This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
File: pkvkSssA5L2uRJGw-gzXCZ0scnw.mft (raw, json)
Hash identifier: oOW20wOBjeL7GFEyawQuyWueU4Ib3wq3xs+gpoZk8W8=
Subject key identifier: D5:38:51:E4:54:C2:AA:F3:70:7E:F8:54:B3:EC:13:74:20:FF:A2:F0
Authority key identifier: A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C
Certificate issuer: /CN=A91288D9/serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
Certificate serial: CB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
Manifest number: C9
Signing time: Mon 22 Dec 2025 18:37:10 +0000
Manifest this update: Mon 22 Dec 2025 18:37:09 +0000
Manifest next update: Mon 29 Dec 2025 18:37:09 +0000
Files and hashes: 1: pkvkSssA5L2uRJGw-gzXCZ0scnw.crl (hash: 67ezRkApRzfvzYb4vbocpzfkFoxZTKE/5KSvp59+sDU=)
2: 8D431594FFDF11EF8DF72930C4F9AE02.roa (hash: pDBpwWzy3RFOzY6mOa1pibkze94QAdG3zJbynRenhAw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl
rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91288D9, serialNumber=A64BE44ACB00E4BDAE4491B0FA0CD7099D2C727C
Validity
Not Before: Dec 22 18:37:09 2025 GMT
Not After : Dec 29 18:37:09 2025 GMT
Subject: CN=69498fd6-c6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e2:97:0c:c6:23:b1:9c:6b:fb:cb:05:12:ca:
ae:d9:0b:de:62:3f:45:a9:bf:50:33:ad:04:da:de:
5a:38:d8:6c:d6:ba:ac:8a:92:be:21:a9:b8:ba:fd:
06:8d:ed:10:50:05:2b:04:6c:aa:ef:16:44:5d:44:
06:75:b9:f7:2d:ac:15:92:be:b6:7b:46:4a:56:1b:
40:33:b3:df:11:b8:c9:93:1c:66:38:7c:12:d6:e6:
17:ff:dc:3d:c5:ba:28:97:be:57:a7:27:8e:ad:8a:
73:47:5e:b0:65:c1:df:95:a2:1b:7e:ad:f2:44:34:
30:46:ab:fc:ea:83:5e:9b:d2:38:a2:a5:27:b1:80:
3a:0b:0d:68:6e:29:d3:26:bc:61:29:54:ec:52:de:
be:db:24:db:02:3b:f5:56:4d:15:89:87:9e:ba:ab:
0c:1e:4e:88:b4:a5:86:0a:12:ea:1d:3d:7e:84:2d:
f7:9a:76:ff:f5:83:ec:3b:70:5a:f2:dd:48:70:38:
0d:3b:78:04:14:3b:7a:f8:c4:3d:f8:78:e2:1e:be:
90:2e:95:01:be:43:3d:51:17:32:fc:f0:75:1f:67:
e8:24:46:c1:9f:f5:87:4c:c2:2f:fd:d8:02:2f:1d:
bd:54:2d:f7:fd:4c:eb:e2:60:c1:12:a3:7d:b3:1c:
b6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:38:51:E4:54:C2:AA:F3:70:7E:F8:54:B3:EC:13:74:20:FF:A2:F0
X509v3 Authority Key Identifier:
keyid:A6:4B:E4:4A:CB:00:E4:BD:AE:44:91:B0:FA:0C:D7:09:9D:2C:72:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pkvkSssA5L2uRJGw-gzXCZ0scnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91288D9/F83E3FCEADBC11EFB302983EC4F9AE02/pkvkSssA5L2uRJGw-gzXCZ0scnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:15:09:b5:50:7c:f8:bc:31:fe:3a:4c:92:86:c0:a7:18:4a:
11:3f:20:05:aa:69:a4:94:1e:b4:b2:76:cf:50:8f:5a:b8:d9:
d3:2e:0c:64:cc:26:f2:9b:3a:99:db:a6:8f:0c:b1:15:9a:57:
08:b4:5c:97:21:c6:10:a7:2c:33:bd:60:9d:03:09:19:97:1e:
4e:74:d2:76:15:ad:12:13:63:c0:e4:d5:21:79:2f:ed:50:7a:
05:2a:5a:cf:0c:af:e2:8b:7e:ca:0d:39:8a:72:97:a8:60:a1:
11:d6:d0:4e:f2:87:80:bd:f1:99:bc:31:c8:bf:29:6d:85:48:
82:fd:23:be:20:8d:45:83:bd:87:62:72:f2:54:03:84:20:fd:
76:fe:c9:08:db:a4:8f:7c:a1:89:31:bb:b1:b8:50:af:07:86:
1c:7d:10:8a:e5:43:79:02:81:32:75:71:1f:19:43:1c:2d:47:
e8:1e:b6:44:e0:c5:a3:c4:02:ae:d5:eb:fa:88:77:8a:63:3a:
2e:e4:9d:02:18:0f:cc:8a:df:16:02:eb:df:d2:42:93:bd:f6:
9c:1b:8c:e0:a0:8d:7c:d9:af:84:f5:da:3c:f6:02:fb:09:24:
be:7b:ae:28:74:2a:f6:8a:33:44:ee:fc:ff:02:0d:7e:3e:81:
97:01:f3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 16:18:22 2025 by rpki-client