This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json)
Hash identifier: S+jYjiqSsh067dPuLhWZaWSNLkHsq3EM7axJZgeGaaA=
Subject key identifier: 0B:18:45:51:F6:48:3C:2A:59:DD:9E:63:4E:24:54:3C:E4:06:12:EF
Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Certificate serial: 0D21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
Manifest number: 0D03
Signing time: Thu 18 Dec 2025 17:53:25 +0000
Manifest this update: Thu 18 Dec 2025 17:53:24 +0000
Manifest next update: Thu 25 Dec 2025 17:53:24 +0000
Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: Qr1500ENG2iXq6QXilMlFgkOVrC1ISxun64poH9uq0M=)
2: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU=)
3: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0=)
4: 4AD97410632C11EE96048122C4F9AE02.roa (hash: Kha4B3O3qamR+l9aTTTF0PytPbYw8JUKGu9zz6Pcn9M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3361 (0xd21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4
Validity
Not Before: Dec 18 17:53:24 2025 GMT
Not After : Dec 25 17:53:24 2025 GMT
Subject: CN=69443f94-d845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b5:5c:ef:23:9c:97:0f:02:84:aa:a9:96:31:
72:16:20:e6:a4:fa:cd:ac:fa:9e:3b:db:b5:43:d7:
23:bf:cd:df:c0:f1:be:f3:06:fa:0d:e5:a6:cd:a5:
21:32:95:cf:df:f0:be:41:20:d7:9f:b2:a4:1e:69:
aa:f3:e5:8e:85:a5:05:e6:61:68:a7:fb:69:57:b9:
2e:17:6a:2d:2b:b5:58:28:74:21:4d:65:d1:f9:f5:
4d:70:78:0a:43:a8:62:d1:9f:40:c6:6a:fc:f7:1a:
5e:f4:b2:cc:cf:15:ab:87:61:04:30:be:3e:a4:42:
c2:e7:c4:d6:07:bd:4a:5e:a9:51:37:94:b9:4e:f3:
fa:31:af:8a:88:f0:fb:75:f8:e2:ef:3b:c1:22:32:
72:1d:aa:e2:e7:4f:2b:cf:f9:30:82:57:f8:00:40:
36:ae:40:2e:78:26:eb:6e:14:38:62:34:a7:54:fa:
07:6f:9d:90:8f:9d:d1:00:1d:f7:e1:a9:8b:70:07:
ed:83:cb:eb:0d:0e:b8:c9:ac:86:56:99:b6:db:88:
f9:ef:da:24:5f:3b:76:f5:52:3a:f4:98:2d:52:41:
a2:c2:55:07:92:73:78:b8:2b:e5:07:8d:4f:4e:61:
b2:44:2f:42:61:8d:03:ee:10:0c:64:42:f8:26:e9:
89:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:45:51:F6:48:3C:2A:59:DD:9E:63:4E:24:54:3C:E4:06:12:EF
X509v3 Authority Key Identifier:
keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ea:c2:85:62:a7:0c:9b:fc:0c:54:ba:50:6c:db:cd:c3:42:2d:
48:3a:80:ad:d2:00:e6:33:a4:12:21:26:63:df:45:65:91:53:
7e:3b:dc:18:15:4d:0d:99:2b:af:b9:38:31:4e:39:79:61:c8:
71:e7:1c:85:83:66:0b:6f:c5:c1:02:65:24:c1:15:54:49:ad:
c6:99:91:68:0f:e1:8e:67:9f:aa:69:41:c5:fa:33:3f:de:14:
76:f5:d8:5d:f5:4f:20:b1:b4:a9:bc:6b:35:b3:8b:c6:14:f5:
a9:15:e7:a2:43:a2:3e:5e:33:71:bc:0c:ab:25:c8:ad:11:b0:
b7:97:7d:bb:e3:1c:72:39:86:00:fb:ec:14:53:bb:02:93:25:
35:46:f6:a2:88:62:99:ce:fe:01:3c:75:15:46:4d:77:96:85:
59:b8:44:75:68:cb:24:44:5d:7f:1d:72:99:ce:b9:83:d4:43:
ec:da:5e:51:3c:ea:3b:59:12:b4:79:5f:68:20:3b:62:d5:7a:
f6:ef:63:cd:b4:c8:71:fc:6a:25:ad:00:d6:b1:00:77:63:d1:
dd:e6:be:50:6a:27:12:ea:43:43:0b:79:87:ed:eb:54:96:ea:
1c:13:33:2e:4d:94:fd:4d:4e:b5:f2:06:b7:b8:ca:91:c2:87:
ac:05:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 03:23:23 2025 by rpki-client