This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
File: bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json)
Hash identifier: iX0Do2vDabxfnDzDcIQmJPJ4aMO02X36pFSAsi6OHiA=
Subject key identifier: 06:56:4D:BC:CB:07:EF:6F:28:1F:63:E7:D8:BC:14:69:36:69:1B:BF
Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
Certificate issuer: /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Certificate serial: 02EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
Manifest number: 02E8
Signing time: Sat 06 Dec 2025 23:49:32 +0000
Manifest this update: Sat 06 Dec 2025 23:49:32 +0000
Manifest next update: Sat 13 Dec 2025 23:49:32 +0000
Files and hashes: 1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: bu8Z5D+L6ZGWXwpfcM8dmub5Q4cnQ1Dyz9Hn6aBdbJA=)
2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: tggayaLto8CAWEhkFDTMAXvd1HSZb+GtdD7dZmQyKpM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:49:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748 (0x2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91870B9, serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Validity
Not Before: Dec 6 23:49:32 2025 GMT
Not After : Dec 13 23:49:32 2025 GMT
Subject: CN=6934c10c-f1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:0d:c0:74:1b:39:f8:9c:da:1f:99:0d:37:
d5:b9:37:76:f1:fa:3f:af:05:b4:3b:1e:50:83:92:
93:71:c8:65:28:e9:27:aa:a7:3f:13:48:c3:df:41:
3a:96:72:46:d1:b4:d8:74:0b:05:51:a4:f9:b6:3a:
3f:00:d0:e7:66:88:bd:52:0d:13:44:4d:18:dc:41:
2c:61:2e:a0:04:74:07:2c:34:98:0f:3a:c0:f7:70:
1c:cb:9f:23:bf:61:11:46:89:31:10:ad:91:2e:b8:
64:84:59:a1:ea:a1:59:74:3d:16:04:25:06:48:fc:
e5:65:b8:8a:49:65:e0:3c:49:ef:6a:62:d8:53:46:
b8:06:ca:62:2a:5c:a3:91:14:fa:0a:f7:39:8b:f9:
a6:f9:07:bc:02:5d:64:66:9f:6b:d8:bc:69:79:17:
be:9f:86:6b:40:4e:f6:ff:46:ce:4a:1b:9f:b3:60:
52:6c:e7:23:cc:6d:47:19:02:73:bb:e5:5c:09:7e:
50:3b:45:8b:bd:69:48:48:75:8d:9a:87:e9:d5:8e:
e2:3d:3a:ec:de:96:c4:17:c1:56:81:c9:39:39:c1:
bf:9c:2a:92:3c:39:24:41:42:7b:69:b7:72:50:9b:
de:5f:37:e8:22:38:6d:07:17:7b:4b:fc:b1:9e:50:
cc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:56:4D:BC:CB:07:EF:6F:28:1F:63:E7:D8:BC:14:69:36:69:1B:BF
X509v3 Authority Key Identifier:
keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:4e:97:b8:3b:a4:5f:c3:d3:00:1d:7e:34:0c:7c:10:55:97:
e8:03:44:05:d4:26:d1:f2:54:4a:01:4e:d1:84:fc:d3:54:02:
8a:6d:6e:fd:2c:88:fc:a8:eb:5b:a8:43:32:8f:84:39:0f:94:
40:2b:2b:fd:03:95:3f:5b:ec:13:b9:47:ab:8f:cd:86:c6:35:
3c:60:45:65:c7:6b:42:1a:93:19:5c:ec:ce:7e:b5:c8:10:40:
aa:fd:fa:00:39:a3:52:f9:51:0a:07:c3:c9:e0:e8:4f:5d:10:
84:86:b0:8c:b6:09:24:e4:30:ab:bc:da:d5:ab:34:a0:22:a1:
5c:5a:26:45:51:53:bb:7f:1c:90:21:c4:89:93:bb:ea:6b:9d:
b4:6c:88:04:fa:f6:93:f4:7d:3b:4a:09:74:23:cb:25:6e:69:
37:80:b0:4c:e3:b9:89:54:db:3e:39:f5:13:1f:97:80:61:33:
9e:79:cf:65:0b:57:28:88:f4:a4:e4:d4:48:48:32:2d:44:c6:
18:7f:c2:40:4b:a9:36:d3:e8:a2:cf:14:07:b5:24:7b:97:2d:
a0:e0:0f:4b:5e:ca:2d:73:54:15:22:05:ec:8c:ec:6c:00:5b:
44:28:32:f2:94:0c:2d:d5:f3:a4:10:53:04:be:0e:1a:16:96:
05:75:fc:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:46:29 2025 by rpki-client