This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
File: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft (raw, json)
Hash identifier: 9QGdcVmWCjP5Gz2Vv30v3fQ4ZKXGswCRA20OsE/CKdg=
Subject key identifier: 6D:D0:45:3C:BF:B3:85:CD:43:BD:A9:1A:13:60:16:CF:8D:75:E1:75
Authority key identifier: F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48
Certificate issuer: /CN=A913FA48/serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48
Certificate serial: 0234
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
Manifest number: 022D
Signing time: Tue 23 Dec 2025 01:09:12 +0000
Manifest this update: Tue 23 Dec 2025 01:09:11 +0000
Manifest next update: Tue 30 Dec 2025 01:09:11 +0000
Files and hashes: 1: 9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl (hash: h1+zbKuaSFMI/zYLCUSLLeGM/WTy2pEEsn0piNBGglQ=)
2: 56D1860A97D411ED801D7E41C4F9AE02.roa (hash: w+YVCZlT+ueyv41aCuxnpcHi2Q6S5cfTHp2i5KKlTA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl
rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FA48, serialNumber=F5FD274AF27CE95F692DB80BE8EF67C324602B48
Validity
Not Before: Dec 23 01:09:11 2025 GMT
Not After : Dec 30 01:09:11 2025 GMT
Subject: CN=6949ebb8-b5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dc:70:56:00:43:47:13:f8:a2:14:ee:53:c3:
8d:5d:aa:85:6f:75:6b:82:86:ec:08:6d:48:fa:f0:
de:6b:f7:6c:c7:d2:99:5e:1a:66:4d:07:61:4f:6f:
24:6b:86:31:3b:85:2f:b8:12:58:7f:d9:03:c6:44:
a7:4d:64:a8:d6:0c:8a:f2:4a:b1:4e:2f:0b:6b:6a:
21:43:11:64:01:91:14:a0:65:25:84:56:90:4b:c4:
08:a9:cd:63:5b:a4:01:db:83:3b:07:e4:39:84:62:
f8:7c:d3:9d:a3:2c:40:c5:74:a0:aa:d4:c0:bb:0b:
00:21:de:ef:99:e5:0b:04:b2:c1:fe:49:98:45:e9:
6a:17:f1:f7:d6:5c:fc:f6:78:da:87:bd:79:a4:aa:
5a:10:cf:d0:79:b4:f2:c1:05:78:20:7a:cc:7b:3f:
e0:cf:44:18:79:dc:2f:06:63:b0:8b:c4:90:6a:8d:
c5:f1:1f:eb:66:17:72:52:95:3c:ec:1e:0a:18:8a:
bb:4f:17:44:5e:10:c0:12:bb:ff:9f:d1:ff:39:e1:
26:4b:e4:5f:c6:60:fd:93:4a:d9:6f:57:30:66:36:
59:c2:b1:17:fc:be:c1:5b:1f:48:12:bc:25:3c:5e:
a0:90:e5:a1:c0:a6:81:74:ef:92:fb:96:a5:e0:a7:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D0:45:3C:BF:B3:85:CD:43:BD:A9:1A:13:60:16:CF:8D:75:E1:75
X509v3 Authority Key Identifier:
keyid:F5:FD:27:4A:F2:7C:E9:5F:69:2D:B8:0B:E8:EF:67:C3:24:60:2B:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9f0nSvJ86V9pLbgL6O9nwyRgK0g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA48/F73713F697D111EDB1A25441C4F9AE02/9f0nSvJ86V9pLbgL6O9nwyRgK0g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:dc:aa:eb:d3:87:b2:d5:21:d2:65:a1:75:c9:7e:16:ad:67:
16:93:c1:5a:6d:2e:89:5f:48:fd:03:36:46:f4:7c:e7:4e:4b:
5d:da:9e:30:0c:68:c7:9c:ba:68:b0:88:7c:70:84:62:b1:f1:
c9:71:39:75:39:d5:a7:f5:1e:b5:4f:84:31:6b:55:14:c8:a5:
1b:c9:60:c6:30:b6:c8:11:df:fd:e5:ac:d1:49:c1:da:a1:f4:
b6:e6:32:25:c8:3d:7b:9d:56:17:31:bb:0d:12:3f:c7:98:f5:
81:5b:5e:e2:0b:03:20:e6:fa:72:8c:45:ae:89:33:6f:58:11:
15:c6:cc:88:b0:0a:2f:5b:cf:c7:af:53:7a:38:68:8a:40:bc:
44:9b:a6:ce:f1:19:cb:e0:c4:fd:b5:4b:98:bc:e0:cd:57:97:
22:93:92:ac:e0:4a:f5:7f:fa:f7:e4:9b:3e:36:34:d6:1e:8f:
e6:30:ef:e8:ba:a5:ae:24:42:06:a6:4b:2f:09:bd:df:37:55:
7f:4d:27:02:a4:81:7b:2f:55:02:17:63:ce:c2:91:52:35:81:
af:d4:e1:ec:ab:3c:03:dd:e3:19:2a:08:8b:d6:e7:ae:49:d4:
0c:2e:bc:34:78:79:0d:e2:2f:f4:45:bd:36:9b:5c:90:7c:fc:
d3:74:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:46:37 2025 by rpki-client