This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
File: Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft (raw, json)
Hash identifier: d5K+q7aPMLX0RQxHh0MWU+Z0gNaBAo70u7wgJ/hgqLY=
Subject key identifier: 49:95:06:02:29:E2:80:91:AA:7E:0E:BC:63:BE:68:B0:2C:61:50:6E
Authority key identifier: 63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0
Certificate issuer: /CN=A91BB629/serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0
Certificate serial: 0105
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
Manifest number: 0103
Signing time: Fri 05 Dec 2025 03:08:01 +0000
Manifest this update: Fri 05 Dec 2025 03:08:00 +0000
Manifest next update: Fri 12 Dec 2025 03:08:00 +0000
Files and hashes: 1: Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl (hash: XD0OFsK+AQRwYwkHh3d+BFp11U/SXzDGvvNV/UlIncg=)
2: 7CE4326245B511EFBAC06E1EC4F9AE02.roa (hash: bllAWJknG6t7sgMmQWLY59vxPXpNHKXKelWOMC8ypAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl
rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB629, serialNumber=630EFC8BC8247F99A01280741E4A1A0DB7F147B0
Validity
Not Before: Dec 5 03:08:00 2025 GMT
Not After : Dec 12 03:08:00 2025 GMT
Subject: CN=69324c90-932a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:97:af:dd:ee:19:7c:29:8a:1a:1d:fa:d1:
8d:9a:e3:fc:18:38:60:9e:61:c5:dd:58:65:16:e6:
78:d0:9b:1a:7d:11:6a:90:90:2e:7b:13:4d:b2:8a:
6a:7c:89:ea:bf:9a:97:9d:fa:ed:f2:54:89:80:12:
52:a7:35:6c:9f:c8:6c:d6:02:0d:63:74:80:c1:9b:
9d:d1:46:0e:f0:bd:02:69:e9:78:7f:68:ad:82:8f:
73:70:47:10:66:65:5b:53:c6:bc:36:ec:8e:47:82:
b0:c7:ae:91:b7:41:1c:94:ba:97:81:22:44:6e:bd:
a9:dd:d3:27:26:e0:f7:cc:c1:4a:b4:5a:74:e9:ca:
90:e8:37:ef:97:09:9b:90:05:06:2e:3a:cd:14:f7:
3c:01:2a:81:d4:eb:86:4f:24:78:6d:3c:db:8e:ef:
57:a5:e2:41:37:a8:c3:68:48:42:38:a2:ed:f7:f5:
43:84:4a:64:bd:e1:2e:ae:3b:2f:2c:84:24:6a:29:
f0:63:1d:d8:bb:1b:53:d5:fc:4d:6c:1a:40:ef:ff:
27:c8:b5:b2:43:78:5d:ba:75:1f:d1:50:69:fe:ad:
63:46:9d:08:96:e0:77:9b:b0:00:24:89:a3:34:2f:
89:89:cf:79:96:53:6e:e8:4f:14:cb:e4:d7:65:2b:
09:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:95:06:02:29:E2:80:91:AA:7E:0E:BC:63:BE:68:B0:2C:61:50:6E
X509v3 Authority Key Identifier:
keyid:63:0E:FC:8B:C8:24:7F:99:A0:12:80:74:1E:4A:1A:0D:B7:F1:47:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yw78i8gkf5mgEoB0HkoaDbfxR7A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB629/E2CF940A45B411EF8FDB741DC4F9AE02/Yw78i8gkf5mgEoB0HkoaDbfxR7A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b4:f9:d6:08:55:df:e4:f1:55:d6:9b:88:3a:29:90:ac:75:
d4:fc:64:b0:94:5e:fb:88:4f:ba:1a:6a:f4:46:c5:66:52:61:
06:9b:33:81:c6:8e:bf:f2:67:a7:38:8f:c9:ec:39:cd:02:1d:
a9:71:7b:19:e2:0d:a4:74:fa:17:fb:31:c2:9f:67:11:79:e7:
69:b6:d7:da:70:d4:06:b1:ab:b9:11:9a:a5:c8:29:4c:c7:1b:
38:44:ce:97:58:7d:c9:a0:4d:40:b5:e8:7f:f6:13:e1:3e:4d:
be:0a:13:59:9c:34:66:07:41:1c:6e:82:51:ea:e4:19:ac:43:
f8:13:d8:d2:44:79:50:3e:c9:5b:82:a3:35:39:fa:78:1f:72:
95:87:3d:7e:48:bc:b6:87:8e:0f:c9:d3:29:6f:27:8e:1a:54:
c5:54:55:1e:61:af:98:d7:8c:85:1a:b0:8c:f1:69:06:d3:04:
d5:42:b4:8e:25:65:dc:27:74:09:ce:a7:27:79:bf:87:e1:96:
3c:46:1b:50:89:e2:cf:5a:0b:31:eb:ab:c6:5f:49:0d:80:7e:
56:c5:2b:bf:6a:0f:1e:70:32:13:4d:43:3f:43:70:12:0f:8e:
8e:97:04:8f:d5:1f:cb:d3:92:ca:76:f7:77:8b:08:80:e0:40:
48:d9:0e:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI2MjkxMTAvBgNVBAUTKDYzMEVGQzhCQzgyNDdGOTlBMDEyODA3NDFFNEExQTBE
QjdGMTQ3QjAwHhcNMjUxMjA1MDMwODAwWhcNMjUxMjEyMDMwODAwWjAYMRYwFAYD
VQQDEw02OTMyNGM5MC05MzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApjCXr93uGXwpihod+tGNmuP8GDhgnmHF3VhlFuZ40JsafRFqkJAuexNNsopq
fInqv5qXnfrt8lSJgBJSpzVsn8hs1gINY3SAwZud0UYO8L0Cael4f2itgo9zcEcQ
ZmVbU8a8NuyOR4Kwx66Rt0EclLqXgSJEbr2p3dMnJuD3zMFKtFp06cqQ6Dfvlwmb
kAUGLjrNFPc8ASqB1OuGTyR4bTzbju9XpeJBN6jDaEhCOKLt9/VDhEpkveEurjsv
LIQkainwYx3YuxtT1fxNbBpA7/8nyLWyQ3hdunUf0VBp/q1jRp0IluB3m7AAJImj
NC+Jic95llNu6E8Uy+TXZSsJpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmVBgIp
4oCRqn4OvGO+aLAsYVBuMB8GA1UdIwQYMBaAFGMO/IvIJH+ZoBKAdB5KGg238Uew
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjYyOS9FMkNGOTQwQTQ1
QjQxMUVGOEZEQjc0MURDNEY5QUUwMi9Zdzc4aThna2Y1bWdFb0IwSGtvYURiZnhS
N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1l3NzhpOGdrZjVtZ0VvQjBIa29hRGJmeFI3QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjYyOS9FMkNGOTQwQTQ1QjQxMUVGOEZEQjc0MURDNEY5QUUwMi9Zdzc4aThna2Y1
bWdFb0IwSGtvYURiZnhSN0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6tPnWCFXf5PFV1puIOimQrHXU/GSwlF77iE+6Gmr0RsVmUmEGmzOB
xo6/8menOI/J7DnNAh2pcXsZ4g2kdPoX+zHCn2cReedpttfacNQGsau5EZqlyClM
xxs4RM6XWH3JoE1Ateh/9hPhPk2+ChNZnDRmB0EcboJR6uQZrEP4E9jSRHlQPslb
gqM1Ofp4H3KVhz1+SLy2h44PydMpbyeOGlTFVFUeYa+Y14yFGrCM8WkG0wTVQrSO
JWXcJ3QJzqcneb+H4ZY8RhtQieLPWgsx66vGX0kNgH5WxSu/ag8ecDITTUM/Q3AS
D46OlwSP1R/L05LKdvd3iwiA4EBI2Q4B
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:35:18 2025 by rpki-client