This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
File: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft (raw, json)
Hash identifier: Z0AO7PUPdbvMQzE9rwrDK87QRRQIvQhw+fomHqilt2U=
Subject key identifier: D4:94:04:7B:35:13:96:32:E7:2E:21:82:2F:50:DB:D2:4A:B2:78:0A
Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34
Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
Certificate serial: 0C35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
Manifest number: 0C2D
Signing time: Sat 06 Dec 2025 18:03:18 +0000
Manifest this update: Sat 06 Dec 2025 18:03:17 +0000
Manifest next update: Sat 13 Dec 2025 18:03:17 +0000
Files and hashes: 1: FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl (hash: MH+zbnmKdJ5Ihggs7BZo09V+TD5R9/85Jzvl4OjEkuY=)
2: 776893761C9F11EAB9B84F25C4F9AE02.roa (hash: ndXUBxQ/xEOvoRO3r6r5850s+ooSM85HQb25AiLL8T0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl
rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3125 (0xc35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8259, serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
Validity
Not Before: Dec 6 18:03:17 2025 GMT
Not After : Dec 13 18:03:17 2025 GMT
Subject: CN=69346fe5-ed00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:89:b0:03:15:2a:0d:b8:a1:4f:e5:4d:42:
8e:f7:1b:0b:ad:f4:fc:85:1e:6a:bd:5c:70:71:db:
c0:a7:25:44:e1:4e:fa:4b:01:00:82:7b:e2:34:91:
ae:63:38:6c:0c:bd:cc:e7:de:d2:22:e4:a9:cb:a1:
d5:ec:fb:35:17:4b:73:76:4e:b6:35:4e:b8:d0:29:
2a:12:d5:ec:e3:c8:22:49:7d:47:f2:e2:e0:c7:a2:
c8:a6:3d:f5:fa:bc:83:c5:d8:8e:de:1e:65:bc:f0:
06:51:fc:2a:7d:b9:c4:fd:71:2d:42:e7:26:7a:cb:
6e:4a:64:14:6f:c5:bc:93:51:08:86:95:0c:8d:71:
49:2f:91:20:5b:52:fd:80:4c:2b:32:21:a4:ed:04:
e3:13:b0:44:f6:5f:88:75:c1:1b:be:8c:d7:81:fa:
06:52:b1:a0:7a:4e:63:87:62:46:a5:a9:5c:fb:b3:
57:62:20:19:38:e7:b4:8c:fd:1e:ae:95:be:b8:23:
e3:a3:14:ae:b8:40:bd:21:d4:82:04:fa:6e:dd:6c:
92:3f:4c:5d:43:2c:8f:23:69:ff:38:fe:03:c6:c0:
68:2b:66:3d:62:fe:e0:7a:e3:a4:76:8c:66:12:5d:
71:56:bd:d9:28:c7:6c:37:91:d2:05:64:26:60:16:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:94:04:7B:35:13:96:32:E7:2E:21:82:2F:50:DB:D2:4A:B2:78:0A
X509v3 Authority Key Identifier:
keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:fe:e4:75:ae:69:18:df:3a:1f:7e:51:a0:4b:7d:43:e9:ce:
ba:95:c6:45:1e:6c:f9:88:5d:dd:6d:ec:41:80:a7:bc:ef:ec:
ce:9e:0b:42:56:56:e9:7d:38:82:f7:40:d8:d1:b7:4f:a8:01:
eb:fe:a6:70:a8:42:4f:77:12:c2:28:90:25:41:db:24:a7:1c:
0b:d3:63:2f:03:de:91:64:84:79:fc:12:dd:74:d6:0b:82:fe:
1f:5d:32:9c:4a:d0:5e:f8:a2:cc:06:43:3e:1c:fe:dc:7c:a2:
eb:3f:e7:8c:9f:f6:9a:1b:92:47:9e:74:d8:2b:03:94:26:5d:
5e:cc:5a:04:fb:79:ca:39:18:7f:cd:c1:c0:a7:a0:59:44:82:
bf:3a:70:07:2c:15:3d:0d:81:2f:d3:f0:de:62:9b:22:bd:67:
9d:01:64:a8:7f:9f:ea:4f:a1:72:a8:e2:2d:9f:03:e8:2d:e4:
a5:84:29:19:09:4a:c6:31:91:50:7a:65:a9:5f:96:97:3e:30:
48:1d:b1:98:64:41:16:92:6d:dd:f5:e5:8e:1e:9a:5a:fc:93:
02:50:10:cf:96:09:61:a0:5c:db:84:c0:35:10:a8:42:12:aa:
84:8c:55:dc:f7:5b:97:7d:c5:a3:32:d3:0e:bb:8d:63:ec:62:
a9:53:c8:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTgyNTkxMTAvBgNVBAUTKDE1OEZCM0VGRUU4RUY2RkI5QTVBN0M0RTQ5QTM4QzlE
NjlCQzJGMzQwHhcNMjUxMjA2MTgwMzE3WhcNMjUxMjEzMTgwMzE3WjAYMRYwFAYD
VQQDEw02OTM0NmZlNS1lZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqhSJsAMVKg24oU/lTUKO9xsLrfT8hR5qvVxwcdvApyVE4U76SwEAgnviNJGu
YzhsDL3M597SIuSpy6HV7Ps1F0tzdk62NU640CkqEtXs48giSX1H8uLgx6LIpj31
+ryDxdiO3h5lvPAGUfwqfbnE/XEtQucmestuSmQUb8W8k1EIhpUMjXFJL5EgW1L9
gEwrMiGk7QTjE7BE9l+IdcEbvozXgfoGUrGgek5jh2JGpalc+7NXYiAZOOe0jP0e
rpW+uCPjoxSuuEC9IdSCBPpu3WySP0xdQyyPI2n/OP4DxsBoK2Y9Yv7geuOkdoxm
El1xVr3ZKMdsN5HSBWQmYBbdAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSUBHs1
E5Yy5y4hgi9Q29JKsngKMB8GA1UdIwQYMBaAFBWPs+/ujvb7mlp8TkmjjJ1pvC80
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODI1OS81MUJCNjI1QzFD
OUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2dWFXbnhPU2FPTW5XbThM
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZZLXo3LTZPOXZ1YVdueE9TYU9NbldtOEx6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODI1OS81MUJCNjI1QzFDOUExMUVBQUIxOEZDMTZDNEY5QUUwMi9GWS16Ny02Tzl2
dWFXbnhPU2FPTW5XbThMelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCE/uR1rmkY3zofflGgS31D6c66lcZFHmz5iF3dbexBgKe87+zOngtC
VlbpfTiC90DY0bdPqAHr/qZwqEJPdxLCKJAlQdskpxwL02MvA96RZIR5/BLddNYL
gv4fXTKcStBe+KLMBkM+HP7cfKLrP+eMn/aaG5JHnnTYKwOUJl1ezFoE+3nKORh/
zcHAp6BZRIK/OnAHLBU9DYEv0/DeYpsivWedAWSof5/qT6FyqOItnwPoLeSlhCkZ
CUrGMZFQemWpX5aXPjBIHbGYZEEWkm3d9eWOHppa/JMCUBDPlglhoFzbhMA1EKhC
EqqEjFXc91uXfcWjMtMOu41j7GKpU8hv
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:07:34 2025 by rpki-client