This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json)
Hash identifier: KMHHcmKBinv+qd0M3MHbapMcJ/ZCqxPu798fu3mUaOg=
Subject key identifier: 5E:CB:DE:F2:F7:17:5B:F6:F6:9C:4B:09:EE:11:0E:23:03:DB:2F:1F
Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
Manifest number: DD
Signing time: Sat 27 Dec 2025 04:31:22 +0000
Manifest this update: Sat 27 Dec 2025 04:31:21 +0000
Manifest next update: Sat 03 Jan 2026 04:31:21 +0000
Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: 4s2pEvRDyVfFL/BGrUdNImjUx6+C50HYjWXUMA1A4GA=)
2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: EP8IMn/Dpz37JzTGpl131u/EdByNY9mypWBz1crTuiM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl
rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 04:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
Validity
Not Before: Dec 27 04:31:21 2025 GMT
Not After : Jan 3 04:31:21 2026 GMT
Subject: CN=694f611a-76e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:06:1a:4a:91:3e:28:15:b2:58:d9:5e:d7:
ae:86:e0:6b:63:09:8f:07:80:1f:c8:21:05:31:83:
67:2d:0d:5a:9b:c7:4e:68:c0:a5:a6:39:2a:a3:71:
13:6d:fa:ac:d8:c0:73:15:d6:8b:ef:46:16:b4:6b:
d4:35:58:3c:c5:ad:7c:14:fa:95:7a:73:79:37:07:
4d:93:3f:da:22:a2:48:97:fa:f7:ac:76:99:7f:c9:
28:1d:6c:4d:68:5a:71:a8:88:9d:ef:c4:4e:57:c6:
2a:40:8e:0b:7e:5e:cd:34:06:3e:ef:14:01:de:6b:
8c:14:bc:00:12:00:3d:a3:be:77:fb:b3:6a:55:9a:
bf:c4:19:f3:29:46:59:d6:04:3f:87:05:7c:1b:e7:
d2:43:65:b8:dc:58:81:a3:96:1a:73:a4:ea:b8:ef:
b1:ae:fe:07:f8:e4:bd:0b:40:5b:1e:17:b6:36:9f:
62:9f:b9:ea:b2:17:47:0c:35:3b:2c:2d:af:e8:9d:
26:cf:87:75:47:30:e2:71:10:9f:23:66:26:d1:2b:
65:5c:f5:75:45:62:02:d3:6e:18:a3:b1:34:9f:bd:
96:ca:89:ba:22:3a:2b:59:13:50:6a:65:2b:8b:61:
e0:59:93:9b:d8:c5:e2:15:2b:5a:42:83:fb:9e:74:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:DE:F2:F7:17:5B:F6:F6:9C:4B:09:EE:11:0E:23:03:DB:2F:1F
X509v3 Authority Key Identifier:
keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:10:f5:a4:33:8d:7f:9e:94:d6:72:5a:c1:55:aa:54:a6:01:
28:3b:e0:a9:48:f4:30:84:e5:4d:4b:2e:d4:21:c5:2d:f1:69:
90:09:a6:96:71:9d:f9:b4:61:0b:45:24:21:b7:51:fd:8c:a0:
63:66:81:7c:50:50:70:01:be:07:85:17:5f:22:00:3a:3c:bf:
d9:4e:9f:56:24:ea:39:5d:cb:cd:04:11:23:41:e0:d3:49:07:
01:d2:b4:c3:5c:f6:37:33:dd:f1:6d:a6:08:0a:a0:0e:87:64:
57:4c:7e:82:4d:80:2c:3b:5c:ea:21:82:c4:34:34:35:37:97:
3d:6e:2a:28:56:b6:30:8a:b8:27:75:20:c0:49:9c:1c:3b:71:
cb:a7:79:ac:82:fc:90:60:4a:1b:46:1f:ad:c0:df:44:73:17:
36:31:49:e6:6a:26:1f:11:51:71:7b:09:d1:63:b9:06:e4:4d:
8c:c1:16:ce:01:c1:0d:62:64:ba:e7:ab:38:cb:b8:6b:92:1a:
6a:1d:bd:9e:5a:d9:a2:61:1a:63:35:f6:ed:9b:b0:2d:8d:b8:
08:b9:fc:6d:57:e0:04:6e:67:ff:39:51:7f:b8:25:1c:13:1b:
9c:4e:1a:a0:bc:ae:7c:b9:6e:40:ac:69:97:27:11:7e:ed:a3:
57:17:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 18:03:24 2025 by rpki-client