This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
File: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft (raw, json)
Hash identifier: 4fiW80P+uahxDJkkvs33U5+qgTpyisZjbWv7p8Sdws0=
Subject key identifier: 1B:A8:17:B1:B6:44:AC:0C:60:46:41:3E:1B:16:DE:46:B4:FF:B3:4C
Authority key identifier: F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89
Certificate issuer: /CN=A916FA51/serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989
Certificate serial: 0BC1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
Manifest number: 0BB6
Signing time: Wed 24 Dec 2025 18:32:39 +0000
Manifest this update: Wed 24 Dec 2025 18:32:38 +0000
Manifest next update: Wed 31 Dec 2025 18:32:38 +0000
Files and hashes: 1: 9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl (hash: yr3IfIGiTXlFp88wnkG016CeAVJ0f65hFy9k+KH0r78=)
2: A79D17F2361111EA95391375C4F9AE02.roa (hash: tDsZ4GzDIlAFVIQZZ0Fw0ct73AL//Nys5aPjeishX2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl
rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 17:24:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3009 (0xbc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916FA51, serialNumber=F4ECB53EC230539C0B57E59B467D154FADEB3989
Validity
Not Before: Dec 24 18:32:38 2025 GMT
Not After : Dec 31 18:32:38 2025 GMT
Subject: CN=694c31c7-a0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:21:70:57:ab:13:d6:ec:e8:e1:aa:10:9c:
bb:dd:d4:ac:c4:65:96:3e:09:9f:7b:a7:c4:ff:ac:
ed:ba:08:96:30:6c:c9:15:d6:fe:de:74:e8:dc:16:
6f:3d:3a:d6:ac:cb:c3:96:17:a4:42:9d:4c:9a:dd:
07:1c:55:9b:03:73:2a:83:4b:7e:f1:5f:47:5a:92:
b1:bd:c9:96:19:e7:56:60:05:d9:f1:b4:30:41:f3:
67:52:fd:4e:60:9e:9d:88:3c:48:15:7e:68:9b:62:
5f:19:e6:98:48:24:90:58:56:1a:0e:1b:b6:e1:f2:
73:77:51:32:03:44:2f:cb:45:86:49:f8:0f:11:80:
16:2a:2c:ce:da:7c:7c:9f:2f:15:87:ff:e8:52:cb:
8d:f1:c8:82:a3:b0:5a:4d:0f:3e:7a:ce:65:25:54:
79:0c:38:5c:9d:6f:8a:d5:4c:32:ee:32:14:b5:b1:
57:fb:21:cd:05:c1:db:c7:db:5e:76:72:23:e2:ba:
1f:50:52:17:98:b8:23:0b:99:f5:d2:cf:e1:77:ec:
34:da:ed:8f:22:37:da:e7:fe:97:dd:a7:c8:c8:fe:
9c:23:12:68:a0:73:9c:cd:6a:6b:e6:55:db:8d:1d:
00:b1:c8:3c:05:2e:48:e6:ba:c6:12:a2:ba:9b:9d:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:17:B1:B6:44:AC:0C:60:46:41:3E:1B:16:DE:46:B4:FF:B3:4C
X509v3 Authority Key Identifier:
keyid:F4:EC:B5:3E:C2:30:53:9C:0B:57:E5:9B:46:7D:15:4F:AD:EB:39:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Oy1PsIwU5wLV-WbRn0VT63rOYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FA51/F925B350361011EA9BD17474C4F9AE02/9Oy1PsIwU5wLV-WbRn0VT63rOYk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:bd:0f:94:cd:1d:85:49:ee:a1:44:da:81:26:dd:92:28:a7:
44:6c:4c:c1:4a:80:16:23:fb:d7:25:9d:6e:d9:dc:a3:1f:17:
ed:92:6b:e7:d1:f5:72:50:c3:ac:e4:1f:dc:2b:69:98:e9:c3:
df:dd:f8:68:2b:45:46:7f:01:86:8a:04:c9:e9:ef:39:ce:2f:
99:96:4c:f6:b8:fc:b5:38:cc:86:e8:6c:a2:52:69:68:51:35:
c6:e9:da:4c:ce:21:ef:de:3f:3b:53:50:e2:fc:17:da:b3:83:
09:ef:39:a5:73:8b:a1:d4:54:f4:49:c1:68:90:a6:dc:ac:1c:
28:1a:e9:26:6f:1f:8c:e0:b1:08:4a:2c:17:98:80:ca:ed:74:
03:fb:3a:eb:ae:6a:f9:b7:96:88:f9:a6:74:a8:c8:87:c2:24:
01:6c:98:7f:b5:4a:a0:ba:dc:3f:28:2f:88:48:14:74:f1:2f:
23:89:4b:f9:8e:08:ba:56:6a:86:63:f8:bc:9d:2d:81:1f:88:
9f:4c:54:4e:03:ca:b4:c9:04:14:f2:45:78:6a:40:88:fe:f1:
eb:47:24:04:38:fd:f4:e4:61:27:fa:88:89:ae:db:10:b0:a0:
05:bf:f7:82:99:53:f7:0d:dd:21:93:0b:6a:ad:6c:5c:18:51:
e5:12:e6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:24:34 2025 by rpki-client