This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
File: bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft (raw, json)
Hash identifier: 9a+KCMGf9iawiGOu/VS+dx1M49AXoelRjF4pJ9D4hlQ=
Subject key identifier: 50:79:3B:90:4F:94:6C:02:B6:94:C3:B4:DB:4D:34:14:F4:1A:79:06
Authority key identifier: 6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
Certificate issuer: /CN=A913695E/serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Certificate serial: 53
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
Manifest number: 53
Signing time: Fri 05 Dec 2025 05:04:41 +0000
Manifest this update: Fri 05 Dec 2025 05:04:40 +0000
Manifest next update: Fri 12 Dec 2025 05:04:40 +0000
Files and hashes: 1: bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl (hash: xRlIlkQwoBZ1WrGIp5ABfJmDGGuJym+dsxotnOH+lw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl
rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913695E, serialNumber=6D84176172580392BA2A325F717B1ECA4F0D8793
Validity
Not Before: Dec 5 05:04:40 2025 GMT
Not After : Dec 12 05:04:40 2025 GMT
Subject: CN=693267e9-73ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:56:9c:8a:3f:5c:15:2b:a6:60:c2:e8:4e:
ec:c9:1b:a0:ab:c5:2a:6d:59:93:f6:8e:da:cb:6f:
73:ef:1e:c4:f6:0d:34:ae:85:a8:67:32:8c:3a:99:
9b:81:c6:43:93:e2:e7:6a:fd:3f:b1:50:07:40:4b:
11:d3:fe:cc:71:d7:7a:f2:0d:47:e4:f8:6b:4d:e8:
ae:8e:95:fa:bf:cd:6c:4b:13:d1:ab:d9:2b:bb:12:
50:e3:15:af:6a:a7:5d:f6:08:8f:8c:ac:2d:da:32:
ad:b5:26:9c:4e:41:63:de:de:9c:cc:d4:bb:32:c4:
03:72:a2:d9:78:2d:3b:ba:8c:11:19:f1:c2:05:a3:
ae:48:08:96:59:bf:38:1e:84:88:dc:3b:d4:e9:a8:
ba:fc:e5:a9:8e:60:47:e9:b8:17:77:46:00:a8:07:
f3:7c:4d:5c:d2:cc:ce:46:15:4f:1a:1c:fc:6a:42:
d3:76:8e:02:c4:d0:64:a9:5e:58:f9:f4:b3:55:b5:
eb:9c:28:98:15:e7:d2:7c:a9:bc:49:b9:81:42:4f:
ec:91:ad:9c:a1:f1:74:4a:f9:37:82:d8:e1:8d:8c:
73:f4:d1:8c:78:31:25:d2:fa:11:00:ee:f4:63:d1:
80:01:ef:d3:ff:48:c3:52:a0:e2:bf:f3:9f:1d:19:
92:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:79:3B:90:4F:94:6C:02:B6:94:C3:B4:DB:4D:34:14:F4:1A:79:06
X509v3 Authority Key Identifier:
keyid:6D:84:17:61:72:58:03:92:BA:2A:32:5F:71:7B:1E:CA:4F:0D:87:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bYQXYXJYA5K6KjJfcXseyk8Nh5M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913695E/F0A1FE52534011F08C869441C4F9AE02/bYQXYXJYA5K6KjJfcXseyk8Nh5M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:27:8e:45:ce:b5:44:14:d5:56:f1:4e:34:af:56:67:ff:a4:
68:26:43:8c:f8:e9:27:4b:7c:6f:12:17:52:52:19:9b:1e:60:
70:34:48:41:61:c7:75:e0:ac:17:0d:64:bd:5c:2c:90:7b:b7:
3c:04:09:51:39:08:9e:60:d2:35:13:e1:36:d0:9a:a9:49:a1:
f8:78:1b:3a:47:d1:68:84:ea:9c:92:65:ff:41:9c:a4:3b:68:
80:9b:b8:b6:f5:6f:ca:c5:b5:09:ae:03:88:57:b0:fd:9f:83:
6f:16:c5:a6:98:13:ee:f0:79:db:77:88:f4:89:d4:b2:63:8c:
2b:d7:60:48:26:82:8f:38:89:68:58:43:c0:e8:e8:63:63:ed:
29:bc:59:3a:8d:5e:a4:d9:37:bc:26:4b:53:1b:30:57:b3:57:
5c:5a:91:05:ca:01:68:b5:89:c0:00:b0:58:9e:06:ec:d1:77:
41:17:d6:2a:a3:cf:48:27:d1:2e:e3:f2:b8:95:5c:cb:6e:05:
2a:99:aa:0d:93:58:90:fe:11:63:ac:93:00:82:21:ec:5f:ad:
95:af:7c:73:0a:fa:b9:bf:36:05:cb:ee:f0:82:47:c2:a5:36:
0f:f0:7a:04:e7:3d:79:10:5f:95:9d:61:8a:b8:ff:45:39:cb:
ac:dd:52:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:06:48 2025 by rpki-client