This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
File: CJy1orM7eG11SgfWgKnElBQmGeE.mft (raw, json)
Hash identifier: pCsSveBzYWJTXMGjEkcZNu3s+bJiIsZfoY/UxLzmHNU=
Subject key identifier: AB:4D:26:24:78:E3:CA:31:02:34:E0:5F:E7:CD:92:C4:9A:A2:35:F0
Authority key identifier: 08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1
Certificate issuer: /CN=A91D0C18/serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
Manifest number: F9
Signing time: Thu 25 Dec 2025 04:15:08 +0000
Manifest this update: Thu 25 Dec 2025 04:15:07 +0000
Manifest next update: Thu 01 Jan 2026 04:15:07 +0000
Files and hashes: 1: CJy1orM7eG11SgfWgKnElBQmGeE.crl (hash: dARt4H2/YwI/Jx1ENboqP9/GFhYkM2/WVh74C/9XNEw=)
2: EEE0092A646611EFA25D167EC4F9AE02.roa (hash: 2I1s5RbX9mRnDSwDS9XqFVY3yT7dmC+Kb1B8YfP6Dhk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl
rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 04:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0C18, serialNumber=089CB5A2B33B786D754A07D680A9C494142619E1
Validity
Not Before: Dec 25 04:15:07 2025 GMT
Not After : Jan 1 04:15:07 2026 GMT
Subject: CN=694cba4b-2e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:c8:d9:06:a0:ad:71:01:e1:24:c5:35:0c:
dc:91:8a:d2:25:d8:a1:13:ed:88:b8:bb:aa:c5:7b:
06:e1:76:6e:10:c4:ca:d4:03:13:f9:03:2e:c7:60:
1b:c4:8d:4e:66:ea:24:cf:80:ac:06:23:3e:9c:5b:
b5:ec:4c:89:2a:47:68:6b:31:f1:ec:11:06:5e:74:
cd:ce:67:c3:ff:9a:11:30:f9:ca:eb:b6:78:11:a8:
7c:5b:8e:db:4a:1b:d3:75:ff:50:7a:85:60:3f:1b:
65:3b:74:ee:1b:f4:10:20:75:71:71:f7:ed:3c:bf:
48:44:13:ed:b3:b3:c8:53:a7:d3:3f:79:35:5d:83:
a1:02:25:05:9e:20:5f:8f:6c:ad:e4:bf:7b:1f:49:
8c:ec:3c:6a:af:c3:a3:e6:11:31:f5:74:87:fa:56:
80:e1:76:2f:89:35:1d:5b:53:83:50:e4:5b:49:2e:
70:dc:45:bc:11:4b:38:8e:61:72:40:ac:2f:c3:c2:
ca:98:04:66:38:8e:05:fb:95:f7:7c:ab:d0:e2:a0:
b9:2f:1e:9b:60:09:6f:d6:0e:42:f6:41:a7:38:0a:
b9:4c:91:75:46:be:63:6a:75:1e:89:56:5e:80:17:
76:6b:c9:fe:67:70:dd:31:29:79:dd:50:5b:82:3d:
60:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4D:26:24:78:E3:CA:31:02:34:E0:5F:E7:CD:92:C4:9A:A2:35:F0
X509v3 Authority Key Identifier:
keyid:08:9C:B5:A2:B3:3B:78:6D:75:4A:07:D6:80:A9:C4:94:14:26:19:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CJy1orM7eG11SgfWgKnElBQmGeE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C18/683BA096646611EF8E18F87AC4F9AE02/CJy1orM7eG11SgfWgKnElBQmGeE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:87:f8:f9:eb:5e:89:2d:8a:25:f4:9f:6c:5b:8c:47:61:16:
ba:83:19:5c:9d:00:4a:9f:cd:a0:8b:37:be:0e:9f:38:9c:dc:
51:ab:67:13:00:6a:c5:09:22:9c:9e:5f:a9:c7:82:89:7a:6a:
70:42:6c:d1:7d:48:ef:92:43:ca:3f:38:c2:e9:87:70:06:db:
91:b6:a1:cc:4a:7c:eb:b8:ff:1e:d6:ac:9d:ea:bf:fd:a4:6e:
55:1c:c8:21:bc:54:8c:fc:8b:53:6f:19:b6:60:50:d5:22:69:
90:49:94:7c:e6:b3:19:12:27:24:5c:c8:54:ba:d3:59:c1:a9:
82:e2:1d:78:fe:cf:38:a5:a7:c8:ee:d3:1b:4b:24:cf:24:91:
b0:03:cf:32:d3:09:4c:c5:08:ad:d3:23:45:26:3b:7c:57:f5:
5f:f6:16:0e:30:7c:4b:45:14:9b:17:8b:b0:b0:ac:05:b7:2f:
c2:94:c2:22:17:13:9a:85:c8:93:cf:82:ed:f2:74:40:f9:2a:
9a:aa:c4:89:aa:e7:af:49:0a:c9:6c:ab:61:f7:74:cd:dc:a7:
a9:55:70:02:a2:af:bf:ca:3f:00:ec:c9:c7:56:e2:04:23:6a:
5a:a9:73:f0:0d:84:c7:d4:f4:bc:f3:56:be:8a:7a:f1:73:f4:
be:3f:2d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 19:40:17 2025 by rpki-client