This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
File: -apja1w-MMegupdDAVtbEhBMt6g.mft (raw, json)
Hash identifier: 6cQKUi/fnnXt2BZjmiGdOgBZapEX3aQdFK6e4x6Ybro=
Subject key identifier: 88:38:86:1B:6E:46:3B:46:F0:0A:52:41:36:86:CD:0C:13:D7:84:32
Authority key identifier: F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
Certificate issuer: /CN=A91EE099/serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
Manifest number: 01C9
Signing time: Mon 15 Dec 2025 02:23:00 +0000
Manifest this update: Mon 15 Dec 2025 02:23:00 +0000
Manifest next update: Mon 22 Dec 2025 02:23:00 +0000
Files and hashes: 1: -apja1w-MMegupdDAVtbEhBMt6g.crl (hash: 6xuZ6CtKKD2MlhfLzeZQV0mKc4XPe/Wn9Gip0xzEtK8=)
2: 89BDDA4A2F6F11EEB73F3231C4F9AE02.roa (hash: uENUjiP+2EB12uAPnRJ5SygdKhfwJZNgp1BeowbLRj4=)
3: F5AA194CB2C911EF91AE9209C4F9AE02.roa (hash: JgtSSjMUVF5aYkq/I11EUTsQN2v/Rr6UwtvaYKzNVvk=)
4: 804FEC802F6711EEB6EECA5BC4F9AE02.roa (hash: XBdp98NfSrH2eLdNGkQsz15bbs9O8Colh/0iTNrP6Zs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Dec 2025 02:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE099, serialNumber=F9AA636B5C3E30C7A0BA9743015B5B12104CB7A8
Validity
Not Before: Dec 15 02:23:00 2025 GMT
Not After : Dec 22 02:23:00 2025 GMT
Subject: CN=693f7104-305c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:da:9a:8e:26:e6:35:17:aa:54:5f:02:3f:
7d:f1:a3:a8:51:13:64:2b:d3:2a:04:4e:54:9e:02:
6f:da:0f:a0:e2:30:6a:06:5e:c2:ca:e7:e3:13:11:
1c:5d:6e:8b:47:67:02:7e:08:e3:ef:6c:76:00:0d:
44:6e:39:35:1f:6a:af:0c:37:f0:63:b8:94:f9:26:
ff:b9:d4:33:99:27:82:78:a0:74:61:ef:51:2d:1c:
81:4a:e8:f6:75:3a:bb:b8:3f:d6:36:cc:40:1d:1f:
ce:87:fe:20:0e:fb:12:82:fb:5a:e5:99:85:c8:0f:
57:da:cf:11:f0:23:bf:c1:7a:26:e9:61:c1:15:8c:
e6:3c:79:cc:f8:b9:10:d5:d2:de:14:12:ff:e0:7a:
e2:57:4d:0e:14:ad:eb:7d:e4:17:ac:cd:03:d9:d3:
22:ad:7b:c1:1a:a5:81:f5:c4:18:ba:07:24:93:72:
db:35:b6:97:2b:95:aa:7d:5b:db:56:19:68:8c:54:
40:ff:b4:ed:ff:23:a8:47:f6:3b:eb:ce:09:2d:20:
96:0c:6f:18:6c:e3:80:66:c6:9a:ca:25:36:1b:6d:
f7:4a:71:5c:68:44:8c:40:54:e3:f3:da:c3:80:f4:
bb:ce:e7:3d:2f:f8:12:98:e3:72:42:14:d3:ca:32:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:38:86:1B:6E:46:3B:46:F0:0A:52:41:36:86:CD:0C:13:D7:84:32
X509v3 Authority Key Identifier:
keyid:F9:AA:63:6B:5C:3E:30:C7:A0:BA:97:43:01:5B:5B:12:10:4C:B7:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-apja1w-MMegupdDAVtbEhBMt6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE099/0221D7CE2F6711EE824ADC59C4F9AE02/-apja1w-MMegupdDAVtbEhBMt6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f2:21:e7:82:ba:e6:d5:5c:f4:d0:23:0a:a5:4a:cb:64:95:
41:45:25:47:12:c4:db:45:fb:6c:2f:6b:82:3b:55:fc:6b:e6:
84:15:3d:89:90:cc:9a:40:d2:d5:16:ad:16:fa:c2:a1:db:31:
28:51:b3:91:2d:9f:44:14:b3:53:39:cf:8d:10:48:49:9c:4e:
15:23:3c:e4:86:4e:e4:e6:54:cb:c9:d2:3a:a1:40:bc:0d:be:
67:b4:9c:bb:39:ad:75:57:d8:28:8d:da:d5:ef:a6:b4:09:00:
3c:f0:62:60:ee:51:ff:41:6a:f6:29:e6:96:26:85:2f:1f:6d:
1b:40:fa:4d:a5:58:25:c4:59:3b:38:b4:fd:e8:df:6e:f8:f7:
a0:fc:62:d9:e5:bc:7e:4a:18:79:4a:b7:f7:9f:0f:0c:af:af:
21:47:bd:db:40:3d:23:4d:08:07:74:24:63:f5:69:dd:de:4b:
14:c3:67:c2:fa:6f:e2:a1:ef:f3:a9:ed:2e:1e:3e:85:49:2e:
1b:ad:46:d2:81:c2:c2:59:c4:a1:22:0f:36:5a:15:73:b7:57:
d0:9e:d5:df:ab:66:e7:73:3a:ef:bb:e3:a3:8c:48:c4:80:46:
16:0c:d2:6c:cc:62:26:dc:cd:6c:6d:e6:fc:4c:50:f0:18:c7:
53:71:a2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 10:40:20 2025 by rpki-client