This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
File: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft (raw, json)
Hash identifier: XlfZxwOTE2SBLbL3aYWvEJeqsRZsdfFpdB5qVQ61Sis=
Subject key identifier: 83:98:8D:09:92:E5:E1:A4:37:3B:9B:A2:FC:88:35:9C:A0:4B:23:1F
Authority key identifier: 9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB
Certificate issuer: /CN=A9169DB2/serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB
Certificate serial: 091E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
Manifest number: 0914
Signing time: Thu 18 Dec 2025 19:49:13 +0000
Manifest this update: Thu 18 Dec 2025 19:49:13 +0000
Manifest next update: Thu 25 Dec 2025 19:49:13 +0000
Files and hashes: 1: m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl (hash: pryXjlc/mP5ChfE1DSZCKMjqzdOQil4hScbnaHrA7Sc=)
2: C6B310B077E711F0B31CEB36C4F9AE02.roa (hash: xSQoZAfy0zR56Zr6/C+AkFsuhvwUbTGAIDtsgoONysw=)
3: 46106B5077E811F0B822833AC4F9AE02.roa (hash: 9Oj88fgWpf7bDNpYMBgtHOzsobZ0C0giyGClKVgu7Io=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl
rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2334 (0x91e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169DB2, serialNumber=9B8259F7B3C1DEDD4719BC0ADC587B3DB89E7BDB
Validity
Not Before: Dec 18 19:49:13 2025 GMT
Not After : Dec 25 19:49:13 2025 GMT
Subject: CN=69445ab9-b5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:27:d4:39:c9:e5:38:34:46:2b:70:fe:7e:
27:32:c9:b4:59:78:2e:ef:ee:f7:54:51:4d:2d:6c:
2c:9c:83:a1:5d:04:20:67:1d:85:9f:31:eb:0a:7f:
50:f5:45:cb:01:5c:eb:84:7d:26:03:d1:8d:d5:10:
da:ce:d2:1c:3a:9b:3d:34:a3:05:4f:c0:49:e9:10:
be:fb:ae:19:0c:33:d5:48:77:ed:6c:0c:a1:40:de:
7f:65:9d:1c:37:82:e2:9b:ae:f1:14:bb:c6:71:79:
e6:ed:fd:19:17:99:4f:64:b8:7f:a5:e9:33:74:aa:
c6:f2:49:1b:59:ac:5e:4d:31:5c:e5:b4:f4:99:cb:
21:1a:7e:c5:05:c1:8b:b5:5b:76:02:9d:15:0e:de:
9d:6d:7d:43:1d:6d:a2:f6:c3:e8:84:1f:d8:4e:ea:
29:9e:73:c0:2c:95:67:35:cf:ff:f6:0b:4d:d8:8a:
fb:b2:ba:54:6d:da:fc:8a:11:e6:e2:63:2f:a4:47:
0d:ef:1a:6d:6d:0a:c4:31:ae:45:22:1e:3f:5f:dd:
5a:80:31:a6:e9:1c:7b:56:8e:4b:2e:e2:3a:df:54:
42:0c:db:9b:49:6e:36:d8:aa:ac:f4:f6:ff:66:63:
45:44:20:1a:47:d7:85:63:50:cf:e7:9f:e6:84:9f:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:98:8D:09:92:E5:E1:A4:37:3B:9B:A2:FC:88:35:9C:A0:4B:23:1F
X509v3 Authority Key Identifier:
keyid:9B:82:59:F7:B3:C1:DE:DD:47:19:BC:0A:DC:58:7B:3D:B8:9E:7B:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169DB2/A9CC49B6B9BB11EABDD0FD84C4F9AE02/m4JZ97PB3t1HGbwK3Fh7Pbiee9s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:03:51:ba:f3:d9:5d:63:4f:40:e6:ee:eb:a5:5f:e5:8d:ef:
ea:5a:eb:09:04:83:58:22:31:9c:8a:30:4b:5f:41:01:25:64:
6f:a1:cf:cf:a8:8e:c6:56:6c:d3:b3:52:36:9c:6d:2d:b5:66:
c4:3f:f5:38:62:c1:34:72:c0:81:51:d8:56:1a:36:a9:96:fb:
3b:b0:02:63:b9:8a:f8:2c:98:a9:22:d1:cf:e8:89:30:65:a7:
f4:3c:7c:67:bc:66:82:ad:42:91:2f:1a:7d:b0:9e:e4:a0:bd:
88:25:1d:db:99:25:5c:2e:fc:e1:fc:2e:c7:28:a3:a8:fe:e7:
f9:2b:c9:7a:9e:66:4c:50:66:ea:fe:5f:d3:89:60:54:65:bd:
67:d2:8b:65:53:ed:3b:68:c8:a3:07:4c:1f:7f:b5:f3:d0:5a:
33:55:16:87:58:ce:24:5b:b9:d7:e8:3e:0d:f2:21:00:35:2c:
81:a2:b0:e9:3a:6a:a0:20:d8:f6:69:81:5f:3f:20:68:c5:3f:
a0:c3:22:6e:5b:6b:aa:5c:48:91:f8:2f:06:04:9b:e8:17:8b:
01:fd:68:16:a5:66:e7:db:b9:24:b3:35:f6:d7:f3:6c:73:31:
ab:8d:53:01:7b:44:cd:13:ff:3d:78:43:89:95:9e:bf:0a:d1:
09:23:3a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:06:13 2025 by rpki-client