This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
File: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json)
Hash identifier: x1ICy/JvhwbY7Hyt707pZeaFdEbSJw4uOS5nIvsaIjY=
Subject key identifier: 2F:7D:B6:3C:68:65:59:45:26:23:69:4C:3A:82:06:A0:2B:DA:8A:4B
Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
Certificate issuer: /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Certificate serial: 0933
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
Manifest number: 0915
Signing time: Wed 10 Dec 2025 19:18:51 +0000
Manifest this update: Wed 10 Dec 2025 19:18:50 +0000
Manifest next update: Wed 17 Dec 2025 19:18:50 +0000
Files and hashes: 1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: 2QHQ86NLRPFKa+s1/nh62QW/3kuOgslG2nnAbd0LNuA=)
2: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: 9SsfPFEpNqBFgCdLY2IklkloHnAbZJJJLXhyoF85vCY=)
3: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: mrT/TQVc5LCUrmX9VtkN0plkNrICogqBYArk6etw7Y8=)
4: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: Leqb5XfRofLJ3cqjCHqmyKArkM3Rck1Tf0kybehmhSI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 19:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2355 (0x933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Validity
Not Before: Dec 10 19:18:50 2025 GMT
Not After : Dec 17 19:18:50 2025 GMT
Subject: CN=6939c79a-2b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:53:2e:68:c3:16:f8:fa:73:50:fa:ef:ec:47:
ef:31:a3:82:27:fc:52:9b:78:1b:7e:4a:8b:cc:a8:
d6:e1:75:bf:3f:a9:24:36:58:02:aa:82:db:b7:88:
99:a9:00:a9:a7:01:c0:15:2e:af:8b:95:b1:f2:4a:
a5:9c:ac:fe:ea:da:6a:66:4a:05:3b:ac:1c:be:6f:
86:fa:b0:03:4f:bd:83:80:68:47:87:63:4d:8b:54:
65:e2:a1:90:92:e8:8c:ff:f2:89:15:11:ed:6f:65:
b7:f6:4b:3a:56:cd:e1:a7:e8:0b:87:ed:df:cf:2b:
a4:b5:19:c7:5d:8d:8c:e7:81:40:f8:0b:35:1e:ec:
ee:1e:fc:62:eb:15:cf:44:90:f5:37:9d:43:af:be:
8d:39:10:58:8e:cc:63:af:79:2e:da:cb:a1:be:73:
c3:95:a9:49:47:fc:9f:29:4f:a7:3d:5c:9f:c9:57:
77:29:14:94:ff:bd:7d:44:3a:54:5e:a0:e0:c5:aa:
97:01:1b:30:32:90:06:5f:51:df:4c:e9:f0:e5:2c:
94:d0:5c:16:22:c4:1f:92:5d:5c:80:2c:73:a0:ee:
44:d1:96:46:f2:60:61:33:af:30:67:64:67:53:63:
de:2b:f5:c8:f3:a7:85:35:df:fb:1f:a5:83:ed:91:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7D:B6:3C:68:65:59:45:26:23:69:4C:3A:82:06:A0:2B:DA:8A:4B
X509v3 Authority Key Identifier:
keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e2:61:b3:b9:8c:fb:2e:f2:b4:1a:61:60:17:8d:9b:3f:66:
a3:0c:88:8d:59:85:32:d4:6c:26:c0:5d:f5:24:95:88:e9:c1:
b0:18:44:aa:a4:89:c4:02:f7:12:47:90:4f:75:d2:a7:72:82:
cb:28:ce:46:93:ab:f2:d1:40:e4:cf:e9:02:a9:86:43:cc:5c:
de:6e:31:dc:60:ef:cc:52:22:d4:5f:38:aa:da:b9:ff:b7:d8:
96:ac:bd:ed:ea:45:23:8f:d8:ac:e3:73:67:eb:7b:2d:a3:d8:
61:11:69:08:ff:1e:83:7c:af:62:78:c8:80:2d:a8:00:49:cf:
53:31:f2:6f:10:bc:4b:b0:d9:8a:93:46:1f:fe:68:ad:50:25:
ca:89:08:83:fb:48:e5:4d:e6:60:d0:64:25:48:28:fc:e7:85:
c1:44:20:4a:b7:3c:87:76:5a:ab:00:d0:53:45:f5:48:a0:50:
ca:ce:1c:71:ee:e7:a5:08:c7:b2:a8:8b:e6:50:49:3c:89:c6:
e6:87:9a:39:63:d4:5a:79:59:e9:aa:05:f6:31:75:9a:6d:4b:
7e:62:2f:3c:d0:c7:48:82:d8:f5:27:86:90:d5:a6:28:a8:61:
d3:c3:2e:70:cc:61:f8:09:ee:cb:fe:10:27:b7:ec:04:25:51:
12:dd:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 08:27:46 2025 by rpki-client