This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
File: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json)
Hash identifier: I8Uoga7NpQtqdIkWGcV5Tpp1l8+tUDL30ZB0Q0L7RiI=
Subject key identifier: 8A:E1:0D:5B:12:19:A3:2B:10:CB:32:19:BF:7E:D9:27:3B:5A:B0:E9
Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
Certificate issuer: /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Certificate serial: 07AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
Manifest number: 07A9
Signing time: Thu 18 Dec 2025 20:52:41 +0000
Manifest this update: Thu 18 Dec 2025 20:52:41 +0000
Manifest next update: Thu 25 Dec 2025 20:52:41 +0000
Files and hashes: 1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: Y+MwM79u5zuD57dq78612/t7G+9bjqN06XJSJg1+FXw=)
2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: Oj9FhDR2K8lUe60n7u+qOlovqsf3jgizM0Z5FPXWMH0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967 (0x7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Validity
Not Before: Dec 18 20:52:41 2025 GMT
Not After : Dec 25 20:52:41 2025 GMT
Subject: CN=69446999-efb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:50:5a:a7:0b:78:9a:4a:36:ec:3a:2f:d3:
ee:08:52:dc:ea:2c:97:07:d9:10:56:99:14:e6:1e:
29:6b:ff:fb:b5:86:00:14:04:5c:d6:67:77:2c:14:
02:a8:77:69:38:e1:6d:9d:0e:40:c1:0b:fc:1b:9c:
92:fb:08:87:b0:aa:9f:d7:71:75:48:dd:c2:b2:14:
fb:e9:95:af:52:8f:28:7a:b0:25:73:2a:0e:0e:63:
5e:60:d8:f6:c1:7a:93:44:89:b6:38:a6:16:6a:d5:
7a:c3:79:ea:67:4a:68:77:bc:d2:e4:27:40:6e:e2:
da:89:e8:25:d3:ea:6c:68:d0:9b:49:76:a9:c2:69:
11:44:96:cd:d6:2d:df:2d:c4:76:5e:b8:7c:03:80:
83:d0:9d:89:42:bc:2c:e5:33:70:bb:8f:91:e2:61:
f6:ec:84:e3:40:8b:d1:11:2e:cf:7d:2d:60:fb:88:
4f:44:a0:c1:4a:84:03:fc:ec:77:96:07:56:cf:41:
fe:0a:d8:52:60:4a:a5:9c:33:ba:d6:15:2a:2d:fd:
08:4f:45:42:f7:0f:dd:bd:94:ff:7c:27:56:78:a7:
2a:73:e7:2c:bb:9f:a3:a8:0d:d4:9f:fe:cf:df:c2:
5c:7c:b3:c5:27:ab:52:0c:b0:cd:f3:cb:ea:2e:ef:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E1:0D:5B:12:19:A3:2B:10:CB:32:19:BF:7E:D9:27:3B:5A:B0:E9
X509v3 Authority Key Identifier:
keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:52:0e:56:2a:d1:a6:57:74:ad:e0:49:e9:30:75:38:d0:e8:
22:db:fa:70:98:83:d8:57:d5:ab:48:1e:3e:f5:b9:08:5e:6d:
c8:fe:b0:68:92:6c:fa:5f:3f:94:68:e0:e2:1e:01:62:25:8b:
dc:d9:93:2e:32:1c:31:36:49:80:7a:5a:ae:70:2f:8b:ce:3b:
74:94:bd:1c:93:dd:87:f4:42:6d:7a:e2:a7:87:59:d4:88:c3:
30:7a:f0:9e:bf:40:20:05:7f:79:a6:49:71:70:2d:97:ad:bb:
a4:b3:90:0f:dd:80:bf:4d:01:c7:11:2b:32:72:38:4b:e3:f0:
1c:ee:c5:0b:ae:70:67:31:a6:49:62:8a:1e:8c:b4:0e:69:40:
1f:1a:21:c4:4f:d4:b1:d2:81:f2:28:6c:70:85:14:cb:91:40:
83:38:75:b8:76:6e:86:ea:bf:a4:e2:39:4d:98:b4:87:1e:13:
a2:85:3b:df:94:56:61:4a:9b:2e:54:0f:7b:10:eb:b4:47:5e:
2d:78:55:10:6b:4e:e2:35:a4:ef:7e:3f:f0:99:ca:18:55:21:
c8:5c:5b:57:07:53:ea:18:2b:56:fc:0f:90:28:df:e6:07:d1:
aa:52:a4:e6:f5:80:1c:ae:56:5a:4c:87:df:cb:df:a9:2a:d4:
c7:a4:0a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:30:14 2025 by rpki-client