This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
File: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft (raw, json)
Hash identifier: aH0pHZsI/eaMDlE6yjm7WC+gGVKTiRR9LvEx1Tafnqg=
Subject key identifier: 04:FD:92:8D:0B:4E:92:48:5E:98:33:50:FE:AA:55:21:9E:9D:AE:A1
Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
Certificate issuer: /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
Manifest number: CA
Signing time: Sun 21 Dec 2025 04:57:56 +0000
Manifest this update: Sun 21 Dec 2025 04:57:56 +0000
Manifest next update: Sun 28 Dec 2025 04:57:56 +0000
Files and hashes: 1: 9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl (hash: BtjvX5aUxCCyF4iEyDUYm/x+QVbuzAzx/OE01psfgsA=)
2: 91D2F686B4BE11EFA41A5C26C4F9AE02.roa (hash: sKOTsNVX+CZUe222IvZsyt4goGILGlPT7qY6Zl0V7Cg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Validity
Not Before: Dec 21 04:57:56 2025 GMT
Not After : Dec 28 04:57:56 2025 GMT
Subject: CN=69477e54-4a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f1:6a:47:a2:ca:13:3c:ea:8c:bb:80:85:a3:
31:b1:58:6b:f4:94:9a:88:40:53:a7:24:04:c5:9f:
a5:a8:f8:fe:d6:cd:90:12:fe:c8:90:0c:1e:8c:5c:
19:3c:7a:b1:26:3b:61:b8:f7:fd:8b:f6:83:6d:44:
34:3d:0d:34:7b:7a:f4:2d:c7:fe:89:cb:7d:e3:75:
93:82:db:bc:cf:3a:7c:7c:5c:e1:17:8a:b3:56:b9:
9d:3e:fe:3e:3a:64:d7:ee:09:ff:45:cd:95:16:2b:
21:01:96:f3:b0:52:a2:21:8f:68:ca:62:ca:5c:94:
b5:7d:4e:8a:8a:4a:bf:70:4e:e4:67:dd:48:3b:c9:
d2:02:77:49:04:af:f8:dc:90:d1:5a:fd:2a:63:68:
0e:8c:6e:fa:4d:f3:ce:15:56:ed:df:67:51:1b:22:
12:ae:43:47:df:3c:a8:d6:fe:31:94:95:1b:e2:ca:
dc:e9:d5:7f:7a:27:46:5b:b0:39:33:f2:72:39:61:
dc:34:56:e5:35:23:65:be:2b:b7:bb:b1:af:d2:a3:
dd:3f:87:07:0d:41:b6:c4:76:73:49:ef:46:d7:21:
b9:ca:86:01:9a:47:a1:40:c7:a8:6e:4d:08:d1:35:
49:6a:9a:1c:3a:65:3e:50:35:77:96:49:32:d2:90:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FD:92:8D:0B:4E:92:48:5E:98:33:50:FE:AA:55:21:9E:9D:AE:A1
X509v3 Authority Key Identifier:
keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:2b:c2:12:9b:b7:7d:24:ca:e7:d3:a8:9e:e5:2d:b7:c5:11:
1c:93:2b:2b:cc:f9:76:0b:99:96:0b:ad:2c:2c:8d:7f:38:f2:
46:18:f8:e0:bb:60:c8:97:b7:78:6c:83:a0:9d:0b:a6:7a:8b:
be:a9:87:5d:4c:7b:29:6e:5f:ce:4a:6c:97:af:bc:7d:57:17:
cc:8a:a2:a1:9d:8b:42:eb:d4:e6:77:3f:21:30:22:95:62:4a:
97:77:c5:ad:de:1c:aa:5d:80:fa:dc:aa:ac:10:00:c6:1b:33:
66:d4:bc:44:3f:75:70:70:85:d4:08:39:d4:2d:d6:32:40:35:
5a:40:58:4c:e9:b8:ec:92:24:7a:54:e9:e0:34:8a:22:30:7f:
be:69:d2:68:04:3a:43:b9:b3:b5:76:76:eb:9c:3f:9b:a1:58:
79:3d:3c:34:f9:4d:3a:57:66:28:0e:2b:ce:05:63:4a:bc:5b:
f7:f4:d4:c6:80:07:c5:71:1d:e6:f3:5d:6d:84:75:de:ac:69:
e1:da:d2:ea:a2:e2:35:92:29:7a:b9:e4:23:59:2f:b1:d9:e4:
b9:c7:61:28:09:1f:e8:71:fe:e2:48:bc:8f:51:03:cf:3f:c9:
ae:08:b7:eb:91:17:0a:7f:15:96:1e:26:2f:31:20:dc:58:2c:
80:03:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:39:52 2025 by rpki-client