This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
File: y78mA3JNeFZrHBLDLVxIH10w8fI.mft (raw, json)
Hash identifier: JOiaeqnDtnXHDTNzXSB1wZW2ww14UAHllfNoUA5VM9g=
Subject key identifier: BF:E5:66:CB:50:A9:1D:81:81:0F:AA:D6:BF:14:F2:93:95:C7:A9:0C
Authority key identifier: CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2
Certificate issuer: /CN=A91B7700/serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
Certificate serial: 03D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
Manifest number: 03CC
Signing time: Sat 06 Dec 2025 23:15:15 +0000
Manifest this update: Sat 06 Dec 2025 23:15:15 +0000
Manifest next update: Sat 13 Dec 2025 23:15:15 +0000
Files and hashes: 1: y78mA3JNeFZrHBLDLVxIH10w8fI.crl (hash: 7cgJ2MTSPHjCqPhlbha8ooGA5/21ZOct8ChUT2PYz74=)
2: 93D60566AE5B11ECB19C1569C4F9AE02.roa (hash: ypeDdRgdlFu3mSiTJZgTSrGrzIisGsgwbRQwhsD5B0I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl
rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 23:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977 (0x3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7700, serialNumber=CBBF2603724D78566B1C12C32D5C481F5D30F1F2
Validity
Not Before: Dec 6 23:15:15 2025 GMT
Not After : Dec 13 23:15:15 2025 GMT
Subject: CN=6934b903-1c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:d7:f8:54:72:37:90:cb:52:68:07:a2:7a:
de:34:91:a8:e1:83:03:47:df:fc:52:8c:19:b2:7f:
c0:3d:0a:c2:a9:f3:e1:df:cf:0b:f0:46:15:98:21:
aa:01:a5:ce:63:5f:dd:e9:10:33:63:49:c5:7e:ce:
9d:8d:ea:80:68:c7:60:36:b6:7b:5a:bb:6d:42:fc:
11:fc:2c:10:b5:4f:ab:7e:9b:05:45:a2:17:b6:4c:
e5:b3:6f:8e:bd:cf:88:26:13:44:c4:ea:00:18:a6:
ef:84:77:77:07:be:a2:37:03:61:e5:3b:bd:b0:9d:
18:e7:ca:bf:3c:35:b3:8f:04:2b:7d:8d:0f:8d:91:
89:55:bb:89:5c:b0:bf:bb:32:bf:5a:ff:f7:f9:07:
ab:41:3e:33:d5:87:51:b9:65:fa:ef:0b:61:89:f0:
16:71:5b:8d:2d:42:e8:9d:0d:5a:b1:b6:50:ae:bc:
1f:7f:4b:53:d2:23:5e:34:8e:02:6d:54:07:6a:f4:
12:14:db:f7:cf:19:69:86:8f:59:c8:74:05:26:4d:
a8:d4:b2:06:99:83:9c:89:8f:c3:ec:29:f7:9c:14:
64:f3:7b:9d:74:ab:8e:71:78:6b:9f:55:72:56:96:
f2:c2:68:5e:f2:b6:b7:f0:4a:17:9a:4a:3b:95:d3:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E5:66:CB:50:A9:1D:81:81:0F:AA:D6:BF:14:F2:93:95:C7:A9:0C
X509v3 Authority Key Identifier:
keyid:CB:BF:26:03:72:4D:78:56:6B:1C:12:C3:2D:5C:48:1F:5D:30:F1:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y78mA3JNeFZrHBLDLVxIH10w8fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7700/CCDBF4F0AE5711ECB4A1DA64C4F9AE02/y78mA3JNeFZrHBLDLVxIH10w8fI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8a:6c:73:bc:34:a9:8a:3f:d6:f1:71:9c:d9:7f:dc:5c:3a:
84:ba:b8:b6:74:33:63:ba:20:b2:38:00:82:f0:c5:b0:89:20:
32:14:e5:e9:0f:ae:04:e2:df:90:33:c2:9d:49:c2:3f:ab:b8:
41:93:bc:cd:4b:29:0d:c1:4a:72:69:d1:31:72:9a:99:af:f3:
27:ce:76:ea:c4:af:3b:34:64:25:db:1f:f0:d9:dc:71:a7:72:
cf:e9:b4:32:5a:d1:47:0d:ff:27:f3:55:02:8b:be:e5:10:6d:
c8:b1:60:b0:50:d6:8a:a6:57:84:5b:51:ff:45:d7:53:41:05:
59:2f:8d:d4:3f:fb:75:3f:21:f3:91:ae:98:43:57:70:50:12:
7f:32:81:e4:7f:10:fe:7a:ca:50:5e:e5:bf:a3:24:e1:8c:de:
da:d9:47:7d:5f:1a:f6:c6:f2:78:52:7a:e4:52:d9:a7:61:66:
07:42:38:87:fc:a9:a8:01:e2:ff:fd:dc:dd:d7:c8:8c:f3:25:
83:3d:19:31:05:ac:b9:1d:f1:87:13:2f:08:bb:26:86:df:ce:
b5:1a:b6:66:98:c9:1f:02:b7:54:99:d8:7a:dd:f1:02:7e:94:
e4:90:df:8a:6b:6e:51:0f:76:85:d4:d8:77:0f:ce:8d:ce:8b:
ce:b2:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:54:53 2025 by rpki-client