This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
File: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft (raw, json)
Hash identifier: hdMZLFN+l4Dpo9Ggzz5a2QWchCchMy5VRqNos/Y6DsI=
Subject key identifier: CD:4C:74:DA:A4:44:99:C2:90:4A:20:3A:42:7E:8E:65:60:F2:29:D0
Authority key identifier: F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48
Certificate issuer: /CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48
Certificate serial: 0231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
Manifest number: 022A
Signing time: Wed 17 Dec 2025 01:36:26 +0000
Manifest this update: Wed 17 Dec 2025 01:36:25 +0000
Manifest next update: Wed 24 Dec 2025 01:36:25 +0000
Files and hashes: 1: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl (hash: Df0EnUS+wefBrwWQjkkCI6iH3RRUhkP9BQkwVYRcUYU=)
2: 56D1860A97D411ED801D7E41C4F9AE02.roa (hash: w+YVCZlT+ueyv41aCuxnpcHi2Q6S5cfTHp2i5KKlTA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl
rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 01:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FA48, serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48
Validity
Not Before: Dec 17 01:36:25 2025 GMT
Not After : Dec 24 01:36:25 2025 GMT
Subject: CN=6942091a-3e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:2b:1a:46:26:8a:6c:0c:23:ac:d7:49:83:
2b:91:38:59:dd:5a:2e:79:db:44:03:76:99:3b:c0:
29:df:ac:73:8f:54:cf:52:0c:f2:fd:66:a1:88:1e:
85:bc:75:31:6f:eb:55:c8:8b:56:4f:74:46:0a:5b:
8a:53:06:16:22:7e:5c:4b:f9:46:00:0b:87:2a:03:
96:59:cc:c4:f9:73:dc:bc:63:ab:2c:1d:91:c4:3c:
ca:81:4b:ea:03:ca:98:e3:69:83:3c:90:60:91:9a:
f9:d6:4f:72:5e:af:72:7b:57:2b:4c:c0:bd:f4:a4:
78:c3:18:d4:2a:9a:6c:94:93:ee:20:0a:57:8d:0f:
5b:7b:2c:4c:3b:57:87:f2:60:04:0c:47:fb:dd:a9:
34:31:4c:da:00:5a:2f:93:49:dd:47:ce:bb:ef:eb:
2b:b3:a3:b8:87:15:de:de:84:fe:23:95:ef:ef:57:
fe:9e:15:f4:61:be:82:a5:48:63:cc:9b:6f:ec:a5:
e1:4d:aa:fc:6d:58:40:80:df:50:55:65:d1:5b:e0:
e0:d1:c1:52:b2:6b:26:b5:74:d8:e8:80:ee:af:fe:
a1:31:33:a1:37:f4:0d:6a:e1:a3:70:78:90:50:90:
3a:23:71:0d:3b:94:6d:b7:69:99:e5:f8:d9:fa:cc:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4C:74:DA:A4:44:99:C2:90:4A:20:3A:42:7E:8E:65:60:F2:29:D0
X509v3 Authority Key Identifier:
keyid:F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:11:b6:51:19:88:62:7d:be:63:fd:3f:93:32:3c:b0:5e:77:
fb:cb:b8:7d:d4:d6:8c:1f:71:c1:8c:3c:eb:ad:54:01:9c:b8:
70:cf:c4:17:a0:4a:7e:e4:81:5f:32:a0:08:d1:15:87:34:27:
08:e0:40:f2:fe:81:18:6b:82:21:6b:f7:c6:85:59:2c:0b:30:
6c:62:7c:a1:e1:b2:3f:4c:69:a7:dd:68:4f:39:79:90:db:aa:
3d:66:5e:ca:d8:eb:21:db:18:24:37:12:4e:85:b7:8c:9c:67:
fb:ad:f8:24:91:f5:6e:50:90:09:38:fa:48:26:97:b3:d5:d6:
aa:60:4d:5f:00:fe:51:82:25:a1:6a:48:86:7b:df:91:17:19:
73:f8:4f:9c:21:0b:61:16:44:7f:69:cd:c4:e2:b2:f7:de:b5:
20:fa:bb:fe:b1:73:62:4d:e0:99:d7:0c:89:94:1a:13:47:23:
25:b8:f9:c4:44:df:b8:ad:be:6b:c2:9f:61:37:3f:b1:0d:af:
8d:c3:8c:4b:b5:b7:9d:d4:76:21:59:6f:4e:b6:71:c5:ee:ab:
f1:83:e0:66:3d:e0:9c:ba:20:59:d0:ae:51:34:5b:a2:d5:0d:
f7:de:ad:c8:e3:e7:30:df:2e:ec:1d:23:74:a3:4c:4e:38:0f:
04:1d:78:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 09:34:50 2025 by rpki-client