This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
File: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft (raw, json)
Hash identifier: YKZW6+BtPf8HrebuZ49HWi6uepcpFOa4oMNatfqL1Ls=
Subject key identifier: 42:64:80:AF:98:5C:1D:84:4B:AD:0B:35:5B:02:D5:19:65:02:B3:DF
Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Certificate serial: BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
Manifest number: A9
Signing time: Mon 29 Dec 2025 05:41:28 +0000
Manifest this update: Mon 29 Dec 2025 05:41:28 +0000
Manifest next update: Mon 05 Jan 2026 05:41:28 +0000
Files and hashes: 1: 9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl (hash: T1Ov6dxtWrWBmbkAqF77ZkSLa4nYAS/HXQSBfjkaTy8=)
2: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (hash: 61Maf4HdTVjL1p15SmMO0sDKtCDOS9JEKlRjMIwn4Cg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 05:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A
Validity
Not Before: Dec 29 05:41:28 2025 GMT
Not After : Jan 5 05:41:28 2026 GMT
Subject: CN=69521488-36d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:f8:c2:4e:8b:8f:51:f5:df:19:0f:35:4f:
85:7a:d0:23:5e:af:20:3d:b3:c9:01:f7:ba:7c:b4:
01:aa:11:31:4e:51:09:c7:d9:27:7c:94:c6:54:73:
1f:aa:e6:90:fa:d2:db:82:37:e2:04:b9:c9:a5:66:
f3:a5:43:a9:b6:1e:e1:06:16:02:02:8d:42:02:c4:
45:75:cd:6d:90:76:31:eb:e1:44:82:e3:10:91:3c:
f7:da:14:49:ac:86:ca:b1:b4:3d:f1:08:c1:aa:ce:
8e:ac:54:3a:49:9b:80:2c:2e:a3:84:2a:25:c9:9c:
35:7b:c9:1f:c3:33:01:7e:72:8a:46:fd:89:12:26:
97:f8:f9:75:0a:51:93:3d:cb:57:18:3e:fd:92:d8:
64:52:5c:4f:14:52:fe:6c:ab:de:d5:93:92:6f:e9:
80:50:68:1c:eb:a5:72:1e:86:49:4c:ce:c6:0d:31:
d6:85:da:ba:de:8f:1d:f4:04:91:82:88:3f:f2:1c:
5a:82:c8:69:3e:b1:2f:aa:c2:3c:6c:a1:7c:4d:10:
0c:d5:4a:96:df:4f:d3:24:cd:96:39:72:9b:67:c5:
11:49:76:3f:fd:cb:4d:99:fa:61:e3:5f:3a:08:41:
2a:c9:98:2d:82:14:04:ca:bd:f6:ac:b2:4c:b0:a9:
6e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:64:80:AF:98:5C:1D:84:4B:AD:0B:35:5B:02:D5:19:65:02:B3:DF
X509v3 Authority Key Identifier:
keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3b:f7:26:30:cc:f3:32:b3:60:c3:fc:ca:59:75:25:82:57:
cd:2c:00:83:06:02:02:25:c6:58:4a:6f:91:0f:a1:0d:54:6a:
6a:40:54:a1:40:86:8a:d8:18:cd:5d:13:3e:ca:e4:ae:e7:73:
17:7e:97:03:f9:41:e7:73:cc:76:3f:c0:e1:5b:86:76:87:a8:
7f:9d:5f:38:3c:b3:ea:92:a6:95:af:0e:36:b8:bb:89:07:09:
5a:28:ea:05:f4:db:b1:46:68:f9:a4:5e:f9:69:8d:ac:17:e1:
84:60:1c:ee:0a:f9:df:17:29:c7:92:f5:9c:aa:71:d2:a2:21:
b6:c6:33:d5:fa:a8:f2:0a:16:19:a3:42:c1:90:f5:1d:7d:50:
e8:f5:90:d0:66:50:b5:f9:bc:c7:66:e6:47:28:54:ca:ac:a4:
61:37:4a:ee:32:16:47:4e:92:f1:77:da:96:02:da:fd:90:c2:
f0:37:57:fe:a8:96:06:4a:c4:86:4d:47:48:1a:77:8a:ec:9e:
44:4e:62:e6:ab:f9:18:fb:26:21:e9:ad:49:37:dc:6b:97:82:
4d:c6:4f:85:94:33:7f:da:d1:eb:c0:b1:c8:ae:74:a1:e2:a4:
41:92:90:12:9e:b0:09:af:ce:10:51:25:a3:8a:d1:97:b7:7a:
13:d7:32:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdBQTUxMTAvBgNVBAUTKEY3MjY3RTgwQkU4MTdGMDQzRDI4RkI3RTczMDVGNEM0
ODhBODM5MUEwHhcNMjUxMjI5MDU0MTI4WhcNMjYwMTA1MDU0MTI4WjAYMRYwFAYD
VQQDDA02OTUyMTQ4OC0zNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTP4wk6Lj1H13xkPNU+FetAjXq8gPbPJAfe6fLQBqhExTlEJx9knfJTGVHMf
quaQ+tLbgjfiBLnJpWbzpUOpth7hBhYCAo1CAsRFdc1tkHYx6+FEguMQkTz32hRJ
rIbKsbQ98QjBqs6OrFQ6SZuALC6jhColyZw1e8kfwzMBfnKKRv2JEiaX+Pl1ClGT
PctXGD79kthkUlxPFFL+bKve1ZOSb+mAUGgc66VyHoZJTM7GDTHWhdq63o8d9ASR
gog/8hxagshpPrEvqsI8bKF8TRAM1UqW30/TJM2WOXKbZ8URSXY//ctNmfph4186
CEEqyZgtghQEyr32rLJMsKluNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJkgK+Y
XB2ES60LNVsC1RllArPfMB8GA1UdIwQYMBaAFPcmfoC+gX8EPSj7fnMF9MSIqDka
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0FBNS9CQUZCMzU3NDE1
QkIxMUYwQkZENTQ4ODFDNEY5QUUwMi85eVotZ0w2QmZ3UTlLUHQtY3dYMHhJaW9P
Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzl5Wi1nTDZCZndROUtQdC1jd1gweElpb09Sby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0FBNS9CQUZCMzU3NDE1QkIxMUYwQkZENTQ4ODFDNEY5QUUwMi85eVotZ0w2QmZ3
UTlLUHQtY3dYMHhJaW9PUm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdO/cmMMzzMrNgw/zKWXUlglfNLACDBgICJcZYSm+RD6ENVGpqQFSh
QIaK2BjNXRM+yuSu53MXfpcD+UHnc8x2P8DhW4Z2h6h/nV84PLPqkqaVrw42uLuJ
BwlaKOoF9NuxRmj5pF75aY2sF+GEYBzuCvnfFynHkvWcqnHSoiG2xjPV+qjyChYZ
o0LBkPUdfVDo9ZDQZlC1+bzHZuZHKFTKrKRhN0ruMhZHTpLxd9qWAtr9kMLwN1f+
qJYGSsSGTUdIGneK7J5ETmLmq/kY+yYh6a1JN9xrl4JNxk+FlDN/2tHrwLHIrnSh
4qRBkpASnrAJr84QUSWjitGXt3oT1zJn
-----END CERTIFICATE-----
Generated at Wed Dec 31 05:21:46 2025 by rpki-client