This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
File: -Y6-IGkPLysjShVIfdCVIfPUdTw.mft (raw, json)
Hash identifier: JuhvNblLg0NTjEHXaM3GH41AV+KB839JhMuUZLzVohc=
Subject key identifier: C6:D7:28:52:15:9C:AF:FA:4B:D4:5A:BA:B9:2B:19:00:DB:96:8F:95
Authority key identifier: F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C
Certificate issuer: /CN=A91BCC44/serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C
Certificate serial: 0B4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
Manifest number: 0B47
Signing time: Thu 04 Dec 2025 18:33:50 +0000
Manifest this update: Thu 04 Dec 2025 18:33:50 +0000
Manifest next update: Thu 11 Dec 2025 18:33:50 +0000
Files and hashes: 1: -Y6-IGkPLysjShVIfdCVIfPUdTw.crl (hash: z63V75RXQVLymj0+tNH/gK3fGVBBw9Mqy9MWxBZyp2E=)
2: B69F45F6480C11EAA7171874C4F9AE02.roa (hash: gMyJ+7eXQOz2lZ7oRn13QHvOh0RqD5UbZBYLXAXV9no=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl
rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 18:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2894 (0xb4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BCC44, serialNumber=F98EBE20690F2F2B234A15487DD09521F3D4753C
Validity
Not Before: Dec 4 18:33:50 2025 GMT
Not After : Dec 11 18:33:50 2025 GMT
Subject: CN=6931d40e-875c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:e0:d5:9d:d8:ab:11:c9:1c:43:2b:10:31:
c9:c8:91:2e:76:6d:15:b0:bd:1d:a0:0c:c0:ce:c7:
8a:6c:fc:f5:e0:0b:db:c5:27:e8:d2:2d:62:75:bd:
8d:a4:ad:8b:c7:8c:fe:d1:5f:ee:bf:67:e3:a6:1f:
09:fe:ba:e4:37:d5:1c:da:77:bb:39:8c:5b:3d:7f:
65:63:46:13:38:c6:2d:a7:9c:f3:3f:20:14:15:a4:
36:ce:90:15:77:74:69:9c:67:c9:51:f9:36:82:f4:
45:33:52:0d:47:1c:51:85:b2:d3:e6:d8:33:72:b0:
49:f1:c3:29:6f:d0:e2:13:53:fe:c9:2b:e2:9e:75:
71:76:31:3f:d0:45:85:bd:10:7e:80:ba:a0:ff:fa:
ae:4d:bb:a7:f1:ed:2d:13:9e:61:2f:34:78:a6:c8:
e2:f0:d9:55:62:6a:2d:ac:7f:a5:14:73:ef:4c:77:
bf:c2:13:fb:a4:fd:2c:bb:77:e5:f1:01:3d:79:62:
ff:81:11:fb:f9:94:19:34:e4:0c:3d:d1:37:ed:f1:
9d:73:d3:49:41:b1:83:90:7a:87:91:ec:c9:48:78:
b8:fc:da:b4:5a:47:1e:6f:bd:8b:f0:e2:7f:e8:fd:
1d:87:05:09:5a:1a:0c:08:d6:c6:5d:08:e2:1d:e7:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D7:28:52:15:9C:AF:FA:4B:D4:5A:BA:B9:2B:19:00:DB:96:8F:95
X509v3 Authority Key Identifier:
keyid:F9:8E:BE:20:69:0F:2F:2B:23:4A:15:48:7D:D0:95:21:F3:D4:75:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y6-IGkPLysjShVIfdCVIfPUdTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC44/C160FCAC480A11EA9811906DC4F9AE02/-Y6-IGkPLysjShVIfdCVIfPUdTw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:27:ff:94:75:1c:48:f4:65:83:40:62:08:8b:b5:ca:38:c4:
01:10:3d:76:be:fb:e7:5c:d1:af:f5:d3:39:37:b4:c0:7f:b3:
4f:15:3e:db:ac:b3:cf:9d:12:12:9f:e5:e1:ba:ee:2c:cb:fe:
35:ba:78:6f:9d:8f:94:b6:cb:3f:98:3a:0a:ed:67:9b:de:47:
22:fe:59:5d:27:fd:67:7c:7d:e8:46:fa:c2:e6:f1:e0:4f:da:
f5:9d:13:b3:b5:3b:3d:65:c2:55:c9:98:75:09:b2:a4:60:7b:
b2:19:4d:d9:fa:4a:7c:b7:b8:5a:18:01:6c:f0:db:e2:f6:dc:
e2:a1:e0:26:5c:6c:8b:09:78:6e:b0:d9:5d:03:54:c9:78:c5:
cd:a5:ec:ff:6d:88:53:c1:14:1f:c0:20:23:2e:e2:bb:06:ec:
93:85:32:4d:d4:88:82:86:48:e3:2d:37:66:6e:8e:dd:78:c2:
fc:0f:fc:06:29:cf:f1:32:2e:16:2d:5f:7d:be:8d:0e:d6:47:
ae:c8:b1:30:eb:71:23:da:29:67:2c:0a:67:70:50:62:64:fd:
36:6e:e4:e4:cd:1f:5b:67:42:22:58:3c:b1:04:ac:1d:0c:07:
40:bf:60:e7:44:e3:3f:e2:6d:a5:91:e2:82:d7:ad:f8:af:0e:
8c:ba:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:24:52 2025 by rpki-client