This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
File: IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json)
Hash identifier: qlmfai7aQwr+VeBeNHZzSVs9KsxcK+X/mCgCTH1cX1Y=
Subject key identifier: 82:CF:A2:B6:72:E7:F7:18:40:AF:55:3E:62:CF:A5:03:0B:F2:FF:DA
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial: 0712
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
Manifest number: 06DD
Signing time: Sat 06 Dec 2025 21:09:59 +0000
Manifest this update: Sat 06 Dec 2025 21:09:59 +0000
Manifest next update: Sat 13 Dec 2025 21:09:59 +0000
Files and hashes: 1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: QsfBvyg9pkOzAG+B0/yCRECBcg5BtnKd42aj/60YQoA=)
2: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: s8KDuc2GwuTam8uLkRKj65TwjJKxip9pxFU2PqilzJk=)
3: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: uv9fFw+pkg9pgF9/d+q2xTVafbCWlh0YWB4iJUOPl98=)
4: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: PNBgm38gEmoFv4lqFvpAuI8EsQlFaIm9tEIE9Q4A0Q8=)
5: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: eCzZBGM4yO3X43+DBBXORK5pWKKgJ5ykZOExObNr3Lw=)
6: A08AFBB284F211EE89828225C4F9AE02.roa (hash: +rlXfE57KQq96FSve4vj7ymxepa9D4fVPV/TYC7d4nQ=)
7: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: EbkFTiXwUuM4uKc+Le4LDTESLEZ3plcvfpf4GyS68jQ=)
8: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: MaAskf0TRxO3f2o7SBOUwJQzY2TsNLzK4Ofbrs+UHf4=)
9: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: SjDNqIV8bfIECZ7LITLY5GAVFbuQWPpjP+0XRPHjJnM=)
10: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: wn/BM8TotG6wUb8Xjf5M9ZHwY2tRk82b/jlK0HvYDSc=)
11: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: UjSbQygt5LC2l7V88EjIn2A0ZEggmitZY+iL8OvjiZ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1810 (0x712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Validity
Not Before: Dec 6 21:09:59 2025 GMT
Not After : Dec 13 21:09:59 2025 GMT
Subject: CN=69349ba7-5782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5d:d5:6f:5a:73:22:d1:3a:13:a8:df:db:b0:
3e:09:04:2b:86:4b:4c:0f:43:80:9b:04:49:7e:08:
8d:c3:b3:09:44:41:cf:fd:21:40:a9:69:70:af:10:
f6:15:13:20:83:3e:99:df:d9:fc:94:3e:a3:11:8b:
a7:76:1d:45:f9:fc:35:7d:8b:d3:4f:72:fd:29:10:
79:c6:8c:9c:2b:2e:04:1b:da:7c:79:d8:f3:33:4c:
52:af:95:c1:ea:8e:b7:3b:0b:e0:7a:62:90:08:c9:
cd:69:94:2b:5f:85:a5:e5:96:ed:c8:bb:0b:90:dd:
1e:cc:66:76:b9:e7:94:24:eb:6c:43:09:83:67:3e:
4a:f8:c2:a6:14:a1:62:cf:1d:1b:15:2d:66:7a:74:
fa:69:7b:37:37:0a:82:88:f7:2d:ce:28:de:cd:61:
1a:2d:9c:5c:08:67:a6:fb:61:bf:2b:46:07:4f:92:
35:ef:00:0e:17:3a:d5:7d:59:80:a9:ea:b4:d8:96:
14:ce:69:ca:60:03:65:89:23:e6:92:76:bd:11:c9:
9b:1a:f6:12:d0:75:e9:2e:b2:be:fe:22:73:28:49:
a3:4b:ae:02:9e:87:b6:2f:0d:70:4e:41:e0:9a:0c:
2c:c6:c8:32:bc:d3:7e:58:fb:1e:57:39:29:bd:18:
d0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CF:A2:B6:72:E7:F7:18:40:AF:55:3E:62:CF:A5:03:0B:F2:FF:DA
X509v3 Authority Key Identifier:
keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:df:4b:b0:17:76:26:49:f8:2e:b3:24:46:a7:d4:22:22:4b:
40:b3:46:10:91:c4:ea:c0:96:d3:95:07:48:d0:3c:4b:a4:db:
41:1f:fb:b7:d3:d6:12:98:eb:2b:77:27:ed:6f:48:17:7b:81:
bd:b8:70:10:69:a8:d8:07:c6:27:fe:ff:b3:62:6e:a0:0d:dc:
58:12:03:6f:4f:68:47:c1:d5:5a:1a:dd:20:ee:b6:ea:63:f2:
e2:0b:e6:67:b1:bd:56:33:68:af:a0:41:91:a1:cd:fe:e2:e0:
1f:3d:7a:19:bd:93:26:56:99:21:fd:23:8a:33:fe:dc:c7:3a:
0f:db:94:40:88:a5:ff:ba:62:7b:70:14:cf:44:a4:e1:9e:44:
60:07:aa:8c:3a:0e:21:c1:3c:38:ca:21:02:d6:f0:c8:23:2b:
83:6f:0e:fa:2b:dd:ec:9f:0d:a6:7c:7d:fc:1e:e5:66:e4:41:
0a:23:89:4e:4d:dd:64:56:a5:70:dc:9d:3e:59:b0:5d:e9:e6:
1d:ad:94:54:aa:6c:10:5f:08:3f:92:39:c1:54:3a:1d:db:07:
5e:45:c2:75:9f:54:ba:16:04:75:98:e6:b0:cd:bb:c5:27:fb:
59:1b:f5:da:b7:5c:7f:e4:27:c5:cd:fb:d7:ca:68:a7:55:7a:
2d:2d:67:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG
QkNCMDAxMDEwHhcNMjUxMjA2MjEwOTU5WhcNMjUxMjEzMjEwOTU5WjAYMRYwFAYD
VQQDEw02OTM0OWJhNy01NzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6F3Vb1pzItE6E6jf27A+CQQrhktMD0OAmwRJfgiNw7MJREHP/SFAqWlwrxD2
FRMggz6Z39n8lD6jEYundh1F+fw1fYvTT3L9KRB5xoycKy4EG9p8edjzM0xSr5XB
6o63OwvgemKQCMnNaZQrX4Wl5ZbtyLsLkN0ezGZ2ueeUJOtsQwmDZz5K+MKmFKFi
zx0bFS1menT6aXs3NwqCiPctzijezWEaLZxcCGem+2G/K0YHT5I17wAOFzrVfVmA
qeq02JYUzmnKYANliSPmkna9EcmbGvYS0HXpLrK+/iJzKEmjS64Cnoe2Lw1wTkHg
mgwsxsgyvNN+WPseVzkpvRjQTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILPorZy
5/cYQK9VPmLPpQML8v/aMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2
QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDZBQS84NjU4RTQ2Njg2QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3
Z0Y0XzNJcVRtX2o3eXdBUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBe30uwF3YmSfgusyRGp9QiIktAs0YQkcTqwJbTlQdI0DxLpNtBH/u3
09YSmOsrdyftb0gXe4G9uHAQaajYB8Yn/v+zYm6gDdxYEgNvT2hHwdVaGt0g7rbq
Y/LiC+Znsb1WM2ivoEGRoc3+4uAfPXoZvZMmVpkh/SOKM/7cxzoP25RAiKX/umJ7
cBTPRKThnkRgB6qMOg4hwTw4yiEC1vDIIyuDbw76K93snw2mfH38HuVm5EEKI4lO
Td1kVqVw3J0+WbBd6eYdrZRUqmwQXwg/kjnBVDod2wdeRcJ1n1S6FgR1mOawzbvF
J/tZG/Xat1x/5CfFzfvXyminVXotLWfD
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:50 2025 by rpki-client