This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File: u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier: J+SiNdgEpLiSPndnAY/OJsR99vgE4sZ15wojNw23QiY=
Subject key identifier: 1B:2C:D3:8C:B1:42:88:6D:87:EE:E4:FE:5E:57:79:AA:7F:DB:A0:59
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer: /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number: 0230
Signing time: Fri 05 Dec 2025 00:19:09 +0000
Manifest this update: Fri 05 Dec 2025 00:19:09 +0000
Manifest next update: Fri 12 Dec 2025 00:19:09 +0000
Files and hashes: 1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: 6S/Sy9vFpD9BwhM9qN22mwsgdm5J0ekA8pOcR3wK+Jk=)
2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: HvJRtP/1M+AejuhqdGaCDBK61eDiFrYobniM96LvHvI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Validity
Not Before: Dec 5 00:19:09 2025 GMT
Not After : Dec 12 00:19:09 2025 GMT
Subject: CN=693224fd-fbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:20:f8:52:6e:ef:a1:16:33:0b:90:93:7b:
dd:85:c9:fd:3e:4d:aa:d4:08:7c:0d:57:7f:fc:d3:
ef:8e:05:53:6b:26:a4:d1:ca:c0:31:b7:e2:40:6c:
25:f6:1a:89:0c:12:e9:f1:07:3c:40:c9:77:32:24:
9d:e8:95:dc:66:86:c3:dc:97:a4:d5:60:51:d9:cb:
b1:5b:ac:fc:87:ef:dc:ae:15:94:21:a9:b1:8e:bf:
e2:30:95:98:75:f0:3e:6f:f8:85:1b:be:e7:b8:f9:
bf:7a:92:7e:50:99:b9:8f:11:0d:66:99:45:80:87:
2e:14:47:02:f2:b3:8c:29:98:75:d4:e6:51:2d:3d:
55:4e:b1:23:97:5b:a3:71:3c:9d:8f:92:f4:c1:34:
f4:88:06:58:f4:ef:d2:7d:5a:52:4d:cb:70:cd:f6:
e2:49:b7:a3:08:93:d3:10:1f:ed:3f:31:2b:0b:fe:
b6:9e:00:81:46:0b:33:30:d5:6a:c0:d3:9c:a7:1c:
3a:05:27:56:ea:ce:3e:29:af:97:1b:eb:1d:ba:ab:
45:ca:b7:07:f8:ea:d1:58:d1:d5:09:d5:5a:ff:c2:
d1:dd:ba:4e:08:36:eb:ad:d2:63:92:44:75:28:47:
d6:a7:b8:d6:fe:17:f3:1d:07:30:00:37:fe:90:3f:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2C:D3:8C:B1:42:88:6D:87:EE:E4:FE:5E:57:79:AA:7F:DB:A0:59
X509v3 Authority Key Identifier:
keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:81:6c:36:c8:d3:98:ee:ef:64:0a:c2:bb:27:2c:d6:09:9b:
9e:7f:33:1f:5a:4a:7d:73:fa:47:fd:0a:87:b7:de:e2:e8:ab:
32:de:cd:f8:79:76:6d:a8:d3:8b:35:0a:6b:df:27:a0:60:cc:
3b:dc:51:fa:8f:ea:d3:13:a8:8b:01:89:19:68:12:64:89:84:
52:bd:32:93:f0:0f:40:f9:6a:c0:ad:22:72:40:c4:c0:a2:54:
af:20:54:8d:99:d0:d8:e0:3e:2f:87:15:01:a1:d4:cb:dc:9f:
c0:5d:24:ee:27:eb:18:c7:63:05:e9:d8:b0:db:94:7a:db:f5:
94:bc:15:c8:0b:cd:ee:28:65:3c:ef:1b:fa:9d:bb:ab:04:4d:
0e:17:bc:92:b5:15:8a:3e:9c:9c:e4:d9:20:7e:1f:cf:14:08:
a0:64:32:b1:cd:3a:5d:8f:37:6e:66:01:91:53:72:36:7c:0b:
84:c6:51:9d:be:c0:1b:b0:04:d6:dd:ab:d8:ec:66:91:94:b5:
48:7a:cd:74:c2:9c:86:16:52:be:9e:87:6b:b6:c7:27:d9:cc:
c6:b3:68:a0:70:ba:d5:86:53:c7:db:51:cf:7b:26:75:d1:7f:
6a:fe:c2:3a:68:05:a4:29:cb:d3:34:b7:a2:4f:c8:d4:ce:de:
10:ae:a8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:09:50 2025 by rpki-client