This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
File: PM59J4idCNUwg0kqqJygm2jw5fA.mft (raw, json)
Hash identifier: 0KzruwmWDFOblaTryWUlMFdtDo84XdApUbnUFUujFC4=
Subject key identifier: F9:4D:BF:EB:DA:2B:56:F8:24:62:3F:CE:C7:4E:55:EC:50:57:DB:D6
Authority key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
Certificate issuer: /CN=A9173161/serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
Manifest number: AC
Signing time: Sat 27 Dec 2025 05:04:03 +0000
Manifest this update: Sat 27 Dec 2025 05:04:03 +0000
Manifest next update: Sat 03 Jan 2026 05:04:03 +0000
Files and hashes: 1: PM59J4idCNUwg0kqqJygm2jw5fA.crl (hash: ZaMkpX0rm6mQhRC5gxLyiS5yfyfeRaBEWzwh90Qtud8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 05:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Validity
Not Before: Dec 27 05:04:03 2025 GMT
Not After : Jan 3 05:04:03 2026 GMT
Subject: CN=694f68c3-7836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:48:7c:8d:aa:8c:66:75:79:03:af:de:7a:
59:ca:bc:99:68:18:06:1e:b3:8d:3e:c0:cf:07:00:
cb:20:da:9f:6b:b9:9b:cf:e8:e7:eb:6e:e8:0b:6a:
a7:17:d1:fe:23:14:85:fd:9a:d2:3e:67:00:77:aa:
cd:4f:dc:88:08:5e:0f:90:fc:6e:2b:a8:df:25:2d:
b4:94:1a:a1:81:68:3b:dc:45:c9:f8:c6:b8:d2:62:
a1:2b:7c:95:f7:8d:b0:32:3c:c9:58:e0:43:1d:3e:
31:46:e7:cb:be:e7:f1:a5:78:3d:ba:e0:0d:83:8b:
cd:41:fb:00:8e:6e:14:e8:5a:48:60:dc:05:b1:db:
f4:16:a4:d9:61:3f:4a:da:3c:50:5c:53:34:59:db:
23:64:ec:ec:54:4b:24:71:de:6e:fe:49:37:b4:48:
f5:6a:bf:b0:9a:d0:b6:0a:2a:b5:6f:bc:92:15:7e:
2f:e4:b6:ef:00:47:96:8b:77:ed:33:3a:8d:64:a1:
b9:49:4a:48:d5:2f:e5:4d:d2:62:12:d6:1e:f0:27:
bb:26:a0:57:19:f2:66:ef:12:2e:ee:20:8e:72:00:
0a:d2:4a:91:37:b0:83:1a:18:d0:b3:44:e7:da:fd:
82:d6:19:49:67:b2:c3:34:71:d7:1b:55:fe:80:af:
3f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4D:BF:EB:DA:2B:56:F8:24:62:3F:CE:C7:4E:55:EC:50:57:DB:D6
X509v3 Authority Key Identifier:
keyid:3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e8:c0:47:63:9d:27:16:fc:07:6c:5d:09:cb:21:3e:ef:42:
49:9d:b0:2f:1b:e0:b8:5a:0a:d2:8c:c1:5d:e0:5b:d6:09:f5:
50:d9:80:08:98:d9:31:88:08:9a:2b:53:1a:76:f9:2a:62:03:
c4:39:dd:b3:76:57:1b:46:ea:2b:1d:39:9e:6f:75:f2:90:e4:
b6:1a:5c:38:f3:53:68:fb:90:9e:fb:ab:e0:26:2a:d6:f1:6e:
06:5a:ff:48:e5:6c:7b:f1:9a:4c:5b:05:7c:fc:59:43:41:3c:
e4:11:19:9a:73:a9:cc:fe:29:de:eb:ea:02:05:ce:d8:6c:c9:
9d:8a:d1:ae:38:4a:2a:03:40:9d:19:ad:e9:53:19:44:ec:07:
fb:f2:1d:19:99:a5:bf:8b:1e:43:20:ba:1c:e0:71:55:34:27:
c5:33:92:67:c8:db:f7:02:ae:f1:7f:4d:08:99:a1:13:94:74:
69:b8:23:08:cf:09:7a:96:21:77:4f:53:a9:9c:c6:46:09:e5:
fd:34:d8:36:85:62:93:ec:44:fa:16:ce:09:dd:ea:a3:a3:dd:
35:07:3f:28:f1:ea:fe:53:8a:a9:b1:02:e7:d2:8a:ea:74:4b:
29:de:4b:dd:9f:6d:30:73:33:40:41:aa:18:d5:37:d0:a5:0e:
58:6e:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 18:56:59 2025 by rpki-client