This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft
File: 9pu293YHOZ_TQrEkyvjejeR_cw8.mft (raw, json)
Hash identifier: jjI2AUwsUcPrmXzSVzZMO9ZXSlcBHY5uG9zHy7BdrAc=
Subject key identifier: 39:7E:74:09:58:99:14:5B:DF:FC:7E:F9:90:B7:CB:E1:92:8B:59:5F
Authority key identifier: F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F
Certificate issuer: /CN=A91CBB1B/serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F
Certificate serial: 0225
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft
Manifest number: 021F
Signing time: Tue 23 Dec 2025 01:12:29 +0000
Manifest this update: Tue 23 Dec 2025 01:12:28 +0000
Manifest next update: Tue 30 Dec 2025 01:12:28 +0000
Files and hashes: 1: 9pu293YHOZ_TQrEkyvjejeR_cw8.crl (hash: ZZ/eS3UwT2rvSB8w892akpJuFPZI13d2E+MpTeMQZzg=)
2: A606B22CA65211EDB3A5967CC4F9AE02.roa (hash: OlmuxEBq0fJDq+ub9McrhDdVwDRZLRD2yDkFBtrKAKM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl
rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:12:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549 (0x225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CBB1B, serialNumber=F69BB6F77607399FD342B124CAF8DE8DE47F730F
Validity
Not Before: Dec 23 01:12:28 2025 GMT
Not After : Dec 30 01:12:28 2025 GMT
Subject: CN=6949ec7d-29ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:b1:6a:03:ee:e3:68:23:1e:f9:57:7d:c7:
41:22:e3:a2:e2:34:0d:64:2d:e8:22:b8:78:52:ed:
88:c4:c5:04:cf:80:72:f9:3e:ce:50:7c:9f:34:d5:
ed:7d:b7:f9:fa:9e:6c:fc:5e:54:0f:dc:83:f4:53:
9a:73:a1:c9:49:21:ec:ca:e6:4f:16:19:79:9f:d9:
fd:61:74:c3:fe:6b:9c:b6:ef:a7:0e:6c:2b:5a:6c:
6c:bf:01:2b:7b:59:d9:bc:e0:37:6d:3e:4a:0e:73:
a3:9b:a5:2e:28:25:0e:d5:79:a1:37:09:9c:fb:39:
49:66:10:2f:56:dc:5c:00:31:b1:ad:b7:7f:32:84:
63:29:e0:1e:bd:d2:17:14:8b:e1:60:1e:8e:28:6a:
3f:ec:f2:aa:7b:55:10:15:64:66:d3:cc:eb:7e:f2:
d6:e0:ec:ee:7b:92:12:2a:6a:82:f5:40:41:1f:a1:
70:7d:4c:4a:89:b1:73:b9:df:47:89:c5:11:5c:e9:
2f:16:22:d2:63:dc:09:f5:77:3b:cc:1a:a4:70:9b:
f9:08:c3:af:76:a2:1e:fa:c2:30:eb:76:8e:a6:1f:
64:6c:29:11:96:11:57:7f:66:03:87:56:86:eb:90:
93:bb:bf:80:44:e4:3a:8e:14:38:dd:3c:21:e1:e9:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7E:74:09:58:99:14:5B:DF:FC:7E:F9:90:B7:CB:E1:92:8B:59:5F
X509v3 Authority Key Identifier:
keyid:F6:9B:B6:F7:76:07:39:9F:D3:42:B1:24:CA:F8:DE:8D:E4:7F:73:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9pu293YHOZ_TQrEkyvjejeR_cw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB1B/2AD13986A64F11ED9802CA76C4F9AE02/9pu293YHOZ_TQrEkyvjejeR_cw8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:27:43:28:73:6d:66:e9:3c:fb:a5:a2:27:89:ad:e1:e2:be:
c3:32:6b:36:12:ac:70:8e:28:76:f9:d7:d0:44:58:f6:5d:91:
c3:ef:bb:e8:23:84:c7:da:49:15:1c:97:06:6b:c3:2a:55:bf:
5d:75:9d:06:ec:48:4c:18:39:f7:45:3a:a7:81:9d:dd:46:0a:
c9:a7:dc:b2:78:64:c3:10:c7:33:9f:a2:78:e5:52:31:bc:88:
a3:3c:61:5c:30:d4:26:2b:87:3e:20:ea:d7:b7:76:20:62:4b:
d4:e1:56:65:04:d6:92:c4:b0:e5:63:43:41:fa:f5:d0:dd:ed:
b3:82:7c:81:74:52:e0:2f:80:fe:98:57:28:90:16:34:38:7f:
11:2b:2b:ca:a7:1d:68:65:2d:8b:e6:78:e4:34:3f:75:01:7c:
99:f8:e2:54:91:a7:f7:7e:63:1e:fc:39:fe:5b:3f:12:eb:a9:
01:e1:25:38:32:3f:5e:45:03:2b:e2:27:8c:8d:04:7c:92:34:
f9:3e:e1:7b:8e:fd:8f:57:a8:34:e2:64:f1:e3:95:d3:46:46:
69:2e:f5:b7:41:dd:0f:df:ac:cf:3a:bf:2a:50:85:5e:7d:ed:
80:14:c8:4a:4c:5f:55:ac:a8:86:f9:e3:2b:e3:eb:09:a2:8d:
f0:ef:a5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:24 2025 by rpki-client