This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
File: t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json)
Hash identifier: Td7X+s8zSB1s9FUxan/9e20i/bt33Z8EE5TnW1s45Ys=
Subject key identifier: CA:5B:E4:E7:51:A2:50:AA:B9:1F:12:C9:76:EF:5C:C8:56:B2:B3:E4
Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
Certificate issuer: /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Certificate serial: 0998
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
Manifest number: 0992
Signing time: Mon 22 Dec 2025 19:25:57 +0000
Manifest this update: Mon 22 Dec 2025 19:25:57 +0000
Manifest next update: Mon 29 Dec 2025 19:25:57 +0000
Files and hashes: 1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: D3e0F908QXZcf14MqRYPJySS/sKwfQti/TOaOgIu6Do=)
2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: CHvHnzrsNRtyF0f1bsjGZNNk/7bOq09fS+B9V5tsdBI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 19:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2456 (0x998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06
Validity
Not Before: Dec 22 19:25:57 2025 GMT
Not After : Dec 29 19:25:57 2025 GMT
Subject: CN=69499b45-14a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:66:0a:8f:00:b9:ca:35:97:c3:f3:a6:81:
45:60:d6:62:85:d8:53:ac:e3:5d:3f:96:09:7c:dd:
35:37:24:b5:b2:3e:d7:7e:d8:ee:1e:ee:ae:00:56:
f6:a4:60:dd:15:ed:c6:03:8d:60:8f:c9:a7:3a:82:
43:87:39:f6:65:2c:5a:73:96:7b:92:7d:6b:d7:a1:
84:b7:46:a4:cc:60:50:a1:65:5f:cc:3c:70:f3:d0:
8a:2e:4c:49:e4:83:3f:68:81:69:50:18:a5:8b:3c:
e3:72:0c:a4:4d:6c:89:4f:ad:db:d8:11:66:b3:b6:
79:da:bb:c6:1f:d5:d0:46:ef:a3:f7:0a:b2:b2:ec:
fc:f0:aa:3c:fd:40:33:de:bb:84:c8:d4:62:fd:85:
6a:7f:f5:e5:40:88:79:83:36:d6:fc:18:7f:ee:f7:
e0:b1:57:da:74:71:87:30:cf:31:b2:b7:0b:21:56:
a3:e7:dd:24:bc:d0:cd:a8:a1:2a:68:43:ac:88:7b:
9f:8c:3b:7f:3e:e0:f9:a3:34:1e:1b:1d:f8:64:9a:
65:a4:e1:c7:a6:14:08:8c:be:47:07:9c:b0:ea:4a:
1f:0f:ee:8a:a5:94:5e:01:49:01:f6:56:a5:ea:ab:
c3:73:5f:95:d9:db:f1:ca:91:33:2e:19:0f:fb:2d:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5B:E4:E7:51:A2:50:AA:B9:1F:12:C9:76:EF:5C:C8:56:B2:B3:E4
X509v3 Authority Key Identifier:
keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:b1:82:c3:a4:73:82:99:24:e4:46:27:fd:27:bd:f7:95:15:
24:45:44:49:07:fb:db:40:a4:9b:46:80:f3:88:d0:39:1b:65:
12:02:a8:ac:d2:01:23:b1:1a:f7:b7:b1:31:2d:59:82:fa:89:
76:eb:66:7a:7e:b7:6d:73:21:25:18:e0:d2:60:7c:77:d3:cb:
e5:88:31:86:fb:c5:7f:0b:b8:aa:29:68:63:bd:2d:92:b3:4f:
d3:4c:e4:e8:68:c2:9d:be:7b:cb:9e:8e:57:61:92:5d:2a:49:
15:72:35:89:db:2b:2b:40:e8:fb:a8:16:f4:21:c0:11:33:85:
3e:73:b5:e3:c2:e6:70:68:2b:5b:43:5d:8b:36:5c:54:de:5d:
00:3a:4a:d2:3d:86:8a:73:fa:f0:70:ab:ee:9e:7a:d1:f7:0a:
56:be:a5:f0:f4:43:db:4a:9e:6e:6b:a3:2a:c2:a4:4e:31:be:
5d:66:48:80:70:5b:19:f2:86:4c:7d:39:e6:1b:fa:ba:57:00:
45:ef:40:40:07:2b:b4:a8:8d:6d:37:32:f0:72:71:ba:06:81:
6d:5b:98:39:cb:c2:bc:c5:5a:37:ef:e8:ba:14:f3:04:f2:5b:
ac:ba:25:bd:c3:ca:4a:29:45:11:ce:e5:e6:32:19:8a:23:c1:
a1:ae:d6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 17:35:01 2025 by rpki-client