This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
File: 9cHnH7saQdeYC-JY2XxIc5qvgso.mft (raw, json)
Hash identifier: U9b1kWrQUXoo8pG7BgW/MlQoE38Qtuy7z9r4qzCXDxU=
Subject key identifier: B8:8A:73:DC:5D:92:27:46:BB:FA:D8:A1:9C:F2:26:97:9C:69:43:79
Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA
Certificate issuer: /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
Certificate serial: 04CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
Manifest number: 04C7
Signing time: Thu 18 Dec 2025 23:11:13 +0000
Manifest this update: Thu 18 Dec 2025 23:11:13 +0000
Manifest next update: Thu 25 Dec 2025 23:11:13 +0000
Files and hashes: 1: 9cHnH7saQdeYC-JY2XxIc5qvgso.crl (hash: zfa+7YT/gZsi7rJKWgWgapqPw0Tw0N/NEGDMhBd6rxc=)
2: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (hash: roW5JwJ3oO/3SBHteb6ZmI8xvOq498IS1bxOQnc+LEg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl
rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D16D, serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
Validity
Not Before: Dec 18 23:11:13 2025 GMT
Not After : Dec 25 23:11:13 2025 GMT
Subject: CN=69448a11-5504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:21:63:e7:fd:f4:7d:d2:f1:23:d5:b4:e0:
6e:a7:06:9c:79:94:82:84:60:f2:d4:54:12:9c:01:
98:6f:89:85:1f:7d:5a:26:2f:09:8c:80:12:b1:4d:
16:80:d0:22:ac:b7:c1:38:41:60:7f:85:f9:94:46:
bb:ad:cb:40:56:5b:53:e1:2c:ca:d4:d6:5b:4e:78:
9b:9c:34:c4:3c:26:53:c5:50:cb:aa:6a:8b:67:cb:
d5:41:3a:73:32:81:0f:20:28:b4:39:be:81:bb:b8:
21:52:34:0f:63:c3:fe:99:b2:8a:86:eb:23:d6:eb:
43:d5:0d:07:f3:47:4b:96:26:1d:68:5d:54:db:c4:
28:d7:0e:c6:d8:90:03:1d:10:9c:58:ef:3d:85:e4:
08:5f:d1:2f:b8:95:fd:cd:e2:86:cb:68:1a:fc:3a:
bf:80:d3:65:16:bc:c9:1e:1d:76:10:63:84:6e:dc:
f4:43:a1:41:32:f4:8e:fa:08:62:fc:1a:e6:dd:ce:
a5:d3:b6:0e:2f:3a:59:c5:73:f3:90:b6:cc:17:ea:
fe:5c:80:7d:ca:aa:0d:45:3a:48:50:bb:4d:e0:29:
5e:75:dc:26:c0:59:34:c5:eb:f8:e2:93:5d:59:e5:
f3:e9:f2:bc:fc:09:c2:8d:e4:b9:95:14:4f:6c:3a:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:73:DC:5D:92:27:46:BB:FA:D8:A1:9C:F2:26:97:9C:69:43:79
X509v3 Authority Key Identifier:
keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:e6:cb:5e:9e:e9:a7:66:ce:e0:20:0f:7a:49:34:20:47:83:
36:ae:84:eb:74:50:a3:7c:83:fd:7c:cd:b7:c3:39:ef:c4:7e:
03:29:0a:18:03:e3:8e:3e:98:91:39:18:d6:2b:f4:eb:97:f4:
6a:51:45:97:7d:e2:64:29:27:11:c4:bf:24:62:1a:2c:ea:35:
9e:9b:03:2d:33:1e:cc:04:b6:b6:49:6b:89:82:ef:49:a0:1c:
39:1c:f6:3c:70:04:c7:e1:10:b8:a1:26:60:fd:71:e2:70:05:
11:25:f4:10:a2:6e:b0:c0:d9:fe:89:02:0c:e3:4f:8c:65:5c:
0d:fe:17:03:1a:ae:9b:d5:12:fc:81:74:71:b9:b9:a0:4c:99:
b0:1a:05:5f:94:55:bc:30:0c:67:83:ef:02:ac:25:68:6c:e0:
32:49:81:df:25:a0:73:85:dc:51:58:d6:a5:6e:86:1d:ac:b9:
6e:87:59:a4:28:54:b7:5e:72:72:f3:39:f4:c3:83:96:af:c8:
44:e8:c4:ef:51:fb:40:a1:18:7b:88:e4:88:8f:ff:b9:ff:73:
e5:e8:f3:a3:f9:f2:fa:b5:d5:b7:e5:a9:3b:c5:6b:ee:f4:7d:
e0:ec:b4:aa:3a:5f:3d:fe:74:b2:a8:e8:cd:c9:43:78:ba:a2:
09:b9:13:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:16:33 2025 by rpki-client