This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
File: W9MkppvSbt2t9RKc0Y93odgFI7Y.mft (raw, json)
Hash identifier: 82tBW2jRqHCY2Wniz0rWcfz13V1ImJ3Ib2Nun7LlIFI=
Subject key identifier: 34:9D:50:69:9E:DF:4D:18:5F:FD:A2:EF:1C:09:7F:FD:3D:91:AF:0F
Authority key identifier: 5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6
Certificate issuer: /CN=A91B0380/serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
Manifest number: EA
Signing time: Sun 21 Dec 2025 04:33:16 +0000
Manifest this update: Sun 21 Dec 2025 04:33:16 +0000
Manifest next update: Sun 28 Dec 2025 04:33:16 +0000
Files and hashes: 1: W9MkppvSbt2t9RKc0Y93odgFI7Y.crl (hash: jSWumOLrqC7sBkeEQShv4ttf9/QB5dALy5LHkt2NhlM=)
2: 09FB57587C7411EFB8CF8A27C4F9AE02.roa (hash: gO0CUhCgilm8/UUOXFuuBpFB5QM9rFiYOIsqVOXOzlY=)
3: 0A918056D24C11EFB8B5C95EC4F9AE02.roa (hash: cBGezkS6P+KbPVWAkP/GyV+QTZO+g5cPSzSssSv6zII=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl
rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:33:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0380, serialNumber=5BD324A69BD26EDDADF5129CD18F77A1D80523B6
Validity
Not Before: Dec 21 04:33:16 2025 GMT
Not After : Dec 28 04:33:16 2025 GMT
Subject: CN=6947788c-75ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:ca:b4:63:d3:93:3b:14:c0:73:db:eb:5e:
41:0e:5c:9c:0c:4a:61:28:7c:cb:3f:5f:e1:64:2f:
f2:15:f9:fc:bc:b3:0a:78:ea:12:6f:79:c3:6f:a8:
a6:7b:8d:1c:ac:c9:b5:6d:aa:33:32:10:aa:e4:46:
43:eb:b2:53:b5:67:dc:07:ba:1b:b1:fe:7f:38:ea:
34:86:c2:cb:1b:74:54:ed:44:41:26:52:2e:b9:a0:
a6:f9:03:c3:a9:86:ea:e6:1e:98:a0:6f:48:e2:c2:
5d:ec:2a:b3:aa:2c:04:bb:6c:ec:92:16:03:74:a3:
1e:9c:63:c2:cb:79:50:b1:75:ae:67:80:fd:21:08:
3f:ea:f9:af:78:58:e6:5a:af:ae:ef:f4:61:00:d4:
45:fb:2b:5c:43:0d:b2:fd:c2:e3:46:1d:9a:6c:63:
8b:e9:8e:83:05:5e:53:a9:53:a1:90:4b:dc:80:d5:
f9:33:1b:0d:4b:2d:71:f8:53:ec:43:17:35:40:2f:
70:f4:93:37:05:ec:75:a7:35:cd:38:31:7d:d4:0a:
a7:f5:b0:49:b6:42:ee:7c:15:6e:57:ee:71:59:71:
12:37:04:4c:fa:1c:7d:a2:8c:70:95:34:5f:cb:a6:
1b:5a:a4:df:28:0c:ec:e7:4e:ab:2e:a6:b6:51:15:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9D:50:69:9E:DF:4D:18:5F:FD:A2:EF:1C:09:7F:FD:3D:91:AF:0F
X509v3 Authority Key Identifier:
keyid:5B:D3:24:A6:9B:D2:6E:DD:AD:F5:12:9C:D1:8F:77:A1:D8:05:23:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W9MkppvSbt2t9RKc0Y93odgFI7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/77224E947BCB11EFA2489211C4F9AE02/W9MkppvSbt2t9RKc0Y93odgFI7Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:63:2c:4d:7e:0d:c2:fa:38:0a:31:be:43:f0:02:cf:58:e9:
3e:ea:a7:aa:9a:9d:83:4e:c9:66:28:b7:d7:97:e1:8c:3d:97:
5a:c7:c0:88:cc:02:a6:b8:67:3d:ea:9c:c3:e4:a4:32:47:7c:
be:21:be:43:01:3f:34:38:f9:48:dd:47:fa:dc:91:71:1b:6a:
ab:4e:5e:4f:f8:e0:1b:60:83:ed:68:35:6f:0b:80:92:41:d8:
21:f3:f9:46:0f:02:95:24:ac:62:84:39:89:8c:ef:cc:42:8d:
a7:32:1c:88:59:3c:9b:42:e7:a4:06:bb:3e:6f:05:da:74:f8:
94:09:1c:59:3a:0d:64:68:28:0e:8a:0d:8e:fa:38:be:73:23:
c6:46:db:4c:d7:49:4c:78:d8:df:f0:e9:9a:09:2a:a7:54:53:
e7:be:09:e4:56:d5:4b:ea:37:2f:ac:ec:fc:df:90:91:c0:fa:
69:db:3c:14:1c:e9:98:5b:32:3e:4e:70:54:18:1f:ed:8c:1b:
a8:9f:a4:df:4e:e9:76:02:86:be:41:43:50:ab:6c:91:fb:4e:
0b:71:7f:df:da:8a:9d:15:11:8e:dd:ea:fd:30:d7:cd:bc:19:
71:17:2c:1b:5a:09:cf:58:8d:36:36:16:82:cb:9f:ae:7d:2b:
5d:25:25:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 14:31:07 2025 by rpki-client