This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json)
Hash identifier: QwJCOUmmPd18YIDhJY1MG+ZvnaGCSBfRwIAmehC3SBY=
Subject key identifier: 2D:A2:25:DB:CA:40:ED:B0:BE:14:2C:7D:96:86:9F:31:24:9C:3E:35
Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61
Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
Certificate serial: 1103
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
Manifest number: 10FB
Signing time: Sat 06 Dec 2025 16:47:04 +0000
Manifest this update: Sat 06 Dec 2025 16:47:03 +0000
Manifest next update: Sat 13 Dec 2025 16:47:03 +0000
Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: h6o7l2Hfqf09FXaNZJhQaLmA1J/a1J/zgBDmPmBApm8=)
2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: NcGX1+0f22h9EnvK4Hf3V559zCSmDIlERyuyLCtuDE0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl
rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4355 (0x1103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561
Validity
Not Before: Dec 6 16:47:03 2025 GMT
Not After : Dec 13 16:47:03 2025 GMT
Subject: CN=69345e07-415e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:d5:91:97:63:ad:0b:32:38:0e:61:86:cd:
a8:77:af:d4:3d:cd:56:c7:9d:7d:b5:54:1e:49:4d:
b9:03:85:59:72:51:81:2f:33:b3:e7:67:b7:01:f2:
d5:1f:5d:b7:11:21:a8:a7:0b:10:27:72:9f:0b:e8:
da:32:5f:8a:4c:8f:4e:d6:20:63:e3:6a:c4:ef:76:
16:9b:e3:70:53:43:cc:ac:83:59:81:44:5e:8f:91:
11:59:c8:f6:1f:fa:4b:e7:f7:e8:b0:8e:7c:3a:f0:
ab:33:2a:f8:96:c3:3f:c3:6b:2e:21:a3:63:1a:29:
ed:9e:8f:9c:f8:54:b3:23:61:d0:51:10:f7:b2:81:
69:9d:86:13:31:cd:9f:bb:8d:cc:da:df:e2:14:c3:
be:65:14:93:df:8f:4d:35:43:f7:3d:23:93:e2:3d:
bf:1c:a8:d9:c6:8b:4a:b2:cb:1e:1e:a7:d9:4c:3d:
42:95:b3:37:4f:b5:c4:f1:ff:36:bb:e2:43:d1:9e:
5a:cc:83:73:20:c8:b9:3e:d0:57:68:2f:e5:1f:a6:
64:1a:47:36:d6:fe:0c:f5:13:f6:af:14:be:f1:1f:
1c:fe:cd:b5:cd:67:fe:7a:3a:aa:af:db:30:61:13:
da:b6:fc:15:75:33:ab:4c:8b:f7:02:57:21:d3:5e:
9d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A2:25:DB:CA:40:ED:B0:BE:14:2C:7D:96:86:9F:31:24:9C:3E:35
X509v3 Authority Key Identifier:
keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:fd:05:25:50:dd:a6:03:2a:e2:af:8b:db:59:b6:d8:a5:df:
0c:e4:63:0f:2f:9d:80:e8:42:a0:a0:9a:03:47:13:1e:ac:d8:
ae:88:87:ad:9d:db:12:9e:d6:65:ab:c0:8a:8f:96:f2:60:ee:
6a:f8:d0:4a:1b:fc:7d:53:0c:59:4b:c8:0f:b5:bc:b5:54:63:
50:0c:0e:e9:5c:84:92:5b:ab:73:89:3f:68:2a:18:ed:c1:ac:
f7:42:d6:48:39:8a:db:e6:42:87:f4:76:ae:b8:2b:9f:f3:3d:
c8:4e:4d:e0:54:40:25:cc:f4:c4:16:00:a8:54:44:3c:c4:da:
44:05:7e:3a:58:94:21:90:ba:30:1b:12:dc:a2:b4:0e:b3:3f:
d2:ec:0c:99:72:04:52:c1:ef:48:df:b2:0e:9a:c2:2a:bf:c1:
e7:12:a2:28:61:52:86:6a:96:02:2d:cc:f2:a5:ff:17:f2:c8:
0a:bf:cf:9d:b2:c2:36:bc:6b:08:02:1e:59:b4:63:ab:58:a0:
77:10:f7:51:55:5a:fa:03:b1:a8:ce:f2:e0:33:d2:6b:85:51:
7c:ea:5f:91:71:5c:10:41:9d:b6:16:1f:66:3b:b6:61:63:20:
15:1e:e2:61:fb:cc:a8:fd:ee:35:95:cd:42:fc:50:74:0f:7e:
e5:dd:06:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:08:11 2025 by rpki-client