This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
File: rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json)
Hash identifier: 5dqYp2AcHeB42Z2zp0qMPVIuN2xBZZosYIKPSjV9HXo=
Subject key identifier: FC:B4:5A:64:9B:AA:5F:CD:C6:23:57:E7:B9:BF:94:B7:F5:A7:70:D0
Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80
Certificate issuer: /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80
Certificate serial: 3591
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
Manifest number: 3549
Signing time: Tue 30 Dec 2025 15:11:40 +0000
Manifest this update: Tue 30 Dec 2025 15:11:40 +0000
Manifest next update: Tue 06 Jan 2026 15:11:40 +0000
Files and hashes: 1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: zg2yQ5gprB2iDhXlYWJfjXGbUxuz0NEyaWIMugSsUbc=)
2: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: II+/TUwYvc2wN3sBmw1zc72yFD4G23J/I9oaUtZWlNU=)
3: F8A618E05E3511F0ACCE4C26C4F9AE02.roa (hash: /vK2ytfzdp/jeK0M80/Zmuq2APa5GK7Dlrkw7zxK/Z4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl
rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 15:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13713 (0x3591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9191A09, serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80
Validity
Not Before: Dec 30 15:11:40 2025 GMT
Not After : Jan 6 15:11:40 2026 GMT
Subject: CN=6953ebac-821f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2f:a9:ca:36:70:8c:07:67:ff:8b:35:25:7d:
30:69:0f:bb:10:bf:31:52:06:b8:02:f2:68:be:9b:
e0:2a:32:d5:93:2e:29:ee:de:e5:cd:96:96:9c:02:
f8:b7:7b:24:01:9d:4d:16:07:6b:73:b0:1b:ef:ea:
30:37:9a:18:9f:87:61:9d:43:44:15:41:1e:f0:aa:
19:90:7a:50:1c:c3:73:db:4d:a9:16:1c:f1:39:c6:
21:e1:ad:77:21:ac:fb:98:a1:b1:3b:85:51:77:7d:
b3:8f:99:24:20:41:db:51:48:cb:32:39:a3:3c:c5:
92:90:c9:b4:1b:46:4c:23:48:2e:4a:d5:69:ee:c3:
89:cb:1f:a3:e2:99:7a:2b:6d:88:0b:c0:1a:c1:3a:
9f:02:a7:d7:76:c5:bd:bd:e6:ab:08:da:ce:b5:01:
bb:38:eb:c3:51:25:43:a5:7e:d4:b8:d2:ce:e0:80:
71:3d:4f:64:9a:a8:17:7f:76:e1:a1:31:43:7c:62:
4c:9b:79:94:22:c3:8c:b6:de:84:d6:dc:a8:35:ad:
89:3a:9c:31:f6:49:6b:56:48:92:96:00:aa:47:c4:
28:97:c2:63:7f:fe:05:7d:10:5e:f6:8c:b5:39:36:
be:0e:24:c0:48:5d:06:9c:82:31:da:ec:cb:1e:c6:
e5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B4:5A:64:9B:AA:5F:CD:C6:23:57:E7:B9:BF:94:B7:F5:A7:70:D0
X509v3 Authority Key Identifier:
keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:38:68:19:8c:d5:1a:ab:ef:47:7e:f9:ae:5f:f4:7e:40:82:
a3:33:65:40:0e:7d:fb:26:2f:6f:a8:b6:fc:e0:7b:7c:70:b6:
1d:22:c7:8e:e7:cc:de:34:d7:67:1d:03:8f:bd:d7:5d:f6:01:
f8:61:f0:2f:bd:05:cf:d8:5c:81:37:c4:53:9c:0a:01:a2:b1:
d4:d0:a0:05:fc:c3:5d:26:7a:7f:07:6c:ab:3f:6b:02:fd:f8:
32:e9:8d:e6:6a:27:f4:27:fc:84:ea:76:1a:cf:13:8d:80:7c:
7f:fb:4e:8b:28:51:72:96:34:66:ef:6b:73:75:08:85:07:06:
0e:16:87:72:f2:73:79:f6:5a:57:0f:e4:12:30:ed:15:0a:a3:
df:46:76:0b:df:77:18:a4:1b:be:70:a4:4e:2e:85:e0:a1:77:
86:14:33:1b:35:86:d6:5f:4e:08:99:02:67:9e:77:b2:c5:6f:
a2:b4:ca:1c:dc:41:d9:40:a3:9a:3b:42:fc:66:e3:e4:82:7d:
5e:55:65:9c:a4:c2:68:ee:76:d6:3f:89:6c:d2:81:10:f4:25:
f3:ee:11:18:d5:1c:26:3c:ca:b9:d4:df:9d:5f:c6:6c:31:6a:
99:d6:a6:0b:3b:9d:de:91:8e:ca:25:51:e1:82:75:8f:76:7c:
b6:ff:12:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 07:18:42 2025 by rpki-client