This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
File: 9htN6lh5mctuFcVAieTbmD0BuxA.mft (raw, json)
Hash identifier: xp8N4yU3SaxI82L2f/bpLYjxUxr55vQLtxluwg/zL4c=
Subject key identifier: A5:7F:74:ED:7A:C8:6A:EE:99:B3:BE:A9:97:E6:6B:9A:10:9B:DE:A2
Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
Certificate issuer: /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
Certificate serial: 08D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
Manifest number: 1486
Signing time: Mon 22 Dec 2025 18:27:51 +0000
Manifest this update: Mon 22 Dec 2025 18:27:51 +0000
Manifest next update: Mon 29 Dec 2025 18:27:51 +0000
Files and hashes: 1: 9htN6lh5mctuFcVAieTbmD0BuxA.crl (hash: Kxv2fklz9iUaPm08CH6NNZie0tofhx++g/ZMGJ5PZCc=)
2: 341C7414CA6111EA97DD3439C4F9AE02.roa (hash: h5frQG89R9e/TKYUgyXgA4IPep2flQE62K3sYBLnEpw=)
3: 336BD320CA6111EA97DD3439C4F9AE02.roa (hash: pBil4YvB7UVloyu8DhnduF+muuJFikEsjN7164UGvgI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl
rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:27:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2265 (0x8d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7315, serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
Validity
Not Before: Dec 22 18:27:51 2025 GMT
Not After : Dec 29 18:27:51 2025 GMT
Subject: CN=69498da7-b8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:5f:c4:36:b5:fb:e6:70:01:52:2b:45:9c:
48:5d:1f:e2:40:da:bb:3f:ec:c9:da:88:a1:3a:68:
b9:a6:6a:b0:95:9a:38:2d:40:55:9c:34:49:14:d8:
77:8f:f1:81:9c:b5:cf:58:43:a9:3f:0b:26:95:b5:
c8:96:b9:38:41:a2:e5:79:d5:22:2d:05:dd:05:86:
82:7a:78:51:92:c5:62:3d:cc:44:d6:8d:96:2a:94:
4e:ed:e7:45:8d:68:6f:86:d5:06:2b:aa:a2:06:b1:
32:24:22:82:9d:7d:70:8f:20:f2:a0:05:e9:a2:a9:
a8:fb:25:5c:44:df:d3:17:db:71:60:9a:a5:c1:bc:
f8:7a:d5:66:7d:68:96:97:04:89:00:49:e1:c2:8a:
10:5b:10:05:ae:af:29:c4:ed:14:6f:0d:61:38:93:
24:83:f3:48:ec:50:13:c0:15:9e:ca:a8:78:1d:e0:
16:e6:62:ef:40:c1:a9:11:07:dc:77:1f:02:3e:a4:
99:f6:9c:5c:00:8d:4d:e4:88:e3:ac:76:a1:38:0f:
bf:a2:ab:ba:0d:b5:ff:02:97:05:5c:cf:93:db:fa:
f7:48:c7:fa:a2:3d:f3:04:79:d8:f8:51:4f:f2:57:
af:92:68:a4:4e:03:a0:0a:50:35:18:4b:0b:46:e5:
b5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7F:74:ED:7A:C8:6A:EE:99:B3:BE:A9:97:E6:6B:9A:10:9B:DE:A2
X509v3 Authority Key Identifier:
keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c5:65:aa:07:23:b3:b6:e8:d9:ea:61:a6:38:ba:b1:cb:a4:d7:
50:ac:93:2e:9a:b4:88:a3:ab:7d:8a:de:0d:16:00:e3:db:ff:
25:e4:c6:9e:10:52:e7:3b:5b:20:a8:f4:bf:46:1d:15:19:20:
09:3a:5f:09:e3:36:6d:84:7b:2d:c1:57:99:6f:85:c1:6d:0f:
39:c3:60:9f:4d:49:42:81:d3:b1:bb:5d:da:be:08:aa:0f:82:
fe:a3:13:8e:42:e6:21:17:46:8d:af:00:30:ff:6a:07:4b:5b:
23:92:b7:ba:8a:5d:f1:96:95:3a:ad:c2:79:c2:06:18:fe:1e:
7c:a2:b6:3b:f0:f0:52:74:d8:83:21:9b:53:53:60:df:cf:98:
4f:5c:4e:db:c2:94:ef:04:64:3f:fb:85:7d:2a:2f:a5:f4:52:
0d:44:17:3b:b4:d3:1e:6b:0f:fb:6c:6e:22:f1:95:82:19:8e:
0f:e5:32:05:65:ca:14:67:1b:89:b6:1a:58:1f:13:c4:fc:8d:
d8:a2:2d:24:b0:b6:4b:3b:e9:1c:aa:3e:22:46:4f:9d:df:55:
a6:f2:3c:fe:84:ab:8e:c7:57:05:51:de:32:5b:17:cb:07:dc:
98:c1:f8:99:f3:86:eb:ef:d9:e9:4b:9b:68:8d:e8:4e:f0:8a:
d4:71:02:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjczMTUxMTAvBgNVBAUTKEY2MUI0REVBNTg3OTk5Q0I2RTE1QzU0MDg5RTREQjk4
M0QwMUJCMTAwHhcNMjUxMjIyMTgyNzUxWhcNMjUxMjI5MTgyNzUxWjAYMRYwFAYD
VQQDDA02OTQ5OGRhNy1iOGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxOxfxDa1++ZwAVIrRZxIXR/iQNq7P+zJ2oihOmi5pmqwlZo4LUBVnDRJFNh3
j/GBnLXPWEOpPwsmlbXIlrk4QaLledUiLQXdBYaCenhRksViPcxE1o2WKpRO7edF
jWhvhtUGK6qiBrEyJCKCnX1wjyDyoAXpoqmo+yVcRN/TF9txYJqlwbz4etVmfWiW
lwSJAEnhwooQWxAFrq8pxO0Ubw1hOJMkg/NI7FATwBWeyqh4HeAW5mLvQMGpEQfc
dx8CPqSZ9pxcAI1N5IjjrHahOA+/oqu6DbX/ApcFXM+T2/r3SMf6oj3zBHnY+FFP
8levkmikTgOgClA1GEsLRuW1BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKV/dO16
yGrumbO+qZfma5oQm96iMB8GA1UdIwQYMBaAFPYbTepYeZnLbhXFQInk25g9AbsQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxNS84MjA2RjgzMjMy
RTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1jdHVGY1ZBaWVUYm1EMEJ1
eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlodE42bGg1bWN0dUZjVkFpZVRibUQwQnV4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NzMxNS84MjA2RjgzMjMyRTIxMUVBOTlBNDNFNjRDNEY5QUUwMi85aHRONmxoNW1j
dHVGY1ZBaWVUYm1EMEJ1eEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDFZaoHI7O26NnqYaY4urHLpNdQrJMumrSIo6t9it4NFgDj2/8l5Mae
EFLnO1sgqPS/Rh0VGSAJOl8J4zZthHstwVeZb4XBbQ85w2CfTUlCgdOxu13avgiq
D4L+oxOOQuYhF0aNrwAw/2oHS1sjkre6il3xlpU6rcJ5wgYY/h58orY78PBSdNiD
IZtTU2Dfz5hPXE7bwpTvBGQ/+4V9Ki+l9FINRBc7tNMeaw/7bG4i8ZWCGY4P5TIF
ZcoUZxuJthpYHxPE/I3Yoi0ksLZLO+kcqj4iRk+d31Wm8jz+hKuOx1cFUd4yWxfL
B9yYwfiZ84br79npS5tojehO8IrUcQJ8
-----END CERTIFICATE-----
Generated at Tue Dec 23 02:42:00 2025 by rpki-client