This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
File: 99M_RV7avj1Mtj-5LkygdhGcNKY.mft (raw, json)
Hash identifier: J0pnLNtu+G3qw6Pg6YX2NfSTxeodO2RNBaPrkjzzTiY=
Subject key identifier: F1:86:78:82:25:7E:50:47:52:47:A8:9F:2C:A1:7E:51:2F:70:BA:64
Authority key identifier: F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
Certificate issuer: /CN=A9150845/serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Certificate serial: 1562
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
Manifest number: 1537
Signing time: Mon 22 Dec 2025 16:32:34 +0000
Manifest this update: Mon 22 Dec 2025 16:32:34 +0000
Manifest next update: Mon 29 Dec 2025 16:32:34 +0000
Files and hashes: 1: 99M_RV7avj1Mtj-5LkygdhGcNKY.crl (hash: asdHmR4UBrUtzeb/iEO/izO0zas6xVAOAVHce5ZhB7M=)
2: A2DA1898656911E889701022C4F9AE02.roa (hash: xf+2d47qHkYmi2yroBFJrbGRT0XeBlBZ8hLU+cnzYQI=)
3: 026DBC9A4A2711E9A05D2324C4F9AE02.roa (hash: zTZf+V2KLsZguuHAsoXhlZlHVMGYryza/1ncRZFtAAQ=)
4: 2A3E123A5A5711E8B29BFE6AC4F9AE02.roa (hash: U0yFo0xT2JCBMzVtbJCeUBYnXCeOaBjapFQrt13nnSI=)
5: 74D88B52FF6511EB95D39078C4F9AE02.roa (hash: CXE6fUMqll/lf0w/Ba+vnDTzs/7KktNMTcHauEAgToY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5474 (0x1562)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150845, serialNumber=F7D33F455EDABE3D4CB63FB92E4CA076119C34A6
Validity
Not Before: Dec 22 16:32:34 2025 GMT
Not After : Dec 29 16:32:34 2025 GMT
Subject: CN=694972a2-bbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:60:98:b9:57:6f:3a:0e:67:a2:e0:c7:3b:
4e:95:28:d3:74:19:8a:36:5c:9f:d3:01:f9:94:bb:
9c:5d:02:a6:42:5b:36:cc:c8:17:87:da:15:c5:38:
a8:f7:f1:8e:89:88:b6:31:48:7d:d3:95:ba:0a:47:
53:aa:89:d9:c3:e6:34:03:1c:d6:df:05:bb:e6:0f:
4f:bd:0d:e4:ad:b6:fd:df:8b:5e:2a:f8:18:82:91:
e9:a0:2c:f0:d1:92:04:3c:af:10:8b:e1:2a:39:ad:
77:8a:f3:80:d1:be:8c:4f:23:ff:2c:98:af:01:76:
ae:b8:34:1a:9f:a4:f3:4f:4f:d5:fb:89:e3:00:f6:
de:4f:be:c7:b8:4e:80:71:7f:e3:96:c4:86:13:e1:
d7:36:f1:67:d6:3a:ed:af:e4:03:e4:16:90:09:a5:
34:ee:f3:5f:93:23:cc:42:d4:69:3e:44:c6:43:26:
52:ed:a6:85:0b:2c:ae:78:01:a5:c3:fa:bb:ba:98:
7c:bc:c3:9d:84:09:ab:25:dc:e0:8c:3a:08:6c:df:
06:eb:12:e3:16:93:a8:9f:75:c2:2c:f5:b7:e5:63:
09:f5:46:4c:73:4e:96:83:96:cd:58:f4:85:0d:f3:
e4:b7:54:ab:37:a6:14:e7:1f:d9:ac:ff:4b:e3:93:
61:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:86:78:82:25:7E:50:47:52:47:A8:9F:2C:A1:7E:51:2F:70:BA:64
X509v3 Authority Key Identifier:
keyid:F7:D3:3F:45:5E:DA:BE:3D:4C:B6:3F:B9:2E:4C:A0:76:11:9C:34:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99M_RV7avj1Mtj-5LkygdhGcNKY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150845/DC7100EA5A5511E8BE3E0B68C4F9AE02/99M_RV7avj1Mtj-5LkygdhGcNKY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:89:54:74:47:51:57:fd:38:14:af:29:e3:03:e4:e7:69:16:
85:d9:1c:78:2d:a9:57:c8:36:21:be:83:65:94:83:8e:bc:bd:
20:a9:82:ed:89:92:59:0a:43:79:82:51:dc:6b:5f:f1:1d:8d:
97:bc:24:8c:2b:15:84:69:3b:68:1c:dc:32:d8:05:67:ef:20:
f8:7a:7f:8c:f4:60:84:ee:f0:c2:6c:e9:8c:13:45:fe:c4:bd:
5c:06:25:01:58:da:54:e1:60:15:cf:28:64:e4:18:0a:31:96:
20:aa:c2:5f:84:50:d1:e3:e5:5c:69:e4:c3:2e:bc:db:df:9c:
47:1c:1d:82:81:13:0a:49:78:ae:5e:6e:82:68:3e:d0:d6:a7:
96:b4:2c:11:63:35:6c:8e:a2:51:90:db:c9:a1:43:39:aa:a9:
b4:83:c1:a5:b1:ae:b9:eb:60:09:ab:52:10:5a:8c:2d:cf:d8:
8c:0c:22:b1:cd:a9:a9:c2:ab:48:dd:1d:be:d5:fa:bc:31:02:
5d:29:a4:4e:40:e5:01:ea:c4:57:16:bb:e4:09:f4:40:56:b0:
12:f8:4f:1d:10:0e:c8:08:af:bc:8d:41:e4:ae:5c:0f:59:3f:
d9:be:39:c4:70:58:14:c1:91:0c:c6:ae:ef:b4:2b:fa:b6:27:
9c:38:90:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:25 2025 by rpki-client