This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
File: mtNJ9FSFO7GJKv72BIwYclgFd2E.mft (raw, json)
Hash identifier: 8FmOm8H5k6vQWmc8HvJq99K8T9nujY52Ir2cB62h/6g=
Subject key identifier: EB:F3:A1:E4:D7:AA:0F:BA:0A:61:1A:D0:6B:E7:24:0D:14:88:E0:EA
Authority key identifier: 9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
Certificate issuer: /CN=A9169591/serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Certificate serial: 0189
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
Manifest number: 0186
Signing time: Tue 23 Dec 2025 02:37:00 +0000
Manifest this update: Tue 23 Dec 2025 02:37:00 +0000
Manifest next update: Tue 30 Dec 2025 02:37:00 +0000
Files and hashes: 1: mtNJ9FSFO7GJKv72BIwYclgFd2E.crl (hash: 3/jAbXqwFZByQsc1mQIWrAGLuodd7soY5mkqGXhZOXc=)
2: 448983A8892D11EEB4AA276EC4F9AE02.roa (hash: WCeA5fOBWFOKkLb8P073mp5LsBAsFbEzZHlJDI60+6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169591, serialNumber=9AD349F454853BB1892AFEF6048C187258057761
Validity
Not Before: Dec 23 02:37:00 2025 GMT
Not After : Dec 30 02:37:00 2025 GMT
Subject: CN=694a004c-2563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:a6:e4:8a:dc:fc:e9:a1:c6:bd:23:b0:6d:
30:e7:81:0d:c3:e6:01:2b:9c:de:4d:59:44:f0:bc:
e0:ab:02:a4:99:b2:61:7a:00:96:81:4b:c7:7c:ad:
81:10:d4:58:11:ac:66:0a:05:27:78:50:c4:8c:74:
81:1f:9d:2f:bc:0b:af:1e:d1:b3:63:e9:e2:4c:a1:
c5:38:af:08:a0:c6:6a:cc:a9:70:c8:3d:bf:eb:84:
4b:9c:16:82:d4:e4:74:ec:56:23:48:72:4d:9d:ed:
d0:69:c9:46:dd:4e:42:db:6a:4e:1b:36:14:00:94:
0d:e8:ab:3a:13:b6:7a:d5:c6:b8:47:4c:02:cf:42:
e1:6c:42:e2:77:b4:b4:a5:52:eb:63:02:b1:83:90:
a4:c6:3a:27:d1:eb:f0:b4:e4:e8:0f:f1:46:49:a5:
4b:2c:a9:59:2a:3b:a7:17:0d:79:17:af:92:5c:c4:
c0:7a:f4:f8:1c:56:08:4a:d5:97:fd:7a:d9:e7:a7:
14:0d:f6:eb:d8:2b:1b:8a:36:26:5c:e1:fc:70:0d:
fc:be:86:0d:34:d4:a1:12:38:7a:02:35:9f:02:54:
48:51:41:40:0d:43:b4:f4:27:9a:a5:3e:32:48:1c:
ad:39:9f:f2:64:56:22:be:bc:b7:db:4c:74:b2:f1:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F3:A1:E4:D7:AA:0F:BA:0A:61:1A:D0:6B:E7:24:0D:14:88:E0:EA
X509v3 Authority Key Identifier:
keyid:9A:D3:49:F4:54:85:3B:B1:89:2A:FE:F6:04:8C:18:72:58:05:77:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtNJ9FSFO7GJKv72BIwYclgFd2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169591/DED83568892C11EE9477816DC4F9AE02/mtNJ9FSFO7GJKv72BIwYclgFd2E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:ce:66:aa:7f:d0:2e:c8:13:2a:fd:60:c0:15:4a:36:e6:6a:
0b:54:a8:fb:51:de:ac:04:9a:0c:2a:bd:9f:65:c9:95:21:0b:
d2:dd:f0:29:4a:f4:7d:f5:08:86:65:dc:e4:7a:5d:93:b6:bf:
f1:e6:cb:d9:25:76:3b:ae:cd:5b:36:fb:8a:ed:5f:0e:18:35:
3b:aa:19:9f:1e:8c:ff:b1:6c:5f:53:e8:74:c0:eb:19:f2:ae:
24:7e:14:ce:7b:fa:e1:7d:30:70:d1:8e:15:82:75:7f:7e:61:
de:3c:61:d9:88:90:29:7b:10:6a:37:78:3a:75:40:6e:d0:7d:
09:97:0e:3c:58:34:f0:9e:9b:28:03:39:df:ee:46:c2:bd:9c:
15:83:b2:0a:99:4c:17:d1:00:eb:aa:4c:58:70:1c:33:f1:9b:
3b:5d:cc:c4:0e:6f:85:3f:9e:2b:5d:be:20:75:38:6d:98:06:
a8:4a:38:f2:d2:f1:57:3d:74:35:10:73:16:b9:cd:7f:5b:4a:
90:fa:dd:01:af:4b:ce:86:c1:c5:85:19:bd:0a:d2:e4:8b:35:
3f:7e:b1:7b:4e:00:8d:d9:07:f5:43:43:c1:5b:b1:b4:5f:c2:
26:2d:ce:87:bc:2f:fe:ec:b1:f9:52:cc:3e:e1:f0:9e:28:2a:
58:f2:99:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:31 2025 by rpki-client