This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
File: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft (raw, json)
Hash identifier: lk9mEMVA/BkISS8UgXEZEo17LhbaLgJWsuOY1BdJgtY=
Subject key identifier: 3B:1A:27:C6:6D:2F:06:47:88:2D:0F:8F:7E:D8:67:D8:6E:97:CB:49
Authority key identifier: D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0
Certificate issuer: /CN=A9146D06/serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0
Certificate serial: 3276
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
Manifest number: 3264
Signing time: Mon 22 Dec 2025 15:17:33 +0000
Manifest this update: Mon 22 Dec 2025 15:17:33 +0000
Manifest next update: Mon 29 Dec 2025 15:17:33 +0000
Files and hashes: 1: 0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl (hash: oSvC9KvOsnPF4wM8SEedOl6exL97NTkY0cDvnI6GmD4=)
2: F1C9EE68B13B11E5B2D80087C4F9AE02.roa (hash: 1VVuRrqVVTtGHoXa2KKerRIHjhwmzovA9uhLiSgp/NQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl
rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 15:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12918 (0x3276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146D06, serialNumber=D3156FF538A0D3F53973861FAD6436FB1E5FE8C0
Validity
Not Before: Dec 22 15:17:33 2025 GMT
Not After : Dec 29 15:17:33 2025 GMT
Subject: CN=6949610d-9a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:0c:a0:7e:08:e9:e7:7a:eb:2c:7d:e7:4d:
8f:3d:ae:ef:f1:15:15:cc:92:ed:04:53:af:f7:bc:
87:f5:0a:72:06:03:6c:ae:7c:3a:88:33:57:0f:e2:
1a:64:e5:a1:55:c5:6d:f5:9a:97:02:d9:ea:93:25:
47:da:a5:3c:fd:34:be:e0:6d:e4:11:c6:2e:d2:94:
bc:93:27:fd:a4:0a:e7:33:77:4c:a5:21:cf:49:02:
0b:a3:d1:42:33:99:53:05:6d:fb:0e:4e:91:c8:5e:
e4:b7:e0:b5:8c:cb:8c:50:f3:f9:ad:54:f0:e1:05:
ae:0b:9a:f5:0b:e1:7a:36:36:77:82:bf:80:18:da:
c2:ee:93:ec:e1:22:48:75:d9:96:e5:45:ed:45:a9:
e0:5d:14:c3:fc:94:c4:93:e7:8a:2e:31:af:b4:a9:
d1:aa:3d:06:b1:39:a8:d5:7e:fd:0f:27:fd:d3:a2:
e7:2a:45:75:76:1a:71:11:82:0b:50:bc:e3:07:b3:
ec:ea:36:94:3c:da:41:fa:1e:24:6b:0d:47:c1:17:
4f:ae:ac:00:81:01:56:52:83:8a:8a:2b:aa:8c:79:
83:46:7f:0f:05:48:61:e6:82:25:ce:2d:a5:fd:58:
49:f0:94:8d:43:12:72:33:b6:30:ed:23:f2:1e:f5:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1A:27:C6:6D:2F:06:47:88:2D:0F:8F:7E:D8:67:D8:6E:97:CB:49
X509v3 Authority Key Identifier:
keyid:D3:15:6F:F5:38:A0:D3:F5:39:73:86:1F:AD:64:36:FB:1E:5F:E8:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D06/1CECB18AA00411E2A23865E42F5A7754/0xVv9Tig0_U5c4YfrWQ2-x5f6MA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:6e:4b:49:e0:1f:db:c6:3e:83:bd:08:58:cf:9e:32:17:01:
d2:9b:29:1c:4c:b4:d1:fc:6f:b7:d7:4a:b6:87:36:14:ce:5a:
30:c5:40:f2:8f:bb:ef:84:25:68:08:cf:fa:85:dc:21:7b:99:
90:bc:f2:0b:e3:c0:98:ab:29:b7:be:31:91:d8:4e:b5:5d:7b:
3b:6f:81:fc:a1:fd:b7:51:42:d3:21:18:e9:78:dd:9b:48:cd:
1c:b5:98:f5:2b:3c:b2:63:93:56:11:ee:b4:f6:11:08:50:8f:
55:1c:95:d7:13:ac:6c:46:71:93:52:8c:15:9b:f0:e9:cf:81:
00:34:a3:ac:08:56:5c:80:d1:93:17:18:ab:0a:29:49:19:a2:
78:b4:03:58:02:6c:20:2b:59:eb:2a:78:ff:2c:df:30:4f:86:
b5:8a:5c:11:f6:eb:c4:16:5e:36:4b:7c:42:8f:be:10:01:80:
28:53:cd:75:5c:13:b8:26:31:ca:51:6f:6b:80:12:20:da:90:
d5:ec:01:34:32:34:0b:e2:84:af:d9:aa:f7:7c:0c:78:cc:44:
57:d2:34:a3:ba:c5:0e:b2:1d:de:f5:75:19:59:80:0a:a7:f2:
38:b8:fd:1c:4d:bb:2f:97:a2:fd:c2:16:97:3f:59:8b:35:bd:
35:75:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:24 2025 by rpki-client