This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
File: 9HpCypKdg34XkyvKB9ZfgiyWRMs.mft (raw, json)
Hash identifier: qAa2drtRYg6AYMxlcrYmh9vQiZWyjLJHSRa6w416Vt4=
Subject key identifier: 59:25:5B:57:8C:7E:26:92:6D:6A:52:EB:03:59:66:51:5F:22:EE:9F
Authority key identifier: F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
Certificate issuer: /CN=A9169A9C/serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Certificate serial: 016E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
Manifest number: 016A
Signing time: Tue 23 Dec 2025 02:05:56 +0000
Manifest this update: Tue 23 Dec 2025 02:05:56 +0000
Manifest next update: Tue 30 Dec 2025 02:05:56 +0000
Files and hashes: 1: 9HpCypKdg34XkyvKB9ZfgiyWRMs.crl (hash: JpEJS7n3xIuAlXHxZ1cSTSKk/HTxCd4hkXfB4m1hOYA=)
2: 6224AEA6D37C11F09FF59A7EC4F9AE02.roa (hash: 11+RVr5guD8rNY3LWo5uItgUr3/y3LeGNEolarFgbOc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 366 (0x16e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169A9C, serialNumber=F47A42CA929D837E17932BCA07D65F822C9644CB
Validity
Not Before: Dec 23 02:05:56 2025 GMT
Not After : Dec 30 02:05:56 2025 GMT
Subject: CN=6949f904-499c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:32:b5:d6:04:c2:42:8b:69:d1:a9:4c:b6:
e1:65:e2:37:71:6e:de:42:ef:0c:cb:a2:3f:54:c3:
dc:c1:ce:72:37:16:75:4b:7f:4c:bd:45:7c:73:b9:
b8:d6:71:bc:49:c0:b5:c2:6d:30:ef:87:a6:12:c2:
f7:1a:c4:74:16:61:79:37:ce:cb:d0:68:3a:79:f5:
54:c0:1a:bf:10:4d:f0:46:e0:b5:d8:16:a1:ab:3a:
3b:17:7d:4a:d6:a8:0b:1b:b8:e1:7e:14:de:84:81:
67:e6:f9:53:38:7a:cf:43:f5:46:32:9b:8c:25:2b:
a7:8b:c5:d0:6a:5d:78:35:79:41:fc:d9:f7:e1:69:
00:b4:cd:3e:a0:7b:fc:07:af:c7:b7:93:ae:0e:75:
ca:4d:99:b8:f9:5d:16:07:a5:e7:11:50:27:3b:da:
9d:cc:d5:84:97:d4:ca:5d:01:2f:57:cc:68:48:80:
ff:f6:6d:22:0c:fa:8f:cf:ff:31:a2:84:bc:c0:9f:
b3:b9:39:c0:68:f9:d6:50:96:c5:2b:1e:cd:59:0a:
08:21:a9:82:77:16:db:3d:3a:ba:10:5d:74:a8:25:
0c:0d:ed:cd:85:e3:d8:d1:38:d5:a8:b2:20:d3:7a:
8b:b1:e4:87:65:17:db:b9:96:d1:b5:e0:ac:97:18:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:25:5B:57:8C:7E:26:92:6D:6A:52:EB:03:59:66:51:5F:22:EE:9F
X509v3 Authority Key Identifier:
keyid:F4:7A:42:CA:92:9D:83:7E:17:93:2B:CA:07:D6:5F:82:2C:96:44:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9HpCypKdg34XkyvKB9ZfgiyWRMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/7114843EBC3811EEA515313BC4F9AE02/9HpCypKdg34XkyvKB9ZfgiyWRMs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d6:7a:4f:b0:1d:28:b5:83:ae:ba:93:b3:22:4d:23:07:a5:
42:13:ba:f0:9a:ac:e0:0a:78:37:8b:af:7c:55:b1:19:45:67:
4b:a9:36:17:e7:af:81:81:43:a0:5c:44:1b:03:84:4e:e9:61:
a2:47:37:b3:35:f5:b2:43:7f:2b:66:78:32:7b:d7:87:fb:5d:
13:76:cc:1c:8c:98:b6:e2:85:96:70:58:44:04:23:74:2f:02:
6c:7c:9c:e4:0c:11:b3:9c:75:77:00:d1:9b:e0:ab:7c:84:04:
84:ee:23:4c:36:23:ec:05:7d:6c:fd:93:35:12:2e:25:72:8f:
d6:a1:1f:86:1e:d1:b8:94:90:3d:2b:35:d4:8f:c5:c0:09:45:
89:25:07:db:ad:29:da:89:de:00:f2:32:aa:46:1b:80:d9:c3:
13:22:70:4a:79:a9:4c:8f:57:ce:05:9b:82:b5:87:3d:b3:28:
9b:54:b5:da:ff:1e:a9:dc:0b:97:94:a6:e7:20:de:a1:cc:1a:
df:39:7f:ec:62:e6:24:ef:e5:ce:2e:bd:a6:e9:79:2c:f8:da:
43:cc:9f:b1:43:b1:9d:d6:48:27:78:a3:54:38:09:e3:54:bf:
cf:00:a9:62:f4:e3:59:4d:9f:2c:fd:a8:76:f3:52:7d:08:db:
12:04:32:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:46:30 2025 by rpki-client