This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json)
Hash identifier: gAFp/hg+XhWlqc5hjD6BsD5ddoua84Brj/UaAstmOB0=
Subject key identifier: 84:9F:80:9F:A0:1D:AF:F8:72:F7:D4:9D:DD:C6:F7:1F:78:C6:27:6F
Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Certificate serial: 03D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
Manifest number: 03C9
Signing time: Mon 22 Dec 2025 23:39:47 +0000
Manifest this update: Mon 22 Dec 2025 23:39:46 +0000
Manifest next update: Mon 29 Dec 2025 23:39:46 +0000
Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: yhPopvBovBCYLy33876ZL1PfHFX9Her+jULP2D2kDkI=)
2: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: rNtzGSiDY85AOdHWF1WEqXphhPwCBrWlPSRqHgAFmu0=)
3: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: t8VvneVUYRJgPgj481YthbBCTMCZ/uaBbHMKrlXT7S0=)
4: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: +FxqoXH/7KKQFGXsUL0/yNpB7+vOLI4FjqU3Tid4D+U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Validity
Not Before: Dec 22 23:39:46 2025 GMT
Not After : Dec 29 23:39:46 2025 GMT
Subject: CN=6949d6c2-d1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:94:91:32:e7:fb:94:f7:f4:dd:af:af:16:
68:50:a7:2d:0a:47:8b:9b:35:eb:07:41:d1:e6:6d:
0e:71:4e:a8:73:45:9b:3b:e4:76:e2:9e:c3:07:6d:
0c:c8:ed:b1:55:33:55:1b:35:9f:4d:bb:c1:d9:19:
55:56:c3:9f:b8:d4:a5:c8:89:ea:6e:d4:5b:df:c8:
a6:c1:f3:c7:22:60:64:96:f5:df:65:c5:ee:8c:4d:
f4:29:aa:4c:99:bd:5b:81:78:7c:dc:23:a2:1f:6c:
f0:ae:7f:52:21:8f:b1:79:56:de:f4:d1:79:61:03:
3e:4c:99:ac:a1:5a:0d:6c:e8:99:04:78:bc:02:de:
3d:c4:aa:3a:76:bd:73:06:ee:6f:27:0d:ca:67:d8:
bf:4d:4a:66:d0:8c:84:87:3e:13:87:5d:e9:49:f7:
80:52:30:87:8f:92:83:dc:4b:4f:cf:18:85:27:47:
b9:96:25:6e:c2:fb:46:a8:96:bc:a3:ed:ea:af:2c:
5f:3f:ac:54:4e:83:3d:99:62:8e:d4:12:06:a9:a8:
1a:5d:3c:04:1d:fa:62:28:ed:8a:f8:49:17:52:dc:
36:89:2b:c4:ae:71:64:44:f7:26:d6:0c:bd:fc:ea:
ea:28:cd:e0:be:bd:8c:e5:40:71:c1:b6:01:24:7c:
1a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:80:9F:A0:1D:AF:F8:72:F7:D4:9D:DD:C6:F7:1F:78:C6:27:6F
X509v3 Authority Key Identifier:
keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:56:69:74:d7:3f:77:b8:cc:8a:30:67:3b:92:59:d5:6e:8b:
15:cc:d0:26:28:ff:9e:46:53:a2:1a:33:50:b4:6c:31:18:99:
3d:57:46:a4:bc:f2:ee:6b:18:9f:b2:d4:07:96:0e:44:28:41:
6a:86:1e:ab:35:d2:b2:48:b1:dd:60:98:3b:ec:c6:85:4a:d3:
2d:66:10:65:6f:e5:34:cf:58:2b:eb:b4:54:ae:be:6e:ed:da:
4a:84:62:25:ad:f1:08:f7:7a:9d:b6:7b:e7:eb:6c:6c:51:8c:
a4:91:6f:07:a7:51:f3:e1:6e:d8:82:a4:7b:82:6c:3a:b9:24:
eb:35:78:b5:79:a6:8d:1f:0e:42:b8:37:8f:75:aa:82:23:d5:
2f:42:64:bb:56:5c:b6:d3:a5:04:3d:08:61:15:9f:ea:4c:65:
40:87:f2:37:e4:ad:fb:44:b4:bc:aa:fc:b5:d9:c4:c2:e9:1a:
87:9d:51:34:9c:5c:7b:eb:19:66:9e:f6:d4:5a:3c:cf:02:82:
9e:86:4f:44:67:e2:70:f6:24:59:cb:6a:4c:26:c5:e0:70:8a:
2d:cf:9a:f0:a2:10:e8:fb:be:da:5d:15:68:a4:8a:e1:da:52:
47:c7:ff:9b:91:74:02:3a:58:59:3e:d9:5f:12:f4:64:8f:46:
fe:77:23:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE
NzA1OEZERDUwHhcNMjUxMjIyMjMzOTQ2WhcNMjUxMjI5MjMzOTQ2WjAYMRYwFAYD
VQQDDA02OTQ5ZDZjMi1kMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAorqUkTLn+5T39N2vrxZoUKctCkeLmzXrB0HR5m0OcU6oc0WbO+R24p7DB20M
yO2xVTNVGzWfTbvB2RlVVsOfuNSlyInqbtRb38imwfPHImBklvXfZcXujE30KapM
mb1bgXh83COiH2zwrn9SIY+xeVbe9NF5YQM+TJmsoVoNbOiZBHi8At49xKo6dr1z
Bu5vJw3KZ9i/TUpm0IyEhz4Th13pSfeAUjCHj5KD3EtPzxiFJ0e5liVuwvtGqJa8
o+3qryxfP6xUToM9mWKO1BIGqagaXTwEHfpiKO2K+EkXUtw2iSvErnFkRPcm1gy9
/OrqKM3gvr2M5UBxwbYBJHwa3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISfgJ+g
Ha/4cvfUnd3G9x94xidvMB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy
RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf
ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS
NUJ6eWJiR0NJZEhYQllfZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlVml01z93uMyKMGc7klnVbosVzNAmKP+eRlOiGjNQtGwxGJk9V0ak
vPLuaxifstQHlg5EKEFqhh6rNdKySLHdYJg77MaFStMtZhBlb+U0z1gr67RUrr5u
7dpKhGIlrfEI93qdtnvn62xsUYykkW8Hp1Hz4W7YgqR7gmw6uSTrNXi1eaaNHw5C
uDePdaqCI9UvQmS7Vly206UEPQhhFZ/qTGVAh/I35K37RLS8qvy12cTC6RqHnVE0
nFx76xlmnvbUWjzPAoKehk9EZ+Jw9iRZy2pMJsXgcIotz5rwohDo+77aXRVopIrh
2lJHx/+bkXQCOlhZPtlfEvRkj0b+dyNT
-----END CERTIFICATE-----
Generated at Tue Dec 23 12:53:43 2025 by rpki-client