This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json)
Hash identifier: fJyqdobGPHapOdJu1YV3rpgUbX0U9cIJT4z6TmmJ0Ec=
Subject key identifier: 5E:4B:47:5F:CD:1E:F0:46:6B:5F:43:E3:3A:D6:8C:17:2D:13:F8:45
Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Certificate serial: 0CA4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
Manifest number: 0C99
Signing time: Mon 22 Dec 2025 18:01:07 +0000
Manifest this update: Mon 22 Dec 2025 18:01:07 +0000
Manifest next update: Mon 29 Dec 2025 18:01:07 +0000
Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: CQpM1y1Vc1TvKMrq/kGos0CCYjU2DYb3kCZ8j7tSfNs=)
2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: LoUT2MaD5/F/EBumNr9K+cDj9oFe1lrYI+mckDlhBHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl
rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074
Validity
Not Before: Dec 22 18:01:07 2025 GMT
Not After : Dec 29 18:01:07 2025 GMT
Subject: CN=69498763-3624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:65:b8:76:ec:9c:7a:e8:e1:95:18:8d:7c:
f4:32:5a:3d:50:f5:40:74:fd:85:6e:d7:46:46:49:
b3:bd:dc:28:84:a4:e0:9b:12:67:ea:b6:22:e8:d0:
dd:b5:8e:08:ce:b3:0e:e5:cd:a0:1a:e3:17:22:c4:
4d:67:6f:a5:60:f6:e6:59:40:30:06:39:fe:a2:e1:
21:e9:b8:d6:5e:cc:33:f2:a0:ee:17:10:11:72:d1:
66:78:93:41:37:ac:89:b3:0c:9a:0e:88:f3:b9:36:
11:00:7d:f0:aa:59:61:47:df:af:a3:63:85:ca:24:
f4:60:56:50:c4:6d:2d:d1:5d:15:b0:30:a5:52:8b:
13:f2:2d:3d:99:c0:48:ec:2d:8e:70:be:6e:c7:38:
cb:25:d5:eb:e8:54:9f:15:86:1b:45:c4:a7:b4:85:
52:1d:85:e5:e0:70:78:07:56:28:7d:85:c8:ba:c6:
86:cb:2e:21:cb:5a:93:27:ec:2c:08:26:c6:eb:37:
ca:8c:2f:02:bc:fe:c6:5e:7c:d5:6c:01:59:f1:58:
ed:9d:b9:c1:68:de:93:46:a4:17:70:90:6e:34:b3:
0f:69:16:4e:79:c3:ed:15:66:79:ca:8a:32:74:5a:
20:f9:0f:79:2a:27:28:fc:40:82:82:ca:00:f0:02:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4B:47:5F:CD:1E:F0:46:6B:5F:43:E3:3A:D6:8C:17:2D:13:F8:45
X509v3 Authority Key Identifier:
keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:42:de:47:9c:6f:36:7c:95:95:16:aa:21:20:a6:1c:18:fa:
04:13:66:2f:78:c0:95:7a:25:d6:44:05:db:64:00:c2:91:ca:
d3:3d:bd:25:40:10:fe:fa:ba:f9:02:d1:89:eb:43:78:6c:95:
ff:9b:25:90:20:79:09:88:1e:1b:5a:c4:21:5e:51:94:2a:ef:
ff:cd:c4:6d:aa:0a:dc:17:df:ec:ac:72:88:f2:6f:6f:05:4a:
83:d7:3d:52:6f:30:a1:bb:f9:3f:90:3e:4e:4c:89:4e:1a:f9:
45:1e:97:b7:46:47:75:16:0b:15:fa:77:c7:7b:c8:1c:48:0d:
70:a2:4f:0d:45:a3:94:af:ae:37:13:db:19:bf:a7:fa:96:57:
70:dc:6e:26:bb:ec:60:27:2d:5c:c7:a8:5f:43:e4:34:a9:53:
a4:19:2f:93:6f:bc:4f:18:2a:96:3d:57:f3:5d:3b:6c:ad:0b:
d7:d6:de:ef:e8:d0:8b:ee:38:bb:64:f3:ab:9e:8b:bc:7c:e6:
a0:58:aa:93:2d:43:2a:b8:bf:ed:46:d8:b5:64:74:18:d4:91:
e9:50:e5:4c:39:ea:19:0d:3d:c9:a4:c5:0c:2f:c4:6e:91:d0:
4a:ea:0d:91:2d:e0:b3:61:87:53:53:6c:f5:5c:36:96:26:b5:
01:e3:e4:2c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx
NzA3ODIwNzQwHhcNMjUxMjIyMTgwMTA3WhcNMjUxMjI5MTgwMTA3WjAYMRYwFAYD
VQQDDA02OTQ5ODc2My0zNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlkZluHbsnHro4ZUYjXz0Mlo9UPVAdP2FbtdGRkmzvdwohKTgmxJn6rYi6NDd
tY4IzrMO5c2gGuMXIsRNZ2+lYPbmWUAwBjn+ouEh6bjWXswz8qDuFxARctFmeJNB
N6yJswyaDojzuTYRAH3wqllhR9+vo2OFyiT0YFZQxG0t0V0VsDClUosT8i09mcBI
7C2OcL5uxzjLJdXr6FSfFYYbRcSntIVSHYXl4HB4B1YofYXIusaGyy4hy1qTJ+ws
CCbG6zfKjC8CvP7GXnzVbAFZ8VjtnbnBaN6TRqQXcJBuNLMPaRZOecPtFWZ5yooy
dFog+Q95Kico/ECCgsoA8ALGKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5LR1/N
HvBGa19D4zrWjBctE/hFMB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5
RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ
SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzA0OS9BREFDNTI4MjA5RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lY
NFZnNUFxanZudVVYQjRJSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCQt5HnG82fJWVFqohIKYcGPoEE2YveMCVeiXWRAXbZADCkcrTPb0l
QBD++rr5AtGJ60N4bJX/myWQIHkJiB4bWsQhXlGUKu//zcRtqgrcF9/srHKI8m9v
BUqD1z1SbzChu/k/kD5OTIlOGvlFHpe3Rkd1FgsV+nfHe8gcSA1wok8NRaOUr643
E9sZv6f6lldw3G4mu+xgJy1cx6hfQ+Q0qVOkGS+Tb7xPGCqWPVfzXTtsrQvX1t7v
6NCL7ji7ZPOrnou8fOagWKqTLUMquL/tRti1ZHQY1JHpUOVMOeoZDT3JpMUML8Ru
kdBK6g2RLeCzYYdTU2z1XDaWJrUB4+Qs
-----END CERTIFICATE-----
Generated at Tue Dec 23 16:09:53 2025 by rpki-client