This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
File: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json)
Hash identifier: 9gk+QPxeWpFTZvrBcoEweQI8q0kBTLv1UMKQKjgPg7o=
Subject key identifier: 69:EA:F6:27:EC:84:F6:02:E8:8E:D2:AC:04:C6:58:80:BB:84:38:64
Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D
Certificate issuer: /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
Certificate serial: 09E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
Manifest number: 09E3
Signing time: Fri 26 Dec 2025 19:19:56 +0000
Manifest this update: Fri 26 Dec 2025 19:19:56 +0000
Manifest next update: Fri 02 Jan 2026 19:19:56 +0000
Files and hashes: 1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: inzAVOEFewr/R99I1NJB1EWOkjSTBoUlbEvu7a+OprY=)
2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: 2KXnyRjzRL6Ajbgx/szbyFBTyK8pjQMyBf0qPFxtz+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl
rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 19:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2537 (0x9e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
Validity
Not Before: Dec 26 19:19:56 2025 GMT
Not After : Jan 2 19:19:56 2026 GMT
Subject: CN=694edfdc-e7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:82:17:88:00:0a:ee:64:c3:e0:99:aa:7d:05:
14:78:8c:12:7e:20:3d:63:38:3a:d7:22:38:ac:ce:
9c:65:fc:61:bb:e7:4c:07:48:63:a1:2f:95:79:b0:
2f:53:0c:e4:4e:40:15:3f:26:9b:4e:bc:72:44:d2:
7a:8f:a8:d1:20:34:e0:f1:70:bf:10:4d:41:51:7a:
16:c6:0a:bf:fd:47:15:03:07:1a:3b:de:9d:98:35:
8f:6e:95:29:76:be:71:45:c7:fd:ac:4a:61:ab:68:
c6:61:1c:48:5e:fe:e5:ef:0d:b8:31:b7:4a:2c:49:
ba:4e:ab:d8:bf:53:2a:81:ab:57:2d:63:13:75:88:
e9:af:8e:64:fe:2f:a8:8c:46:9f:bd:59:dc:46:2a:
2a:a1:76:8c:d2:64:08:66:4c:f3:20:d9:bd:f4:cf:
47:29:1c:f5:e6:71:09:1c:70:09:41:1c:9e:09:5d:
ed:91:78:90:5d:2b:df:a9:aa:89:b8:58:0f:bb:40:
5d:9f:12:90:5f:d2:50:0d:3a:42:80:33:aa:56:86:
92:41:e0:21:06:20:ac:55:b9:15:98:b3:0b:a3:a4:
87:45:87:99:d0:b2:5c:24:d6:d6:97:a3:0a:d5:62:
fc:f5:86:21:e4:eb:be:c0:fa:6d:5b:4a:6f:0c:b0:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EA:F6:27:EC:84:F6:02:E8:8E:D2:AC:04:C6:58:80:BB:84:38:64
X509v3 Authority Key Identifier:
keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f9:61:5d:5b:63:b0:e8:d5:bd:04:b1:b3:b3:fa:d1:b7:49:
51:d2:bf:0f:7c:49:c3:06:8e:39:16:bf:c6:f9:b9:ff:12:b6:
d3:32:8c:a6:91:ce:21:ed:85:f7:dc:95:c4:38:8a:53:f4:f3:
d1:5d:15:d6:14:e6:b6:13:6f:3c:99:4d:07:32:e2:d0:a0:1c:
6a:1a:a5:61:5b:04:1a:b2:88:3a:5d:55:71:87:8f:a8:04:8c:
d3:a6:54:de:fc:4d:0a:55:19:21:62:d5:f5:4d:8c:26:f8:32:
d0:6d:67:42:1b:38:52:dc:f5:f5:66:e0:7f:2f:22:61:ab:3a:
26:33:d1:90:ae:50:91:be:d6:a3:34:c8:3d:aa:65:3c:8c:71:
a3:c6:4a:e9:9d:62:fd:49:df:6d:4a:dd:08:0b:68:56:92:99:
cc:ad:c3:fe:bd:a8:c4:57:1d:7e:e3:4a:07:14:ad:b0:1c:0a:
d1:73:ed:09:06:20:aa:dc:2f:31:4b:7d:f7:4a:48:9b:88:cf:
3c:fd:20:de:13:ea:5a:92:ec:88:eb:7c:22:1d:54:8f:29:8f:
82:6c:43:f9:b4:49:46:41:91:0c:2b:82:ee:ee:9d:2b:63:e6:
5f:8f:7a:1e:34:88:9c:03:e2:8c:57:8a:d0:15:c0:59:a2:43:
99:58:f4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 09:43:07 2025 by rpki-client