This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
File: 9y59Xhu0VCq3_3dzZYg8FgEDTek.mft (raw, json)
Hash identifier: dqIqiWbOJIr8hee4mO4Um0L9RU8K6CkaqfbXeOLnpH8=
Subject key identifier: DD:9F:94:02:E3:43:C6:3C:2F:69:1E:EB:B3:0A:53:9B:A8:05:F9:33
Authority key identifier: F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
Certificate issuer: /CN=A919631C/serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Certificate serial: 0F24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
Manifest number: 0F16
Signing time: Mon 22 Dec 2025 17:15:41 +0000
Manifest this update: Mon 22 Dec 2025 17:15:40 +0000
Manifest next update: Mon 29 Dec 2025 17:15:40 +0000
Files and hashes: 1: 9y59Xhu0VCq3_3dzZYg8FgEDTek.crl (hash: QiJVaIqKziNZXVnTvwXwYXT6i6jbQda99H2p4BZqsFs=)
2: DCB2531AC75911EF979D593BC4F9AE02.roa (hash: oL0maWqOk1WBmFKK+iZrpTSZZSpD3rBTTNKLPVPOQyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3876 (0xf24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919631C, serialNumber=F72E7D5E1BB4542AB7FF777365883C1601034DE9
Validity
Not Before: Dec 22 17:15:40 2025 GMT
Not After : Dec 29 17:15:40 2025 GMT
Subject: CN=69497cbc-cc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:56:34:2c:30:a0:cf:f6:4b:8d:56:bc:8d:e7:
66:ce:64:95:9a:0e:f5:e8:e3:5e:bb:09:ae:70:02:
6e:c4:12:15:2c:f0:23:b2:20:65:8e:9c:79:ad:e9:
7f:ef:94:4a:b2:14:7d:11:b2:5f:3c:19:36:e2:51:
d0:e7:e8:ed:c6:1a:3f:5e:d2:f1:49:54:77:51:a6:
a8:53:97:f1:4a:48:71:af:e9:23:d0:9a:4c:c4:6f:
2a:61:b8:df:6f:79:4c:42:8c:2d:e7:af:0e:b6:94:
e0:2d:8a:42:b1:09:72:ab:92:42:8a:0b:1b:21:4d:
29:5a:50:bb:d2:3d:a3:4f:22:ca:44:4d:ce:db:1e:
ad:ad:15:f8:03:ab:9d:55:0c:8e:b3:c0:bc:97:5f:
11:a4:ec:57:9d:b3:65:f4:8b:cf:db:df:f4:43:ca:
c8:ad:47:29:5a:12:ef:15:62:67:4c:45:8c:81:b3:
d8:4c:1b:cf:df:f2:1f:99:3a:2e:4f:91:35:00:79:
11:3a:0f:bb:a8:cb:6a:bd:65:ed:6a:ce:9e:1a:52:
47:20:2b:eb:77:1b:4d:8d:58:01:83:5a:3e:48:83:
87:ad:69:25:86:67:49:13:d4:af:09:03:9e:99:f8:
b3:27:a7:60:69:7e:50:ce:ab:a4:06:d1:5e:ae:59:
10:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9F:94:02:E3:43:C6:3C:2F:69:1E:EB:B3:0A:53:9B:A8:05:F9:33
X509v3 Authority Key Identifier:
keyid:F7:2E:7D:5E:1B:B4:54:2A:B7:FF:77:73:65:88:3C:16:01:03:4D:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y59Xhu0VCq3_3dzZYg8FgEDTek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919631C/A9C317048C2311E99F845D72C4F9AE02/9y59Xhu0VCq3_3dzZYg8FgEDTek.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:ac:b8:67:c0:00:ef:41:6b:04:f3:fe:dd:e1:c0:93:a7:07:
d4:36:5c:6f:bf:db:60:f3:d9:4d:3f:d1:25:ca:b0:e7:84:b7:
69:d0:59:24:84:28:31:23:38:c6:d5:e9:53:4c:aa:df:b1:76:
0d:d6:c4:0d:44:09:3d:2a:31:7f:00:65:69:32:a1:1a:de:a9:
ac:38:11:0c:76:59:53:61:ea:9a:2a:a2:3f:cb:a5:71:f6:51:
37:03:08:df:c0:8c:7f:57:f2:4c:ec:b3:4b:7e:29:fc:e4:7c:
f7:bf:15:be:cc:94:a2:58:4e:20:6c:3b:8d:5c:f2:6e:55:14:
fc:00:cc:9b:ca:75:3d:75:b4:f8:14:d5:0e:8d:83:49:d2:3d:
71:26:97:f4:69:a3:bf:2c:15:52:13:c7:4c:0c:e5:12:52:7f:
49:c4:8a:22:c0:cf:90:d9:d6:d9:f7:5b:8e:c0:54:68:04:58:
6b:96:79:0c:b7:a1:1e:ae:9d:d8:0f:48:5d:bf:4e:dc:e0:62:
d3:d2:98:b8:6b:ad:10:ac:32:e8:5c:17:4a:05:3a:1e:56:6c:
7a:0c:7f:52:13:e8:3a:f1:fa:71:b1:06:2b:4a:7d:ea:8a:b8:
16:56:38:e6:8a:b7:91:58:8b:bf:b1:5f:b2:c4:51:6d:c6:af:
e6:b7:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:28:56 2025 by rpki-client