This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier: wQxwosEexBSgGVHw8a63n6nJe9YB6j54+2t+bqHHPeU=
Subject key identifier: ED:D1:A6:F2:EA:E8:E3:6E:6B:2D:78:BD:3D:AA:70:67:30:8D:8F:FF
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 709E533E2CB25EAB0FB7CA570D94D28C6CF93D8E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number: 0854
Signing time: Fri 19 Dec 2025 17:58:38 +0000
Manifest this update: Fri 19 Dec 2025 17:53:38 +0000
Manifest next update: Sat 20 Dec 2025 20:53:38 +0000
Files and hashes: 1: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=)
2: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=)
3: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=)
4: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=)
5: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=)
6: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=)
7: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=)
8: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=)
9: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: 0+5A0BBnTvwtAyFe+3NRGCYLnVFhKwV+yp5Q1FLf9tE=)
10: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=)
11: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 20:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9e:53:3e:2c:b2:5e:ab:0f:b7:ca:57:0d:94:d2:8c:6c:f9:3d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: Dec 19 17:53:38 2025 GMT
Not After : Dec 20 20:53:38 2025 GMT
Subject: CN=EDD1A6F2EAE8E36E6B2D78BD3DAA7067308D8FFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:b3:6d:ef:13:23:19:e4:f1:db:74:9c:a7:
ac:f1:c4:bf:a8:84:9b:4b:a8:a6:14:9d:39:18:8e:
cc:6b:12:55:26:6d:0b:27:93:55:df:77:25:c4:92:
d6:02:c9:e2:e1:e0:95:8a:be:44:ad:41:a9:93:2f:
0f:a3:ed:e5:b4:09:f8:c2:2c:3d:aa:08:2e:b7:0b:
0e:02:e3:02:c5:4b:3c:8a:3d:ca:45:99:14:e7:e6:
ce:3c:02:d9:01:ec:51:80:29:05:f8:a4:de:e1:a4:
ec:4a:45:e0:a1:c7:0e:9d:78:b3:02:ff:be:c1:31:
7c:fa:75:ae:80:0c:46:36:3f:bc:b7:28:6d:8c:47:
b2:55:05:2b:21:2e:bb:46:38:35:8c:15:38:ab:c6:
41:95:e0:4b:71:78:57:d7:8a:e2:ec:4a:60:96:79:
a0:fa:9e:a6:40:e0:cb:1f:2b:81:48:2d:58:ef:1d:
83:75:19:d7:50:43:de:f5:60:9c:a6:63:5c:1b:0f:
df:b8:d2:18:5e:ee:5f:69:02:21:6d:65:fb:26:f6:
0c:e1:a3:8a:0b:a2:9a:25:59:67:3c:f8:a9:2e:97:
c7:45:c3:4b:c3:1c:fb:2b:27:81:9e:67:45:83:8b:
e2:dc:8d:fc:8b:bb:c9:a7:67:1a:c1:7c:8c:0a:03:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D1:A6:F2:EA:E8:E3:6E:6B:2D:78:BD:3D:AA:70:67:30:8D:8F:FF
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a0:00:b4:d1:18:39:e0:72:7f:32:bf:05:19:fa:d3:af:ef:
22:46:7d:8d:03:5b:89:a9:2f:1c:2b:cb:0b:ae:a8:03:8e:2d:
d1:08:b2:42:c9:52:19:6d:06:52:cb:18:33:8d:5c:c1:9c:9b:
86:57:25:2b:9b:9f:a9:8f:de:c0:90:65:a6:37:22:84:42:9a:
e4:1a:6a:e2:7c:cd:d1:a1:23:a5:31:6a:e1:99:d9:cc:5c:66:
e9:f8:37:c1:6a:11:b0:39:f5:6e:c7:41:9f:f9:23:f1:6a:68:
86:4a:4f:18:8b:ea:38:68:61:36:c2:eb:c2:cb:34:3b:97:59:
e9:96:8f:ea:9d:64:9a:ec:8e:5e:28:5b:62:07:8f:0c:80:fe:
72:23:9f:90:5c:c9:72:df:ae:4b:ee:43:89:25:c8:14:c5:c9:
86:a8:6f:82:10:d2:69:8d:fb:60:09:32:ab:e5:f8:55:3a:5b:
0e:61:e3:cb:2b:a4:04:78:e9:3e:5e:90:b9:ea:cd:aa:84:3e:
45:c3:c5:25:63:f8:74:47:00:6a:b3:dd:52:ba:5a:a4:a8:a4:
43:9d:f1:b8:8f:41:90:64:50:ce:fb:25:9c:5a:80:d4:50:19:
1f:9a:82:da:ae:59:05:cb:dc:87:8b:f4:71:0e:cb:6d:3b:a3:
a4:a4:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:31:40 2025 by rpki-client