This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
File: 9MxDBOF5Dgj17JKahzciadCPtoE.mft (raw, json)
Hash identifier: dqXqDF01ikGI99uROR8fmNLGam9VhroORbK9fKQZvGY=
Subject key identifier: E0:E0:D9:46:17:67:9A:21:C8:5B:83:49:67:6D:12:C2:4A:25:2D:87
Authority key identifier: F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
Certificate issuer: /CN=A9167BCA/serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Certificate serial: 045D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
Manifest number: 0458
Signing time: Sat 20 Dec 2025 23:25:43 +0000
Manifest this update: Sat 20 Dec 2025 23:25:42 +0000
Manifest next update: Sat 27 Dec 2025 23:25:42 +0000
Files and hashes: 1: 9MxDBOF5Dgj17JKahzciadCPtoE.crl (hash: +pFRqxoHLsb5jDn6qgc++keM8F52raDpz/wUByYEFbA=)
2: 0E7858548CBB11ECB0842F23C4F9AE02.roa (hash: q3e8py5/C6+zKkUP8OOrbssys+IzckfYmM1B63yGsr8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 22:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117 (0x45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167BCA, serialNumber=F4CC4304E1790E08F5EC929A87372269D08FB681
Validity
Not Before: Dec 20 23:25:42 2025 GMT
Not After : Dec 27 23:25:42 2025 GMT
Subject: CN=69473076-ee2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:ca:63:f5:da:ed:11:6a:98:63:71:98:39:
c5:29:12:7e:63:30:ed:9c:5d:90:2c:c5:f0:03:77:
8c:01:73:4b:59:d7:92:c2:7d:4b:af:bc:89:ac:68:
1e:79:9b:b0:83:0f:66:f7:70:11:a5:1d:77:17:05:
d4:8f:68:2e:f7:17:dc:8a:7a:fc:e3:97:57:bb:4a:
70:8e:e0:48:8e:c1:f0:56:85:c3:c9:6c:1b:8e:ec:
80:ee:29:0a:0f:42:3e:81:44:f8:69:05:1f:84:73:
92:17:32:b3:7c:00:23:2f:0d:88:7d:06:f4:75:af:
ff:9b:1a:76:b8:4c:65:84:f5:b8:12:93:00:ae:0d:
ed:57:23:f9:e1:0f:fd:6a:19:74:00:4a:b3:92:97:
99:e5:48:34:e4:ca:87:73:3e:5d:a2:9a:b2:94:ce:
b0:5a:8c:f5:8f:5a:5c:32:3f:1a:5f:8f:a3:86:b9:
86:67:9b:89:0e:0c:10:9c:80:03:00:b2:52:05:d8:
5d:a3:56:04:eb:cb:5a:ae:20:dc:ac:17:24:fc:bb:
c7:5e:86:c7:8f:99:73:43:92:6f:e8:fc:be:b7:89:
27:71:a6:f7:59:e9:88:36:d9:2c:b7:11:24:10:12:
a9:a8:62:14:8b:6d:9a:b8:ed:26:68:a8:4a:3f:98:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E0:D9:46:17:67:9A:21:C8:5B:83:49:67:6D:12:C2:4A:25:2D:87
X509v3 Authority Key Identifier:
keyid:F4:CC:43:04:E1:79:0E:08:F5:EC:92:9A:87:37:22:69:D0:8F:B6:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MxDBOF5Dgj17JKahzciadCPtoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167BCA/62BCD5DE7A9B11EC8CC2742BC4F9AE02/9MxDBOF5Dgj17JKahzciadCPtoE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fc:2c:55:c1:fa:09:1d:0f:46:fc:0c:af:72:f6:9e:c4:3f:
a1:22:6b:27:29:d7:57:56:c4:3f:e9:8f:0f:a3:61:1c:72:e9:
ba:a2:61:6e:f5:15:9f:e8:2a:cb:27:28:e0:c6:b7:56:80:04:
41:d4:6f:d8:40:ea:30:50:08:df:d6:67:db:55:b1:4d:3a:20:
74:23:db:d9:09:59:6d:7b:d8:7e:d6:10:86:fd:d6:7c:4f:8b:
08:08:00:5a:82:a6:ab:9f:e7:63:93:1c:74:bf:3e:ee:d3:4f:
2e:24:4d:0f:d2:5b:9d:08:4c:32:41:e0:51:1e:b0:35:22:29:
cc:59:b1:ea:11:32:6c:8b:99:bb:aa:eb:4f:83:ba:43:ca:65:
8b:d0:a3:55:ba:47:ba:db:4b:c5:4b:01:7e:aa:a9:1d:19:c6:
7d:33:09:19:4b:4e:9b:86:6e:48:38:af:21:40:87:dd:51:3d:
dc:13:6f:6c:79:8d:68:8c:7d:b7:9e:24:88:1e:d2:93:63:f2:
e4:57:26:b2:cb:24:44:41:f6:2d:dd:75:bc:3f:b1:c3:7e:bf:
0b:a9:3d:23:1d:aa:52:a9:2e:8d:af:b4:94:75:12:f4:ee:db:
36:d6:1b:84:ad:27:94:4a:d8:61:9c:b8:91:e9:db:62:da:47:
0e:3a:96:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:30:38 2025 by rpki-client