This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json)
Hash identifier: FiIuQH0O/vgzkr4lAZZbMGHimSZHmbnUDio2GJkV7Hc=
Subject key identifier: CD:22:9D:B7:16:60:09:22:EE:76:2C:BD:F1:8C:9A:8F:A0:3D:AA:CA
Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Certificate serial: 01D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
Manifest number: 01D8
Signing time: Sat 03 Jan 2026 01:52:51 +0000
Manifest this update: Sat 03 Jan 2026 01:52:51 +0000
Manifest next update: Sat 10 Jan 2026 01:52:51 +0000
Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: IdrhmfKJEgn/i3TBcqf1eHUX49ka8e+NTY+IMljvhtk=)
2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: kKqvj0xomNS0RBNYUt8mH1385WpqQD6GeAsQ4vaFhLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Jan 2026 01:52:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B
Validity
Not Before: Jan 3 01:52:51 2026 GMT
Not After : Jan 10 01:52:51 2026 GMT
Subject: CN=69587673-fedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:78:0b:7f:38:f5:40:ae:d3:a1:48:df:f4:
71:36:01:07:26:70:81:42:ec:5e:26:7a:49:a1:d5:
09:b1:6d:9d:f6:98:d4:d2:60:0f:ba:03:69:19:d0:
07:4a:df:50:9a:8a:21:8b:05:ee:af:f1:d6:3b:47:
20:00:f4:a1:1e:bd:23:bb:1c:bd:7b:97:1c:53:f2:
61:f4:a5:bd:57:f9:c5:df:42:c2:04:ca:c0:8c:50:
17:76:62:af:b5:39:09:39:22:c8:a7:ca:21:b9:df:
4c:74:05:de:c9:51:c3:4b:33:6f:ac:32:dc:85:9b:
ca:20:d5:24:b8:53:a0:cd:64:43:51:2f:5a:11:b6:
8b:d4:58:c6:13:2a:d5:10:42:8b:1f:66:81:ea:80:
97:92:77:33:d5:47:b8:a4:c9:ea:06:de:7f:29:a1:
3d:e9:91:78:cf:24:21:79:a6:ff:5b:4c:3c:79:18:
33:d4:d5:65:27:15:b5:12:c1:ff:45:10:22:90:c6:
2c:8b:f3:7a:5c:c0:b6:7f:d9:36:f5:af:f5:2a:05:
a4:15:57:33:3d:c3:19:91:c6:a5:55:ae:45:34:0f:
f0:a0:24:0a:43:a6:24:d1:0f:89:3e:97:06:e0:ed:
27:8e:a2:ee:51:e4:40:b6:92:ac:32:5f:2d:96:c6:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:22:9D:B7:16:60:09:22:EE:76:2C:BD:F1:8C:9A:8F:A0:3D:AA:CA
X509v3 Authority Key Identifier:
keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:12:38:c4:56:e5:81:3d:b6:56:a7:b6:b8:e2:30:5a:29:fa:
8e:93:21:e6:d5:79:10:8e:d5:98:f5:8a:53:7e:c2:9f:05:91:
5e:f7:b3:97:27:b8:cc:16:e0:4e:c6:1d:f8:0b:74:fa:67:79:
f9:67:8a:7e:87:b1:bd:9b:e9:48:c1:d8:62:51:54:64:b0:78:
40:15:09:43:da:54:f2:56:5b:f7:74:f1:50:26:6b:b6:29:84:
88:39:f0:a1:e2:11:9f:3f:bc:f7:23:22:64:de:62:f3:36:09:
2e:5a:df:54:fc:53:6e:55:0a:30:b9:68:b1:50:79:d4:b1:eb:
f5:72:fb:c7:db:78:a6:08:51:2f:6e:14:93:cd:9e:be:69:ce:
f5:0b:3a:7a:ef:c5:49:3f:0d:5e:59:62:54:7b:ba:b7:4f:4b:
ff:73:93:9f:5a:f9:23:1f:df:3d:c5:69:d5:a8:55:b7:f1:1c:
92:e5:92:7c:be:99:93:90:a6:f0:76:0f:85:e2:85:77:c6:66:
29:67:71:01:04:ce:d7:ac:bc:67:f5:a0:fe:57:0e:b3:0b:f3:
ca:81:4b:33:88:0c:b7:3a:ce:f6:76:89:8f:01:37:ff:ea:6d:
81:9d:4f:be:9f:7f:5e:6d:45:3b:d6:26:e5:f6:96:fe:69:7d:
4d:0d:65:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw
NzcwQjkzM0IwHhcNMjYwMTAzMDE1MjUxWhcNMjYwMTEwMDE1MjUxWjAYMRYwFAYD
VQQDDA02OTU4NzY3My1mZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3DV4C3849UCu06FI3/RxNgEHJnCBQuxeJnpJodUJsW2d9pjU0mAPugNpGdAH
St9QmoohiwXur/HWO0cgAPShHr0juxy9e5ccU/Jh9KW9V/nF30LCBMrAjFAXdmKv
tTkJOSLIp8ohud9MdAXeyVHDSzNvrDLchZvKINUkuFOgzWRDUS9aEbaL1FjGEyrV
EEKLH2aB6oCXkncz1Ue4pMnqBt5/KaE96ZF4zyQheab/W0w8eRgz1NVlJxW1EsH/
RRAikMYsi/N6XMC2f9k29a/1KgWkFVczPcMZkcalVa5FNA/woCQKQ6Yk0Q+JPpcG
4O0njqLuUeRAtpKsMl8tlsbETQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0inbcW
YAki7nYsvfGMmo+gParKMB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw
RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV
SjlMYlVvVGdwZU1IY0xrenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9EjjEVuWBPbZWp7a44jBaKfqOkyHm1XkQjtWY9YpTfsKfBZFe97OX
J7jMFuBOxh34C3T6Z3n5Z4p+h7G9m+lIwdhiUVRksHhAFQlD2lTyVlv3dPFQJmu2
KYSIOfCh4hGfP7z3IyJk3mLzNgkuWt9U/FNuVQowuWixUHnUsev1cvvH23imCFEv
bhSTzZ6+ac71Czp678VJPw1eWWJUe7q3T0v/c5OfWvkjH989xWnVqFW38RyS5ZJ8
vpmTkKbwdg+F4oV3xmYpZ3EBBM7XrLxn9aD+Vw6zC/PKgUsziAy3Os72domPATf/
6m2BnU++n39ebUU71ibl9pb+aX1NDWUI
-----END CERTIFICATE-----
Generated at Sat Jan 3 06:34:13 2026 by rpki-client