This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
File: -c1w52K-aV9LpJAqoguUD3cKBjg.mft (raw, json)
Hash identifier: gspRYF4EcYYo+xYZr/irkq9AZVxOcdoPRYgByW5THXw=
Subject key identifier: 47:2A:73:2B:F9:45:23:1A:8B:65:C3:67:BE:AE:4B:7E:5B:BD:28:BF
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Certificate issuer: /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial: F6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
Manifest number: F3
Signing time: Tue 23 Dec 2025 04:17:03 +0000
Manifest this update: Tue 23 Dec 2025 04:17:03 +0000
Manifest next update: Tue 30 Dec 2025 04:17:03 +0000
Files and hashes: 1: -c1w52K-aV9LpJAqoguUD3cKBjg.crl (hash: po0YhLatJZ9bJArBJgznbE2sPptTz/uQ6dq/uWMBMIo=)
2: 723EACFE6E8511EF83048D43C4F9AE02.roa (hash: VfxLY1OrzcWvFN2AYE0olIYJUBwCwU7OS82n259ineU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 246 (0xf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Validity
Not Before: Dec 23 04:17:03 2025 GMT
Not After : Dec 30 04:17:03 2025 GMT
Subject: CN=694a17bf-e2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b7:d5:97:80:03:c1:25:0b:b2:6e:e4:66:de:
f1:11:ea:82:8f:4c:16:ef:6f:66:58:5e:d5:39:8a:
4a:c9:9f:8f:01:73:e5:67:44:d7:45:30:a3:85:00:
18:3d:44:db:3d:a8:58:81:72:2f:6a:34:93:29:ab:
bc:aa:a1:64:a9:fb:ec:d0:ee:d4:2d:7e:db:4d:db:
b9:b5:fb:48:7e:69:62:e8:5f:1c:f5:77:2e:6f:80:
3a:86:86:74:f5:2c:37:42:2c:62:a6:4b:c3:14:11:
94:6e:fe:c0:82:b7:22:f4:d9:41:06:c0:56:61:38:
43:4e:e8:40:52:46:b4:c0:40:c4:54:35:3d:4b:e8:
a8:60:d5:36:d5:82:30:26:8f:05:a9:ab:2c:28:c3:
de:b1:4b:4b:b7:ca:a8:af:62:fc:70:67:6c:c2:25:
aa:47:e9:00:c8:95:1d:ba:22:22:36:84:1d:95:61:
45:62:70:0d:d2:a9:1e:d9:65:8c:b3:05:8b:a0:db:
06:da:5b:7a:62:e3:34:35:44:a8:8b:86:b6:06:b4:
b4:4a:aa:7d:e9:41:f5:b4:00:4f:93:95:22:86:59:
f9:82:b8:3d:00:85:bd:a7:66:f6:ed:05:4d:79:7d:
8d:a1:25:9e:6a:2e:dd:00:f6:f8:7e:30:52:ff:91:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2A:73:2B:F9:45:23:1A:8B:65:C3:67:BE:AE:4B:7E:5B:BD:28:BF
X509v3 Authority Key Identifier:
keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c8:18:7d:6f:f4:61:38:e5:71:4d:1d:a0:23:e9:b2:0c:5c:
4a:46:33:9d:77:c0:a7:02:28:e4:0e:c7:9e:4f:c0:b5:13:df:
fb:1a:8b:7e:f0:1c:46:a9:85:d3:9b:91:cb:e0:ad:a8:41:6e:
98:a4:b7:74:40:ca:ce:dc:d9:7d:1f:08:21:fc:d6:16:74:46:
74:11:f6:3a:77:e2:2c:ae:b8:0e:3d:69:d7:28:a6:49:b3:05:
11:02:01:fb:04:a3:b9:23:e3:4c:f4:fd:5d:40:ca:4f:c1:03:
a4:44:9e:c4:ba:8d:70:2d:e9:59:e5:1f:69:af:7d:7b:8c:9b:
32:45:44:c7:c0:7f:d8:75:78:4a:ad:10:1c:5f:95:70:17:f2:
3f:b0:a7:c8:b3:0a:99:b6:a8:82:f9:75:19:94:a5:98:0a:28:
63:ae:ee:16:08:e9:86:e2:22:31:70:01:76:35:87:2d:0c:41:
94:de:8f:6d:0f:cc:90:2d:2b:a4:55:84:b0:40:b0:7e:9f:a8:
99:19:16:67:8c:43:3f:a6:03:e9:dc:4c:38:94:66:c0:b9:4f:
5d:f9:1a:0d:8a:26:a0:29:fe:8d:cd:f9:18:78:db:2e:73:df:
12:ad:a9:d8:0d:b3:79:1f:45:70:3a:97:ae:0d:8d:f2:e2:cd:
a9:2d:21:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:00:06 2025 by rpki-client