This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
File: xv9_8XAyqWoLIW8LwszDXwIgwnI.mft (raw, json)
Hash identifier: FA/xOtgGCh0z4OmSeTtZtui025lTN/sSqnO1AK1E9kk=
Subject key identifier: 24:CF:1D:51:CD:C6:0E:8C:5D:0C:C6:6E:15:35:75:AE:C3:82:0B:34
Authority key identifier: C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
Certificate issuer: /CN=A91B7929/serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Certificate serial: 0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
Manifest number: 0E
Signing time: Tue 23 Dec 2025 06:51:50 +0000
Manifest this update: Tue 23 Dec 2025 06:51:49 +0000
Manifest next update: Tue 30 Dec 2025 06:51:49 +0000
Files and hashes: 1: xv9_8XAyqWoLIW8LwszDXwIgwnI.crl (hash: ZTEnUo9iSAcdhbUfF9/GXFHOjU+PRvSBraoC5cxugQg=)
2: 8709BBD4DB2011F0B6C890B887D3641D.roa (hash: 2W5ZVPIw3ewF45gJcZZK6fFAiCn6TPFyHTrg1IlJBvc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7929, serialNumber=C6FF7FF17032A96A0B216F0BC2CCC35F0220C272
Validity
Not Before: Dec 23 06:51:49 2025 GMT
Not After : Dec 30 06:51:49 2025 GMT
Subject: CN=694a3c06-0d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:b4:ae:07:75:c0:75:a1:ef:2c:b1:57:0c:
67:fc:56:99:a5:f1:eb:55:4d:f5:31:97:d7:68:60:
df:d2:d5:68:dd:55:b4:d6:52:5a:6b:f5:bf:52:cf:
ba:a5:c4:15:e9:b2:cd:ad:6b:ae:1f:19:cb:a6:00:
c9:79:02:35:19:ab:53:0a:91:cb:ba:b9:90:68:42:
44:ac:1a:a9:67:08:46:4e:f3:0d:f6:5e:22:c5:e1:
c0:c2:3a:7a:1d:56:c7:95:be:d7:7d:f9:3c:bb:18:
3e:d4:fa:93:c4:78:4f:25:5c:d2:fa:55:48:32:15:
5e:4e:88:79:29:46:a5:7f:26:50:d6:66:97:0c:08:
d2:52:f9:59:94:a4:d3:4c:af:e1:d8:db:55:33:e8:
96:f6:bb:a7:36:1d:59:1a:55:7c:31:42:6c:11:1f:
01:b7:00:a9:56:e8:57:2c:ff:25:02:fe:1c:ab:3f:
05:d9:d0:5d:ee:43:ac:fc:88:5d:96:11:5d:54:d7:
a9:6d:67:1e:6c:5e:34:45:45:5c:b1:40:68:61:5c:
d1:a8:70:a9:17:8a:55:2b:36:fe:a7:70:42:31:38:
28:77:66:34:6c:aa:42:10:1a:f6:1f:19:0f:0e:e3:
36:31:38:a3:2d:74:15:e1:71:0b:c4:9e:db:2b:b9:
d7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CF:1D:51:CD:C6:0E:8C:5D:0C:C6:6E:15:35:75:AE:C3:82:0B:34
X509v3 Authority Key Identifier:
keyid:C6:FF:7F:F1:70:32:A9:6A:0B:21:6F:0B:C2:CC:C3:5F:02:20:C2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xv9_8XAyqWoLIW8LwszDXwIgwnI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7929/C4474854CE7311F08CF82214C4F9AE02/xv9_8XAyqWoLIW8LwszDXwIgwnI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:3a:85:b8:a9:95:53:18:06:c1:6f:d0:5f:66:eb:cf:88:eb:
8c:87:7e:8e:5d:1e:be:18:a0:d7:6e:47:27:98:42:79:da:84:
07:5e:91:4f:1f:e2:a1:35:f8:b8:2b:60:8b:67:6a:e8:ac:ad:
45:6d:f1:bb:7a:63:44:34:93:49:55:fc:20:37:fb:d1:ee:65:
14:0b:99:e9:4f:84:75:f5:1c:d3:c3:22:b4:93:11:dc:74:43:
f5:18:0b:4d:ee:2f:c7:67:51:4d:39:00:c5:0a:b8:82:9f:14:
ee:f0:26:ff:cd:6c:45:06:c3:ac:a1:2c:0c:22:15:d1:b6:c3:
85:73:7e:4b:d0:f6:36:77:4e:ea:dc:a7:6e:6c:14:8e:e4:3c:
35:41:b5:96:16:03:4f:90:55:05:c6:0c:4d:cc:8a:b3:5f:de:
15:dd:f4:2d:a4:0d:a9:39:7a:2d:3c:f8:b4:98:d6:df:a1:d5:
a8:75:76:58:23:d3:67:95:a4:ab:21:1e:30:cb:53:ca:4b:72:
84:04:aa:9f:ab:77:8b:14:76:7e:9d:b5:2c:be:34:fb:34:3f:
77:41:b2:fc:59:d5:83:71:8b:49:7d:74:f1:97:92:44:d2:6e:
b9:a5:9f:03:2d:f2:3b:e8:04:a0:00:60:f4:51:6c:56:bb:4e:
ce:d8:b9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:04:59 2025 by rpki-client