This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
File: 9nLTtiRMpMjT_iAIJqikn6ssdhI.mft (raw, json)
Hash identifier: r5I8yxm7rBznW7aPzAdikTnOrGOIs8oG3b1soH9Jn2w=
Subject key identifier: F8:D4:36:0B:BE:85:01:24:11:07:08:B3:FE:57:45:CE:D2:9E:DC:4C
Authority key identifier: F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
Certificate issuer: /CN=A91DD799/serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Certificate serial: 3507
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
Manifest number: 34FE
Signing time: Tue 30 Dec 2025 14:46:48 +0000
Manifest this update: Tue 30 Dec 2025 14:46:48 +0000
Manifest next update: Tue 06 Jan 2026 14:46:48 +0000
Files and hashes: 1: 9nLTtiRMpMjT_iAIJqikn6ssdhI.crl (hash: wT49aME79yKjlURNl54Qoa16Sw4teDpjhSHeFqHfkCQ=)
2: 309BECEE09DA11EBB9839313C4F9AE02.roa (hash: EDqMjKpQ8JJE9YEiS61qJ0Zv7RsV2OUGzCzEdCEHKog=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Jan 2026 14:46:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13575 (0x3507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DD799, serialNumber=F672D3B6244CA4C8D3FE200826A8A49FAB2C7612
Validity
Not Before: Dec 30 14:46:48 2025 GMT
Not After : Jan 6 14:46:48 2026 GMT
Subject: CN=6953e5d8-e948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3c:14:c4:dd:c9:4e:df:51:d4:5e:f0:8b:15:
87:f8:8f:c6:55:ad:2b:a9:83:30:d9:32:bf:0a:e2:
fc:a6:73:47:9b:52:0e:ea:9e:33:f3:2f:c3:13:f8:
d5:3b:68:71:1a:68:0c:30:2c:29:38:8b:53:8e:26:
5f:22:81:e7:97:74:37:22:7d:08:63:ab:18:91:b8:
c4:1c:21:31:12:37:7c:7d:47:2e:76:3e:40:2d:83:
cf:5f:1b:9e:74:fd:ea:0d:91:aa:9d:f8:93:a0:3c:
36:a5:c8:d4:fc:74:2c:12:04:e2:57:53:9e:65:4f:
51:e2:77:1c:e6:ea:7f:00:71:bf:21:c2:81:19:3e:
ff:ef:47:88:76:f0:3d:50:83:18:53:1c:2b:12:99:
ef:38:eb:e5:34:d0:ec:e0:90:fd:9c:a4:6d:e8:e0:
29:06:92:2c:53:79:b4:ef:0e:ab:51:cb:83:f4:fb:
ab:45:55:c0:7c:d8:a9:fd:38:94:ea:28:ff:37:5f:
70:26:17:db:10:f0:31:9d:89:de:2c:db:8b:21:2f:
1c:d6:cc:15:05:b2:b0:4f:20:bc:95:86:d4:25:fd:
31:48:83:55:97:75:e9:fe:b6:ff:8d:13:33:0e:ff:
78:b3:18:5e:bd:e7:c0:df:d1:9c:f5:73:70:fe:46:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D4:36:0B:BE:85:01:24:11:07:08:B3:FE:57:45:CE:D2:9E:DC:4C
X509v3 Authority Key Identifier:
keyid:F6:72:D3:B6:24:4C:A4:C8:D3:FE:20:08:26:A8:A4:9F:AB:2C:76:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9nLTtiRMpMjT_iAIJqikn6ssdhI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/151349981D9511E2BDEBB9F908B02CD2/9nLTtiRMpMjT_iAIJqikn6ssdhI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:8d:d7:97:47:53:d1:1e:5d:dc:e0:94:88:c7:0d:31:16:c5:
2d:b8:2e:37:e0:ac:89:1a:7c:74:0e:71:04:27:fb:f4:60:ed:
08:12:19:fe:ae:4a:79:72:ea:ff:ef:2e:14:95:9d:f2:c5:f8:
37:b3:f0:97:d7:a8:31:58:f1:b7:fe:4f:07:63:37:7b:5d:91:
d5:e1:21:0c:40:83:70:fe:dd:9b:ec:14:c5:c1:63:d5:72:b1:
4b:8d:ea:61:4e:33:9f:50:14:b3:44:f8:3b:cb:ab:20:de:a9:
d9:b4:c7:f2:c2:3e:25:24:0e:f9:c6:d7:e1:40:be:16:00:89:
63:53:c0:fa:e9:d8:bb:20:db:71:aa:8b:89:2c:4c:e8:94:24:
8e:cf:77:5e:fc:ac:5e:64:ff:7a:a1:de:ed:fc:60:8e:3f:18:
b1:c5:ae:9d:89:ce:74:06:ff:c1:9e:ce:40:41:a9:34:1a:01:
bc:b6:85:a6:db:9e:de:d7:35:8e:aa:f0:ac:6d:e7:cd:2e:3b:
64:e1:df:6f:82:39:ab:36:e0:e2:10:ef:0c:eb:1a:c2:7e:d6:
24:f3:8b:90:3d:69:19:fc:b1:f3:09:51:b2:4c:d8:fc:f0:0d:
67:6b:c8:31:43:e4:85:d6:0a:06:fa:27:40:a4:82:6d:cf:c5:
03:d4:0f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 08:03:14 2025 by rpki-client