This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft
File: 07yEKALa0i1cMMKCZffRCL1HjnA.mft (raw, json)
Hash identifier: 0ocNQSvHHyUa8rHxDIEO+CcxGCXp+8a1dSI/sn5C/4o=
Subject key identifier: E8:F2:C0:45:02:19:FA:45:D8:F4:19:47:1F:B8:BB:18:E4:4B:26:BD
Authority key identifier: D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70
Certificate issuer: /CN=A91B758E/serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft
Manifest number: 014F
Signing time: Fri 05 Dec 2025 02:24:45 +0000
Manifest this update: Fri 05 Dec 2025 02:24:45 +0000
Manifest next update: Fri 12 Dec 2025 02:24:45 +0000
Files and hashes: 1: 07yEKALa0i1cMMKCZffRCL1HjnA.crl (hash: mtiUZT1gS/CNdim7L+x7dlGDVxPglDdadJjFHtyt/Wc=)
2: 675CAE1C097B11F089FAE77FC4F9AE02.roa (hash: g8goRa5uN0098PK1vnqVTndrxAdY1S5JKnq752ZsLOQ=)
3: C63D0814097B11F0B1329480C4F9AE02.roa (hash: BxZpcifR3l7qhnt+56VpPmZ3hTQmgPYYxX/h3b9rorE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl
rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:24:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B758E, serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70
Validity
Not Before: Dec 5 02:24:45 2025 GMT
Not After : Dec 12 02:24:45 2025 GMT
Subject: CN=6932426d-e35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:ea:08:bc:5a:29:f8:41:9c:49:b6:ef:cf:
fc:49:97:70:72:1a:4a:fd:11:00:fb:89:f9:41:03:
88:25:d4:b9:56:a1:d0:bc:c9:94:a5:7c:d2:09:39:
91:43:cd:3c:be:6f:10:41:e1:74:b3:57:3f:39:79:
2e:45:05:f4:27:ed:6b:d5:6c:91:0c:90:ad:eb:51:
ab:08:e3:0e:8c:e7:d8:4d:2b:b2:a8:93:c5:5d:55:
88:6c:fb:be:d8:26:34:fb:fa:96:a1:4b:f3:1c:75:
bf:57:0c:f6:7e:da:a2:d8:34:a0:e0:b6:65:0c:ee:
19:9c:c6:de:a2:b8:13:aa:49:36:2d:6d:58:89:e7:
da:8f:09:3c:ca:0c:b2:03:c8:59:37:8d:45:fb:80:
77:52:d5:50:67:b4:90:af:67:30:59:0f:7c:15:e7:
bd:b7:80:3c:31:b5:cb:2e:98:74:b6:31:53:44:ff:
eb:89:4f:e7:4e:e5:21:6f:e1:41:5f:c8:0a:01:df:
62:65:16:b1:6d:e1:19:ed:99:ee:49:a1:89:83:7b:
3c:b8:e7:9b:dc:af:d9:dd:f3:ab:cc:3c:01:3f:b5:
f6:16:39:55:7b:57:4d:d5:25:fc:d1:5f:8b:c3:0d:
69:c2:1a:02:75:6f:da:19:ed:6a:d1:e4:6a:f7:a2:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F2:C0:45:02:19:FA:45:D8:F4:19:47:1F:B8:BB:18:E4:4B:26:BD
X509v3 Authority Key Identifier:
keyid:D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:0b:e4:df:11:e5:72:ad:ab:38:c2:71:3a:f4:8b:7e:98:13:
ab:96:87:8d:73:66:b5:e4:06:1c:05:6d:52:1f:71:c3:b6:41:
a7:8e:62:54:ae:b6:49:d8:90:12:c1:84:b4:6c:9f:96:a2:11:
ce:9d:fd:5b:e1:4c:73:5a:a5:72:7a:89:eb:d8:3d:c6:55:30:
88:f6:46:03:c4:47:45:d4:fc:db:62:a9:ec:46:15:2a:ff:f0:
06:60:64:61:30:38:ac:76:e3:ff:2e:96:09:d4:1e:25:6a:90:
21:2e:93:35:88:e0:54:cc:ff:0e:fb:aa:b9:ea:ac:43:71:a9:
b8:28:70:7c:44:aa:1a:15:2b:f9:32:a6:8d:4e:4b:49:8d:76:
5b:66:c4:c9:53:70:1d:ec:bf:cf:81:1d:40:24:f0:e0:54:cb:
9d:01:f0:90:93:95:65:e3:9b:86:a5:e0:d2:c9:a2:dc:51:62:
0d:73:23:32:58:ef:f8:27:8d:3c:99:a5:c4:f3:fb:8f:74:26:
f2:7a:04:b5:0f:28:46:9a:cd:02:37:25:c2:ba:f1:89:ea:0b:
67:dd:ec:e0:5e:ff:43:1e:c2:f2:00:29:05:cd:85:c0:4b:06:
fd:e8:0b:e1:aa:bf:b7:1b:41:b6:7c:05:4d:83:ca:12:16:8b:
c5:20:63:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc1OEUxMTAvBgNVBAUTKEQzQkM4NDI4MDJEQUQyMkQ1QzMwQzI4MjY1RjdEMTA4
QkQ0NzhFNzAwHhcNMjUxMjA1MDIyNDQ1WhcNMjUxMjEyMDIyNDQ1WjAYMRYwFAYD
VQQDEw02OTMyNDI2ZC1lMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo9HqCLxaKfhBnEm278/8SZdwchpK/REA+4n5QQOIJdS5VqHQvMmUpXzSCTmR
Q808vm8QQeF0s1c/OXkuRQX0J+1r1WyRDJCt61GrCOMOjOfYTSuyqJPFXVWIbPu+
2CY0+/qWoUvzHHW/Vwz2ftqi2DSg4LZlDO4ZnMbeorgTqkk2LW1Yiefajwk8ygyy
A8hZN41F+4B3UtVQZ7SQr2cwWQ98Fee9t4A8MbXLLph0tjFTRP/riU/nTuUhb+FB
X8gKAd9iZRaxbeEZ7ZnuSaGJg3s8uOeb3K/Z3fOrzDwBP7X2FjlVe1dN1SX80V+L
ww1pwhoCdW/aGe1q0eRq96KGLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOjywEUC
GfpF2PQZRx+4uxjkSya9MB8GA1UdIwQYMBaAFNO8hCgC2tItXDDCgmX30Qi9R45w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9EREVDODEyNEQ1
M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBpMWNNTUtDWmZmUkNMMUhq
bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzA3eUVLQUxhMGkxY01NS0NaZmZSQ0wxSGpuQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NzU4RS9EREVDODEyNEQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBp
MWNNTUtDWmZmUkNMMUhqbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkC+TfEeVyras4wnE69It+mBOrloeNc2a15AYcBW1SH3HDtkGnjmJU
rrZJ2JASwYS0bJ+WohHOnf1b4UxzWqVyeonr2D3GVTCI9kYDxEdF1PzbYqnsRhUq
//AGYGRhMDisduP/LpYJ1B4lapAhLpM1iOBUzP8O+6q56qxDcam4KHB8RKoaFSv5
MqaNTktJjXZbZsTJU3Ad7L/PgR1AJPDgVMudAfCQk5Vl45uGpeDSyaLcUWINcyMy
WO/4J408maXE8/uPdCbyegS1DyhGms0CNyXCuvGJ6gtn3ezgXv9DHsLyACkFzYXA
Swb96Avhqr+3G0G2fAVNg8oSFovFIGMU
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:21:08 2025 by rpki-client