This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
File: 9VIt4xOETpbj6_OANOygm-KqCtU.mft (raw, json)
Hash identifier: IpUYEkCjJM5dyupYHfQ6TpPQj13eXk35oRj15Q9JJUg=
Subject key identifier: 13:5F:77:C2:C5:46:25:5F:0A:A5:67:7F:81:24:55:BD:BD:49:3C:1C
Authority key identifier: F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
Certificate issuer: /CN=A916B837/serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Certificate serial: 03EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
Manifest number: 03C0
Signing time: Sat 20 Dec 2025 23:57:56 +0000
Manifest this update: Sat 20 Dec 2025 23:57:55 +0000
Manifest next update: Sat 27 Dec 2025 23:57:55 +0000
Files and hashes: 1: 9VIt4xOETpbj6_OANOygm-KqCtU.crl (hash: XD3SGnDmZOx9G2f7Wl8GO4SHeDy6cHfjjQXRxqIOALs=)
2: B1D7938EC15E11EC9C718A0DC4F9AE02.roa (hash: ETk4yckaIN4zob6tGTfs6vKP9pAP7tygu9LlkOfrkSU=)
3: 1409168E1E3A11EE8485307CC4F9AE02.roa (hash: R2unzPo0vV/yNS9/vpK5AzQ4ju39sQQVsnw2HUUIUOo=)
4: 3B62C20EFF3911EDBCDB5046C4F9AE02.roa (hash: AVY0d5/NDiEX5/XcV/ITBN3dlkJ2RLeGLkg0Eo543zw=)
5: 9AC721604BC211EEA7AF2B6FC4F9AE02.roa (hash: HgWyC5qLUIQClxHJEnvtF6CqTubXKBmljCRRSfRxHP0=)
6: E0AE0960457811EDA501504AC4F9AE02.roa (hash: 1sOapiiUanKllNe/+g0UPifOXHz9i1edOTGe9WGOS80=)
7: 5DA1D170593F11ED9D9F2D28C4F9AE02.roa (hash: BIcjECgUWsQ4hPpYoXe2O+HNYZxFLkHcHH/BGhRf0OQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 23:57:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1007 (0x3ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B837, serialNumber=F5522DE313844E96E3EBF38034ECA09BE2AA0AD5
Validity
Not Before: Dec 20 23:57:55 2025 GMT
Not After : Dec 27 23:57:55 2025 GMT
Subject: CN=69473803-8639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:c1:00:9f:ab:e0:de:bf:50:40:14:11:08:
19:02:37:00:18:d3:06:94:a0:d2:d1:85:53:05:b2:
ce:3f:eb:3d:47:41:6d:9b:f7:b8:6f:6e:a1:c3:9e:
aa:a6:8d:ed:ce:31:8e:5c:85:bc:9d:11:29:49:33:
cb:0d:7a:ef:79:26:6d:71:d3:79:a5:e7:e4:79:ec:
c2:25:68:d0:20:f0:bb:52:7c:c7:ec:8e:96:cf:73:
46:00:74:fb:89:5c:c2:f2:b8:83:63:6e:d0:d6:69:
a2:8b:92:89:95:98:b5:e0:86:a5:9c:22:b2:56:07:
cb:81:16:ee:1d:8a:06:e3:1b:dc:03:51:90:58:22:
2f:7a:2b:80:98:f0:4c:c1:80:20:90:7e:b4:37:9f:
b1:df:14:65:bd:3c:92:dd:a4:41:60:d5:f8:40:44:
72:86:6a:6c:5d:25:5d:88:dd:e6:dc:96:f0:3d:15:
0a:ce:cd:5f:90:ae:5b:23:92:fc:5a:10:16:86:cb:
9c:92:12:38:28:e9:b4:86:ff:d8:11:ac:6a:e3:2c:
53:71:41:e4:9d:aa:90:20:f2:60:f0:fd:a3:2a:e6:
6a:6f:d2:9b:06:af:5f:6d:b6:27:70:0d:00:cc:28:
c5:97:17:16:a7:28:a3:2f:ba:45:37:67:d9:ed:02:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5F:77:C2:C5:46:25:5F:0A:A5:67:7F:81:24:55:BD:BD:49:3C:1C
X509v3 Authority Key Identifier:
keyid:F5:52:2D:E3:13:84:4E:96:E3:EB:F3:80:34:EC:A0:9B:E2:AA:0A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VIt4xOETpbj6_OANOygm-KqCtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B837/9D90AB62C15A11ECA44F5360C4F9AE02/9VIt4xOETpbj6_OANOygm-KqCtU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9c:29:6d:e0:96:d9:4c:ac:93:9e:c3:27:2e:b9:5c:a5:72:
d6:96:c1:e7:f6:a8:2d:e6:25:cf:f4:56:04:17:83:64:69:dc:
c1:64:44:99:f1:bc:34:14:31:2a:37:fe:03:a5:75:30:2a:22:
5d:36:32:2c:a4:ad:03:8d:5f:f7:5d:e1:bd:1d:54:5a:f5:24:
70:95:58:6a:fe:1e:9a:a8:b7:37:32:18:81:50:86:ec:b2:f9:
1a:30:58:f0:5f:04:a6:c7:d7:97:b1:ae:de:24:e2:2c:a4:cc:
39:ea:6b:da:9b:62:f0:d0:91:b1:59:98:c6:a1:f8:53:2d:31:
b8:83:04:5e:96:30:3a:4f:5e:33:06:f1:db:ee:3c:3d:f0:35:
13:47:cf:1a:27:40:9d:e4:64:9c:04:de:fb:d7:a7:bb:5f:b9:
fb:fb:89:70:24:f3:8a:0f:56:7c:00:81:7e:1b:b7:d1:ec:3b:
44:2b:c4:e6:69:4f:f3:0a:39:4d:03:3b:d1:8d:11:59:01:9f:
4f:10:c9:6e:19:53:42:8f:1b:67:6c:83:70:2f:02:6d:1b:ed:
eb:58:d2:a3:c7:e3:ba:e8:0a:38:ae:03:96:23:76:b8:98:8f:
c8:62:f3:ae:9f:8b:5b:96:29:c5:ca:de:e0:ee:77:5f:35:fd:
03:44:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 05:56:14 2025 by rpki-client