This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
File: vY48wqk9XbzYQnUJc4oxS_kMiH0.mft (raw, json)
Hash identifier: VeGPlQQDz/UOtLos5z2s0chbJ2UJYjdl3Z1pxH1wdBw=
Subject key identifier: 1B:3C:77:E8:7F:36:66:F6:26:99:56:61:B8:71:D7:AC:33:D7:A2:46
Authority key identifier: BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
Certificate issuer: /CN=A91BFE76/serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Certificate serial: 16
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
Manifest number: 14
Signing time: Fri 05 Dec 2025 05:44:31 +0000
Manifest this update: Fri 05 Dec 2025 05:44:30 +0000
Manifest next update: Fri 12 Dec 2025 05:44:30 +0000
Files and hashes: 1: vY48wqk9XbzYQnUJc4oxS_kMiH0.crl (hash: PWmLOzMJd3ZoXCI7mgWsBukNQ22SUhad4GaP/vbG+cE=)
2: E9A639DAB9EB11F0AE27CB70C4F9AE02.roa (hash: rEHYvI4H6kzy3QLBvK5c7/+2A8OlyxQVAExaC8Q6VxQ=)
3: 79734D6AB9EB11F095C2C735C4F9AE02.roa (hash: zTRiAtvXJqXVBRjtXMDww/8yB6SUllc65zHvKU0WltI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:44:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE76, serialNumber=BD8E3CC2A93D5DBCD8427509738A314BF90C887D
Validity
Not Before: Dec 5 05:44:30 2025 GMT
Not After : Dec 12 05:44:30 2025 GMT
Subject: CN=6932713f-f67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:22:8e:1e:b1:d0:99:4b:f5:24:ce:05:31:
01:a6:19:4c:13:71:1c:5e:22:6e:b5:33:4c:78:06:
c1:d1:94:62:66:db:91:14:67:90:65:57:3e:56:a9:
69:65:c1:4d:66:08:b0:e8:26:06:f4:dc:4a:f9:28:
18:53:ba:ee:be:d8:05:98:41:64:c6:af:d0:b1:56:
48:67:49:2f:90:a1:fe:37:15:49:22:d9:8f:5b:2f:
25:ab:20:f7:77:50:de:f8:c1:5f:dc:3d:e2:fd:f0:
89:e6:f5:39:be:a0:31:28:c6:98:0b:44:17:01:94:
74:f7:ce:36:f7:b8:e1:d9:75:84:d0:53:3d:3a:db:
e0:b3:f5:88:65:33:cd:2b:53:f0:a7:f3:4d:c9:00:
97:ce:dc:60:b3:c4:75:6c:41:fc:70:c5:d2:15:34:
3e:3b:f5:8c:d2:ef:d2:e8:7e:30:f5:97:82:da:d2:
a9:17:f5:03:36:75:19:ee:c0:7f:ae:a0:13:56:4f:
00:1c:63:20:29:2e:77:2d:1f:01:6d:a4:ba:2e:50:
a8:29:1d:14:25:b9:ee:0f:77:3c:c9:00:8f:3a:14:
f1:cb:95:d2:2b:de:00:4f:b2:cb:cc:b3:59:b7:a3:
93:61:02:9f:ab:3f:e6:48:10:fb:82:17:f1:60:d2:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3C:77:E8:7F:36:66:F6:26:99:56:61:B8:71:D7:AC:33:D7:A2:46
X509v3 Authority Key Identifier:
keyid:BD:8E:3C:C2:A9:3D:5D:BC:D8:42:75:09:73:8A:31:4B:F9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vY48wqk9XbzYQnUJc4oxS_kMiH0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE76/D9E4C4CCB92711F0B80EC45EC4F9AE02/vY48wqk9XbzYQnUJc4oxS_kMiH0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:65:9d:ac:32:50:d7:17:13:f4:96:a8:cd:ca:17:df:d7:63:
42:3b:13:0b:df:5d:c3:a0:27:a8:42:6e:f7:80:68:7f:91:67:
fa:28:06:b4:32:94:0c:7a:d4:2d:f8:43:20:31:2f:1f:b5:f6:
ee:93:54:2b:b0:f7:20:48:81:f4:f0:4a:bd:16:eb:16:b1:7a:
60:f7:10:42:fe:30:22:f7:7b:da:b0:0d:34:8e:56:54:ba:94:
b1:e3:3f:15:41:41:bb:82:b5:f5:a6:66:28:ea:87:ea:42:9b:
7f:35:e7:93:a5:07:b2:6a:b8:0c:cc:ec:96:d1:3b:54:e7:26:
6a:90:c6:07:f2:4f:68:70:49:e4:85:86:65:b8:31:1d:54:ea:
71:fa:51:c6:55:c9:c0:6b:e4:d1:98:9f:60:ef:99:6f:b1:b4:
73:a0:a0:12:06:76:64:c0:ed:3d:23:04:ea:e2:59:8c:65:77:
9e:85:21:f0:5d:dd:84:a6:70:9f:14:53:ef:2a:94:85:b4:78:
8f:27:74:10:30:db:ee:64:a6:86:53:34:a5:54:f8:e0:b1:94:
1f:97:19:f3:b2:e1:ea:b2:ea:54:cb:1d:42:5b:23:b1:c6:68:
19:c0:e0:fe:b6:57:98:e5:4b:27:4f:f8:cb:9d:91:31:bd:2a:
ab:f5:c8:c2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
RkU3NjExMC8GA1UEBRMoQkQ4RTNDQzJBOTNENURCQ0Q4NDI3NTA5NzM4QTMxNEJG
OTBDODg3RDAeFw0yNTEyMDUwNTQ0MzBaFw0yNTEyMTIwNTQ0MzBaMBgxFjAUBgNV
BAMTDTY5MzI3MTNmLWY2N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCw0SKOHrHQmUv1JM4FMQGmGUwTcRxeIm61M0x4BsHRlGJm25EUZ5BlVz5WqWll
wU1mCLDoJgb03Er5KBhTuu6+2AWYQWTGr9CxVkhnSS+Qof43FUki2Y9bLyWrIPd3
UN74wV/cPeL98Inm9Tm+oDEoxpgLRBcBlHT3zjb3uOHZdYTQUz062+Cz9YhlM80r
U/Cn803JAJfO3GCzxHVsQfxwxdIVND479YzS79LofjD1l4La0qkX9QM2dRnuwH+u
oBNWTwAcYyApLnctHwFtpLouUKgpHRQlue4PdzzJAI86FPHLldIr3gBPssvMs1m3
o5NhAp+rP+ZIEPuCF/Fg0i9fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGzx36H82
ZvYmmVZhuHHXrDPXokYwHwYDVR0jBBgwFoAUvY48wqk9XbzYQnUJc4oxS/kMiH0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGRTc2L0Q5RTRDNENDQjky
NzExRjBCODBFQzQ1RUM0RjlBRTAyL3ZZNDh3cWs5WGJ6WVFuVUpjNG94U19rTWlI
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvdlk0OHdxazlYYnpZUW5VSmM0b3hTX2tNaUgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG
RTc2L0Q5RTRDNENDQjkyNzExRjBCODBFQzQ1RUM0RjlBRTAyL3ZZNDh3cWs5WGJ6
WVFuVUpjNG94U19rTWlIMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGZlnawyUNcXE/SWqM3KF9/XY0I7EwvfXcOgJ6hCbveAaH+RZ/ooBrQy
lAx61C34QyAxLx+19u6TVCuw9yBIgfTwSr0W6xaxemD3EEL+MCL3e9qwDTSOVlS6
lLHjPxVBQbuCtfWmZijqh+pCm38155OlB7JquAzM7JbRO1TnJmqQxgfyT2hwSeSF
hmW4MR1U6nH6UcZVycBr5NGYn2DvmW+xtHOgoBIGdmTA7T0jBOriWYxld56FIfBd
3YSmcJ8UU+8qlIW0eI8ndBAw2+5kpoZTNKVU+OCxlB+XGfOy4eqy6lTLHUJbI7HG
aBnA4P62V5jlSydP+MudkTG9Kqv1yMI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:06:21 2025 by rpki-client