This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft
File: 9TjVlahlU-nmlHrF6Pz8y8namyE.mft (raw, json)
Hash identifier: G/FzGwOEtVsJoBQvlkEzyiHrMCFIXC7BNjcl53+KVZw=
Subject key identifier: 8A:01:73:02:BD:21:D7:FD:66:A7:78:C7:BE:4B:17:DB:13:CE:05:4F
Authority key identifier: F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21
Certificate issuer: /CN=A91EA115/serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21
Certificate serial: 34EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft
Manifest number: 34EE
Signing time: Wed 24 Dec 2025 14:26:21 +0000
Manifest this update: Wed 24 Dec 2025 14:26:20 +0000
Manifest next update: Wed 31 Dec 2025 14:26:20 +0000
Files and hashes: 1: 9TjVlahlU-nmlHrF6Pz8y8namyE.crl (hash: OjM4G9Z1Y/cVys+csc7UaCRfhB8rRc7z6ynJrX6I7Wc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl
rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 14:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13551 (0x34ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA115, serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21
Validity
Not Before: Dec 24 14:26:20 2025 GMT
Not After : Dec 31 14:26:20 2025 GMT
Subject: CN=694bf80d-e4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:15:3d:45:79:a3:a3:ae:63:03:ac:85:c3:
ac:71:ad:12:fe:9f:07:84:24:4e:96:b3:db:7b:c8:
48:56:7f:fd:db:2c:a5:f0:c5:ad:b0:94:e6:1d:5d:
d6:4d:6f:0c:22:3f:1e:ce:f8:a6:dd:5d:f0:23:83:
d3:af:52:f5:07:e4:7f:87:71:75:dd:31:6e:de:2b:
49:f1:93:0e:09:51:93:a4:1a:f5:4c:e3:4b:e7:6e:
6c:6f:1c:62:dc:61:47:ce:eb:71:e7:b7:c1:6e:03:
22:49:dd:68:6f:db:69:08:48:e7:08:0e:97:ba:24:
cf:41:58:b3:c2:37:10:fd:f2:9e:85:43:01:96:d1:
db:cc:d5:c0:0d:47:23:2b:d9:b1:62:73:e2:fa:65:
2f:cc:b3:70:a5:dd:d5:1c:39:dd:d8:22:a5:8b:59:
0f:a8:55:a2:4b:61:1b:10:92:7c:58:b3:a2:d8:fe:
f6:26:67:ee:a4:32:50:a0:29:4a:cd:00:6a:83:78:
de:d8:26:57:ff:0c:d8:2f:4e:4a:17:ae:b3:3b:d3:
fc:aa:54:7d:6e:d6:52:2c:57:5b:7f:12:91:3a:0d:
c2:41:8a:75:fd:2e:6f:d1:56:04:6d:30:80:a7:fa:
da:8c:5f:8b:60:0d:16:85:4d:fb:e1:e3:b7:14:08:
eb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:01:73:02:BD:21:D7:FD:66:A7:78:C7:BE:4B:17:DB:13:CE:05:4F
X509v3 Authority Key Identifier:
keyid:F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:d3:9b:e9:8e:e2:db:43:18:a8:85:29:bb:0b:d9:4f:6c:c8:
33:68:69:57:22:43:0d:f4:45:36:fe:1d:be:5f:aa:a3:a4:f6:
2b:12:c4:98:fe:91:75:0e:c7:d4:c0:54:44:b4:82:8c:cf:26:
ba:2d:55:4f:1a:e4:9c:d4:1c:8b:b8:52:bb:f5:13:d8:a2:bf:
d7:04:38:5b:c5:09:1e:4c:ab:91:e9:62:d2:5f:2f:40:62:03:
69:04:90:2b:5a:f6:96:ff:fb:0b:ee:8c:b8:a7:1b:23:55:2d:
01:53:54:a4:12:38:ac:e8:59:45:c7:a8:35:7a:31:33:0c:95:
7a:f9:c8:de:6d:fa:35:86:85:64:69:a5:39:d6:28:9d:69:6a:
ce:93:ee:37:4c:8d:8e:c2:4c:22:cc:32:2f:3e:54:e1:54:3d:
a5:18:ae:49:14:13:56:26:f9:58:0b:5d:b3:db:58:5b:09:7e:
82:7c:ca:3e:39:e6:5d:53:75:c9:27:e8:be:db:f4:ed:d1:1d:
3d:fd:0c:9e:fc:b4:f0:9b:96:63:04:50:62:ed:39:f4:94:30:
eb:ef:8c:d7:86:32:9b:59:e7:03:e9:d4:08:62:a9:50:37:d9:
41:95:69:fd:0c:3a:a0:18:6f:15:b0:83:24:1c:ae:16:02:cd:
c3:1c:7e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:23:55 2025 by rpki-client