This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
File: 9ncWp9N92wPcVtA6uQKnIDfqGdk.mft (raw, json)
Hash identifier: 81kAYMinxxiEofGaIkQSVvn1hmgOOyaBHwhVGpOXRNA=
Subject key identifier: 8E:E4:5A:EA:E6:52:74:C6:E4:0C:E7:D6:0A:CD:3A:BF:DA:2B:EC:8E
Authority key identifier: F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
Certificate issuer: /CN=A918F1EE/serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
Manifest number: A1
Signing time: Tue 23 Dec 2025 05:13:17 +0000
Manifest this update: Tue 23 Dec 2025 05:13:16 +0000
Manifest next update: Tue 30 Dec 2025 05:13:16 +0000
Files and hashes: 1: 9ncWp9N92wPcVtA6uQKnIDfqGdk.crl (hash: k++4WbHgZpLa8inHHu9AQ3nY8QZv9tA7dAvyBwvArrs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:13:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F1EE, serialNumber=F67716A7D37DDB03DC56D03AB902A72037EA19D9
Validity
Not Before: Dec 23 05:13:16 2025 GMT
Not After : Dec 30 05:13:16 2025 GMT
Subject: CN=694a24ed-ed81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:91:0c:35:3c:ad:32:b0:fd:5b:21:14:ae:
b0:18:8e:19:5d:84:b9:45:e4:3c:37:09:e6:c6:31:
81:cf:59:b4:1a:b9:ca:20:68:d4:d2:24:4a:45:96:
9d:f3:dc:fc:27:f5:3f:48:bd:c7:ee:44:20:42:d0:
a5:10:74:10:80:f6:5d:0f:50:64:c5:1b:e8:fe:96:
75:82:1a:03:01:a8:b5:78:4c:85:f4:c8:b6:2e:da:
ff:34:2d:9b:fe:91:78:5e:c8:f5:a9:75:29:f6:3d:
7a:65:2b:b7:e5:25:74:d5:42:ea:3c:4d:52:28:3e:
c2:4a:da:f0:0c:66:69:47:ec:46:fd:a0:13:56:5a:
62:26:fa:5b:1f:11:95:94:be:3f:57:78:37:b1:e0:
49:0c:9e:8b:e5:07:7b:11:c5:99:78:ef:5a:3c:3c:
e0:c6:f6:c6:b2:88:4a:1f:03:57:7e:6e:8f:6d:a5:
82:f8:3e:13:f0:e0:cc:f8:d1:16:63:a3:0f:05:da:
53:0a:5f:bb:15:9b:37:3a:49:ac:d7:7d:db:bd:7e:
81:09:da:a9:66:bc:31:d8:6e:97:a9:80:08:ea:2a:
4b:3a:10:5e:33:71:f5:4f:5c:e7:54:a5:7e:6b:6e:
e3:e5:ee:1f:9b:44:20:45:21:73:4d:6b:95:a2:d8:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E4:5A:EA:E6:52:74:C6:E4:0C:E7:D6:0A:CD:3A:BF:DA:2B:EC:8E
X509v3 Authority Key Identifier:
keyid:F6:77:16:A7:D3:7D:DB:03:DC:56:D0:3A:B9:02:A7:20:37:EA:19:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ncWp9N92wPcVtA6uQKnIDfqGdk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/F32CF4E8E75111EFBED81B0EC4F9AE02/9ncWp9N92wPcVtA6uQKnIDfqGdk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:2f:78:86:08:66:5c:02:d7:47:a4:05:33:5a:c3:e4:47:4a:
10:38:8c:09:6f:9d:0e:4c:c4:af:6c:38:7f:35:c1:89:f3:13:
fc:4e:28:bf:91:82:1b:62:c2:83:99:73:e2:dc:7a:74:84:e9:
e5:75:f1:75:7d:05:36:f2:d8:04:21:5a:a0:f5:ff:23:ef:26:
e4:6e:e4:31:72:96:c7:7d:9a:c7:48:94:b2:5f:52:42:b9:b3:
6b:cc:b8:2e:a4:91:35:92:84:2a:de:2a:f8:46:c0:18:bd:66:
f1:1b:fd:16:b3:9a:a5:1d:f9:12:90:cf:0d:db:18:08:00:a2:
7c:19:99:68:09:41:04:fc:04:4c:44:38:af:23:48:96:be:6c:
02:d4:a5:5b:18:ea:cd:69:46:ee:f7:56:7c:cd:a6:49:82:8d:
81:79:b8:1f:11:87:b1:7a:f5:1b:22:74:0b:17:ec:e2:e5:9a:
22:f8:04:d9:e8:a8:5e:f2:6b:56:6d:7e:02:13:c6:17:7d:cf:
f7:80:b3:69:16:fe:4c:0c:16:88:e9:28:3e:d9:6e:ba:a3:32:
f9:8b:53:92:0d:c8:03:ef:54:cc:86:9f:b3:26:f3:0f:be:c6:
a2:ef:d3:37:f0:0d:d0:c9:39:6c:fc:a9:6f:25:91:0e:62:44:
48:4d:ea:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:34 2025 by rpki-client