This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
File: 989D32D5B62AC9389286C17CA5078BD0066F1E12.mft (raw, json)
Hash identifier: T1evIzfJM4LjOB0YRLefeYqQ/y17pUsyE88HFxVmPK0=
Subject key identifier: F5:DA:32:5A:C5:EC:07:82:17:2C:60:A1:2D:BA:78:E7:E0:E8:84:55
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Certificate issuer: /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial: 383516BF7C841CBBF2A462D1C15C6496CBC2A232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
Manifest number: 0859
Signing time: Tue 23 Dec 2025 15:50:35 +0000
Manifest this update: Tue 23 Dec 2025 15:45:35 +0000
Manifest next update: Wed 24 Dec 2025 18:52:35 +0000
Files and hashes: 1: 989D32D5B62AC9389286C17CA5078BD0066F1E12.crl (hash: vRCbmkxEFw3PXHy0wqETR7KteNnTbKp2Kh1izZUZd+M=)
2: 3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (hash: Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=)
3: 323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (hash: Mm2Q/pLpu7nZeX6YcfUZK6f/DObsvCX5rLONYL2/UAM=)
4: 3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (hash: kuKc/Fzq1k45n+B7QPJtKPHfxv/uauW5SLLyn69G0pE=)
5: 3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (hash: yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=)
6: 323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (hash: WYpwG0m5rYoph5qvV7ozJr+AyGbjlYlNMkCHWXyrbOc=)
7: 323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (hash: qr6zGc4NdTGG5ScRahYWoyNf6IHmCSZEkDUdA2n4VP8=)
8: 323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (hash: d2LNoP5CbqXhXbaEA/3gYrwmjESmuB+Pxer+WLv32Ww=)
9: 323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (hash: xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=)
10: 323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (hash: cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=)
11: 3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (hash: USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 18:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:35:16:bf:7c:84:1c:bb:f2:a4:62:d1:c1:5c:64:96:cb:c2:a2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Validity
Not Before: Dec 23 15:45:35 2025 GMT
Not After : Dec 24 18:52:35 2025 GMT
Subject: CN=F5DA325AC5EC0782172C60A12DBA78E7E0E88455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:72:0d:90:0a:8b:1d:88:d0:06:56:41:49:
90:5c:d4:51:33:68:10:e4:6f:26:66:40:86:70:94:
32:4e:ad:11:ca:08:e4:34:79:68:32:74:c7:46:1c:
ab:1c:27:d8:41:22:47:2a:30:17:1c:34:ff:34:f5:
af:34:94:27:09:8c:1d:0e:04:d7:83:b5:e5:1c:11:
57:86:ac:20:c9:24:75:0e:9f:ff:ed:2f:7c:6b:17:
4a:94:63:2d:8e:0e:fa:86:55:f9:5b:8f:ce:06:bf:
74:12:66:b8:08:d7:bd:59:69:ba:1d:a4:c2:48:6e:
30:ea:6d:78:e4:62:63:90:e1:ce:17:10:87:37:7b:
3d:1a:4a:c5:94:29:ea:e3:c5:3b:fa:17:0b:90:5a:
1e:19:8c:22:9e:d1:14:f6:70:64:35:bd:a1:3f:7c:
69:3c:45:eb:9e:c7:ee:47:2d:85:b1:f4:e6:d0:64:
01:fa:2b:4e:d5:16:aa:fb:ac:03:d8:63:38:9d:a0:
c0:ca:1d:c1:a4:d9:63:6f:d3:09:23:7c:05:d0:90:
01:80:30:db:60:62:c2:2c:fe:80:d9:07:31:54:4c:
8f:f3:2a:a4:b7:ad:99:18:16:6d:e1:a6:88:a2:20:
5d:bd:8b:ae:fa:59:76:cb:4a:c6:ae:43:f9:e6:1e:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DA:32:5A:C5:EC:07:82:17:2C:60:A1:2D:BA:78:E7:E0:E8:84:55
X509v3 Authority Key Identifier:
keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:88:53:b1:f7:07:22:f0:c1:61:c1:b6:91:54:b5:ef:10:45:
88:8e:29:87:15:20:38:2d:5c:04:83:76:19:51:f5:95:ac:06:
f5:2e:3e:c5:de:10:15:12:db:cf:fe:30:e9:95:67:8a:fa:78:
15:52:95:4e:1a:10:c7:63:c9:3b:12:7a:4a:9e:a1:19:31:11:
c5:f6:3d:66:b1:2a:00:2f:e5:e8:b0:ae:9a:78:3b:0b:64:fd:
c6:0a:e3:38:02:44:3b:71:2b:c6:96:c1:47:7d:f9:db:ca:27:
56:83:9c:88:24:5a:a8:40:dd:ed:9c:c8:db:e6:8c:7e:b8:e8:
ca:df:eb:72:cd:d1:76:f5:d5:c2:17:21:79:12:4b:84:a7:60:
5b:2b:dc:99:2d:ff:45:81:4e:57:bb:74:60:d0:35:aa:dc:58:
a1:49:49:bb:6b:18:f1:7b:74:71:6f:27:33:56:f9:61:c5:36:
0b:62:b9:51:ff:b3:f1:fc:49:c2:95:cc:b9:5b:f2:eb:a9:de:
c3:44:29:e1:2f:a6:fb:71:08:7c:14:be:1a:28:26:83:97:eb:
98:21:c1:7f:18:eb:ea:d6:3e:d4:9a:4f:75:90:95:c2:9e:0d:
33:be:91:f7:6e:41:c5:9c:f1:0e:f5:45:10:6d:71:e5:d2:17:
d4:88:04:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 22:43:25 2025 by rpki-client