1:75:05:0C:11:7C:9B:77:C7:5A:FC:AF:D4
X509v3 Authority Key Identifier:
keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f8:23:a0:22:a1:b7:5a:da:3c:d5:23:a4:9a:82:e7:4a:b8:
b0:e0:31:3f:02:6e:92:34:1b:63:87:77:73:25:47:9c:95:23:
18:cf:df:79:35:ca:e5:12:73:89:57:36:03:43:aa:3e:a4:d6:
ed:8e:89:6b:53:c6:76:e5:52:ca:7e:61:e0:33:0c:3d:dc:d3:
b8:ad:8b:3b:41:41:d4:2a:fc:b6:e7:8f:13:7f:bd:cb:77:d8:
b1:19:b1:b3:14:34:d3:63:18:bd:52:04:fb:6f:8a:36:e1:53:
54:4a:2b:b0:d9:25:75:c3:a7:a6:94:b5:af:2d:e3:f5:2a:95:
5d:32:50:c3:2a:93:83:65:fd:b1:68:a0:3a:d1:c0:5f:2e:ab:
6d:48:6b:09:ed:5b:8d:bc:d8:82:d8:70:42:7f:ad:a9:a9:fb:
a3:06:a9:5c:32:1d:84:44:a1:70:1f:a2:3f:cb:5c:9b:a9:0d:
84:c9:04:b8:a2:d7:fc:83:b3:ea:ac:78:15:a3:99:ba:31:83:
7f:21:84:f7:cc:a8:62:d4:4a:73:34:69:6a:45:38:4c:c0:87:
e9:6b:7e:45:32:5c:31:9b:41:9a:1b:96:18:c3:17:a1:5e:ab:
8d:54:e9:a0:e8:c7:bc:03:58:19:d5:15:b5:3f:f2:8e:79:0c:
92:86:26:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC
QzNBMzBCMTIwHhcNMjUxMjIwMTk1NzAwWhcNMjUxMjI3MTk1NzAwWjAYMRYwFAYD
VQQDDA02OTQ2ZmY4Yy04YTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2lf5ATcNeL4SIWVva/m+Qzl4AEZ7aZurFetieS88TrK1dsS8BrgHrZkn1/yt
19w/UzzRdOXY+etq19yV3bUZJf05hmmAH1gmPTcxYSCL0vkX4aoh/cxgCPLiUqPq
Cbzzanv6E93KXg5VdTV1Tw8lwfgZgthqy+mJphQ+49/BmMCv8Y0pkQG4VebPL+rh
50kAA9aJCp7YcRwTGkkpGxfBKMr0uvofGDSG2WKDNDkLDkVSM+ITRl7KQU3t9FoZ
WbdWUAhoMiMsETQym5IbLCMhf/dWuFGVESmZeOFECFXved3Fi2ihsExkGANbW7aO
/oXa3MU966VyE3cD1swQnRtSSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBC7aUip
Hi7hdQUMEXybd8da/K/UMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw
QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI
WU9kMGdfay02dnE4T2pDeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCL+COgIqG3Wto81SOkmoLnSriw4DE/Am6SNBtjh3dzJUeclSMYz995
NcrlEnOJVzYDQ6o+pNbtjolrU8Z25VLKfmHgMww93NO4rYs7QUHUKvy2548Tf73L
d9ixGbGzFDTTYxi9UgT7b4o24VNUSiuw2SV1w6emlLWvLeP1KpVdMlDDKpODZf2x
aKA60cBfLqttSGsJ7VuNvNiC2HBCf62pqfujBqlcMh2ERKFwH6I/y1ybqQ2EyQS4
otf8g7PqrHgVo5m6MYN/IYT3zKhi1EpzNGlqRThMwIfpa35FMlwxm0GaG5YYwxeh
XquNVOmg6Me8A1gZ1RW1P/KOeQyShibW
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:28:11 2025 by rpki-client