This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
File: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft (raw, json)
Hash identifier: 8jkbvWsbon6s656LwpvNm/uv2pitTUnzalGjr1ugga8=
Subject key identifier: E9:BB:1A:61:F1:98:CF:90:85:69:7D:64:CA:BA:CB:8A:33:CD:14:B4
Authority key identifier: 9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D
Certificate issuer: /CN=A9130566/serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
Certificate serial: 09E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
Manifest number: 09E1
Signing time: Mon 22 Dec 2025 19:19:51 +0000
Manifest this update: Mon 22 Dec 2025 19:19:51 +0000
Manifest next update: Mon 29 Dec 2025 19:19:51 +0000
Files and hashes: 1: m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl (hash: Z/MBOf2GSxNXi/DdmvHok5qul+bFZBwSNf5lITxNwc0=)
2: 59B22D68909111EABF08FC4FC4F9AE02.roa (hash: 2KXnyRjzRL6Ajbgx/szbyFBTyK8pjQMyBf0qPFxtz+Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl
rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2535 (0x9e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130566, serialNumber=9BD64483A2421FA6F0EE639975C7059762AFF05D
Validity
Not Before: Dec 22 19:19:51 2025 GMT
Not After : Dec 29 19:19:51 2025 GMT
Subject: CN=694999d7-b747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:e7:e1:f1:24:41:54:fe:d2:3f:f0:d5:59:
b4:de:1e:95:04:52:f2:4c:4f:96:e1:96:0d:91:84:
06:6a:6e:71:18:8f:98:5e:63:af:d7:9f:70:46:ff:
d3:15:27:a8:0a:20:b2:e8:f6:86:0b:36:6f:1f:d2:
32:44:5d:fa:72:c2:fc:93:47:ef:87:96:eb:d3:74:
59:c1:8b:9f:7b:b3:18:b7:f0:ed:00:70:eb:cd:32:
ad:75:12:58:80:c0:bc:02:ef:80:4d:55:75:22:3f:
44:b7:94:a9:e8:12:11:bb:47:5b:fa:54:03:e6:43:
ee:fe:14:7f:12:31:09:0c:b4:e0:f8:18:86:eb:6a:
83:52:c7:e2:fa:f6:a7:9b:c3:dd:5b:5c:1b:e3:09:
2b:0f:cc:99:47:80:64:41:56:e9:0c:1b:b7:bd:11:
7c:11:3f:c4:4c:05:48:ea:75:53:12:d3:af:0c:48:
1c:3d:17:ac:31:e8:17:60:3e:b1:9c:c6:45:40:c7:
01:7f:b6:2c:d9:1c:76:c7:c2:81:0c:41:3b:8c:d5:
98:85:57:97:b5:9b:93:25:d7:d2:46:80:b8:ea:3b:
b2:e1:95:08:6c:bb:2a:8c:45:3a:45:d0:b4:f8:3f:
39:4e:9d:94:89:f4:26:73:3f:a6:c5:74:fc:66:df:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BB:1A:61:F1:98:CF:90:85:69:7D:64:CA:BA:CB:8A:33:CD:14:B4
X509v3 Authority Key Identifier:
keyid:9B:D6:44:83:A2:42:1F:A6:F0:EE:63:99:75:C7:05:97:62:AF:F0:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130566/6B45609C908F11EA8AC8504CC4F9AE02/m9ZEg6JCH6bw7mOZdccFl2Kv8F0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1c:5a:c2:26:93:23:0b:cb:08:75:48:37:f2:b0:ec:f5:e7:
f8:d6:19:7e:3c:cb:cb:e0:3e:8d:34:c4:e0:f1:54:90:c1:e7:
ab:97:3c:d9:e3:0d:8e:6c:c0:d1:23:fc:5a:43:18:b9:ca:d1:
63:38:e1:f1:0d:3a:08:3d:06:f7:b9:8b:9a:46:50:61:1d:91:
cd:8c:6a:e0:ba:6e:a2:06:bb:47:f6:f8:ec:64:30:4b:3d:c9:
49:22:ee:f2:74:fd:cc:a9:33:45:c8:b5:eb:83:28:7a:71:99:
97:71:68:cc:89:d8:da:31:5e:bc:2f:ad:0d:bd:3f:d6:a4:5f:
4f:95:c0:fc:66:dd:21:1d:8b:d2:b7:ac:73:ba:be:27:0f:00:
88:a8:c4:ea:e9:7a:06:99:42:1c:0d:c4:5e:da:79:ed:f9:12:
1f:d0:03:44:13:2e:de:7d:2f:22:ae:2d:68:46:f4:ba:3a:77:
12:48:0e:ef:44:fe:f1:1d:ae:76:48:b1:ce:c7:a6:7f:95:b3:
d2:8e:92:12:ef:99:29:3d:42:11:70:49:d6:2a:6f:e1:a8:80:
c5:26:0a:ef:c7:ba:55:55:31:b7:c9:bb:a2:f0:92:44:00:f5:
9a:75:25:25:ec:0b:a6:eb:11:bb:b7:04:c6:03:28:9e:97:64:
6c:33:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:25 2025 by rpki-client