This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
File: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft (raw, json)
Hash identifier: GOLNDaX4KZMRfW3/WwWxojBXw3wQzuzL/8vHs6AF2c8=
Subject key identifier: B6:50:4D:FA:0E:7C:7B:1C:D0:44:D4:69:25:6C:64:8B:AB:C4:38:00
Authority key identifier: F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1
Certificate issuer: /CN=A911CDD9/serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
Certificate serial: 0802
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
Manifest number: 07FB
Signing time: Mon 22 Dec 2025 20:22:45 +0000
Manifest this update: Mon 22 Dec 2025 20:22:44 +0000
Manifest next update: Mon 29 Dec 2025 20:22:44 +0000
Files and hashes: 1: 9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl (hash: 3jL2YMm9Db0S3iVqyLrK1/RpMUAM+RruqT1re27tijk=)
2: A01CB8D409DD11EBB507BD1DC4F9AE02.roa (hash: OxZStMenvNbbBM0B5p11XZWipGKvwq8HkkBRgx7lHnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl
rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 20:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2050 (0x802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CDD9, serialNumber=F5F849C445370C8B8381139B3270984C0A10FAB1
Validity
Not Before: Dec 22 20:22:44 2025 GMT
Not After : Dec 29 20:22:44 2025 GMT
Subject: CN=6949a895-4807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:db:a7:b0:5c:b0:1b:71:e5:b3:08:cd:d4:
de:70:37:64:21:6f:b4:a9:54:dc:5f:a2:dd:58:78:
b0:3f:0e:de:d6:e5:3e:86:0b:40:f5:21:70:18:c0:
9e:2f:e2:85:ce:71:a8:21:d1:37:b3:d7:c7:8c:38:
c3:ac:9e:07:9c:3d:3f:da:be:8d:ff:b9:89:85:f5:
b3:91:a5:53:5c:ec:f3:c6:23:2f:3a:51:c7:02:b7:
09:b9:f1:13:21:ae:37:d4:c4:43:b0:3f:c3:cb:5d:
60:00:9f:b2:e0:77:df:c1:be:a8:a4:78:ce:33:3e:
c5:84:14:74:8b:0e:8f:88:a0:bd:2a:a3:90:68:7e:
8c:ad:d3:c6:e1:75:56:fd:ca:1a:4c:9c:82:54:52:
82:9f:3c:04:a7:41:aa:85:72:73:2b:27:14:e8:c7:
8d:6f:07:a3:ec:0d:89:4e:6d:31:9e:ee:fe:e9:c8:
c9:bc:d4:b0:e7:40:a5:4e:94:a2:ef:62:b7:24:f1:
3b:75:47:79:03:73:66:23:02:26:a5:dd:ca:0d:69:
c4:4e:32:65:87:c3:0c:b6:83:b5:62:62:c8:09:ae:
b1:d7:fd:da:60:45:8e:8e:2f:77:f9:06:a5:61:05:
da:4c:59:b7:43:ec:97:c8:11:24:ff:56:d7:72:19:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:50:4D:FA:0E:7C:7B:1C:D0:44:D4:69:25:6C:64:8B:AB:C4:38:00
X509v3 Authority Key Identifier:
keyid:F5:F8:49:C4:45:37:0C:8B:83:81:13:9B:32:70:98:4C:0A:10:FA:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9fhJxEU3DIuDgRObMnCYTAoQ-rE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CDD9/7C92B8E209DC11EBAF479D1CC4F9AE02/9fhJxEU3DIuDgRObMnCYTAoQ-rE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:fe:f4:5c:ea:f6:4c:96:ae:bb:1d:c7:69:43:a3:18:e5:dd:
9c:09:93:70:5f:d2:7d:66:8b:88:86:e9:a8:4a:d7:28:4b:be:
9d:c6:42:d0:a3:1a:28:c7:12:e1:69:88:e0:1d:30:b5:2e:c4:
f3:1f:03:88:70:f2:1a:7e:47:c1:75:50:7d:9f:37:9e:7f:bb:
a3:85:1c:ae:32:77:09:da:48:40:78:4d:a3:b2:b1:5d:f3:5f:
eb:c9:c9:b2:52:cb:ca:ff:92:f2:f1:f9:76:bc:ca:fc:4c:27:
4a:d8:f2:46:ef:ff:2d:5a:32:dd:39:e2:7d:77:fd:89:6f:10:
38:76:57:c6:06:bd:d4:48:29:44:ed:07:0f:eb:aa:12:cc:ca:
84:24:81:73:9b:0d:af:eb:c7:c7:d4:6f:3c:ea:83:a1:19:75:
25:e9:5c:72:eb:76:28:4e:64:1e:d9:c3:64:d8:a4:c2:81:b9:
ca:f1:e1:36:10:47:75:9a:3e:71:cf:82:4d:50:d3:c8:3a:b7:
ea:e5:55:d1:1e:db:7b:08:e5:4d:77:9b:b1:2c:58:db:15:43:
8c:7f:bb:21:44:ef:00:3e:a4:9d:f6:18:49:de:d8:ae:aa:98:
ee:c2:1b:7b:20:80:01:2b:aa:ff:b4:f8:24:e6:80:52:54:41:
00:f6:d7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:11:27 2025 by rpki-client