This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft
File: 9jxGQikStFqRhuRFxanep7ujQos.mft (raw, json)
Hash identifier: e8K0k1aI7OZE266iciaz1t+bUYsFj9vTS84Kzx3G4RQ=
Subject key identifier: F9:19:F8:2F:E1:F0:B6:C0:45:FD:48:B4:07:E4:8B:1F:E3:FA:59:5F
Authority key identifier: F6:3C:46:42:29:12:B4:5A:91:86:E4:45:C5:A9:DE:A7:BB:A3:42:8B
Certificate issuer: /CN=A91B6814/serialNumber=F63C46422912B45A9186E445C5A9DEA7BBA3428B
Certificate serial: 43
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft
Manifest number: 32
Signing time: Tue 23 Dec 2025 06:39:16 +0000
Manifest this update: Tue 23 Dec 2025 06:39:15 +0000
Manifest next update: Tue 30 Dec 2025 06:39:15 +0000
Files and hashes: 1: 9jxGQikStFqRhuRFxanep7ujQos.crl (hash: Pgb+Uv8sIwp/XClYwWaEky0YSIYPD9OGXEPDU//exyg=)
2: A2B684F8BA0911F0B073056FC4F9AE02.roa (hash: 2FqlaCiVX3a2ipQmGdcIWBAoDMoVl6GTYc397ABLRMw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.crl
rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6814, serialNumber=F63C46422912B45A9186E445C5A9DEA7BBA3428B
Validity
Not Before: Dec 23 06:39:15 2025 GMT
Not After : Dec 30 06:39:15 2025 GMT
Subject: CN=694a3913-7c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:e8:c8:e9:07:8e:dd:06:3f:69:e6:a1:f1:
f7:c7:9c:c4:01:55:38:d3:13:53:e4:7f:ac:3a:00:
4f:1c:fb:08:72:e1:b3:24:3a:91:f3:1b:f9:56:17:
a3:01:2d:ac:3e:02:81:0a:dd:9e:52:d7:5b:62:47:
6f:cb:c6:38:a8:a1:f1:a2:cd:0e:73:bc:57:91:17:
1e:b1:1b:06:fc:17:19:d8:d8:a6:14:7e:3b:22:8d:
fb:e0:76:d2:91:a6:ac:c7:cb:b4:7a:8c:95:9b:06:
d3:ab:ec:94:07:bc:9e:53:84:a3:f9:aa:1f:fd:c9:
bf:14:35:57:2e:27:52:69:80:ab:68:42:4a:a7:cf:
fc:14:bf:4f:cc:cb:d9:b3:54:fd:db:c8:7f:cf:07:
cb:6f:39:56:0a:ff:dc:4c:46:81:4c:f6:22:63:89:
ba:47:52:f3:a7:05:5d:77:63:b5:68:4d:e8:e7:dc:
09:a4:07:d2:07:3d:e3:a4:d2:ea:c3:1a:08:ac:47:
25:9c:de:73:13:cf:24:5f:3c:3a:3c:83:17:00:c7:
e4:92:b1:61:51:2a:74:5f:72:bf:b6:46:c5:d3:6e:
44:43:76:6d:ff:7d:b5:7b:4d:65:7d:1c:23:83:cf:
7b:91:26:b8:71:d1:be:cb:3d:51:d7:f1:7e:fd:56:
11:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:F8:2F:E1:F0:B6:C0:45:FD:48:B4:07:E4:8B:1F:E3:FA:59:5F
X509v3 Authority Key Identifier:
keyid:F6:3C:46:42:29:12:B4:5A:91:86:E4:45:C5:A9:DE:A7:BB:A3:42:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jxGQikStFqRhuRFxanep7ujQos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6814/0967C798B92411F0BFD5A56EC4F9AE02/9jxGQikStFqRhuRFxanep7ujQos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:7f:77:e9:1c:3d:fc:a3:f4:35:44:39:4f:18:c7:f3:b9:81:
fa:dc:c0:09:bd:55:d5:b3:e5:16:ca:6e:6f:da:79:74:a8:bb:
9c:bf:71:71:ef:bc:8e:26:e6:aa:8b:0a:e1:47:cf:ae:51:de:
98:4f:f6:85:c2:c8:5f:3d:ae:58:d3:09:91:41:f3:3f:b9:5e:
18:96:5d:64:5a:b3:94:73:8a:69:91:24:7e:7b:db:e4:e4:e5:
3a:00:bf:2c:78:a0:df:49:83:2d:7e:85:27:c5:ea:12:b7:be:
54:84:bb:ec:46:11:08:ab:86:bc:02:a4:4e:8f:ab:18:5b:40:
04:69:40:6d:f5:7d:15:2d:5f:0d:b3:12:7d:a4:4b:6c:d9:51:
53:82:67:4c:1d:85:82:c2:01:ae:30:40:90:b9:da:19:06:57:
5a:25:cc:1d:9c:44:85:94:97:62:f2:89:77:f3:b2:47:41:7a:
2b:09:53:09:54:4b:40:a6:33:30:18:77:77:1f:65:34:e9:1c:
eb:77:64:d3:33:a7:58:4e:99:27:ef:2e:46:a0:54:3e:17:46:
3f:3f:7a:bf:fc:f2:01:40:a1:2c:14:aa:f8:ac:36:35:7c:e2:
88:2e:39:83:98:ee:c0:f9:13:db:4d:d2:e3:e5:8a:da:32:f3:
a5:bf:7a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:29:35 2025 by rpki-client