This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
File: PykJw_UywAsCV7klbHbroxTc0A8.mft (raw, json)
Hash identifier: pXM9GMBbC64Wx39Tn/SrvZhGIxr6hNlRhPSouyDQigU=
Subject key identifier: 77:A7:E2:FC:B9:64:02:AB:6F:20:6C:F0:95:E9:7C:FB:55:B5:D5:52
Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
Certificate issuer: /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Certificate serial: 02F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
Manifest number: 02E6
Signing time: Thu 04 Dec 2025 23:41:06 +0000
Manifest this update: Thu 04 Dec 2025 23:41:06 +0000
Manifest next update: Thu 11 Dec 2025 23:41:06 +0000
Files and hashes: 1: PykJw_UywAsCV7klbHbroxTc0A8.crl (hash: ts6qHiAsXZf2OMWkHU5rUvMPuKMw0cka1p27O5Ldu+E=)
2: 99A7637060B311EEBA329E54C4F9AE02.roa (hash: Sdc1sOHrwKDGZqW0ILPwFUzKSKTDUensRtaAvqeeJxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:41:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752 (0x2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C71A5, serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Validity
Not Before: Dec 4 23:41:06 2025 GMT
Not After : Dec 11 23:41:06 2025 GMT
Subject: CN=69321c12-3830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:b9:dc:f5:22:0b:46:01:e1:fc:68:a7:a3:
19:3c:89:ed:46:a0:97:86:5b:83:1b:41:d4:e6:21:
23:be:6f:94:b5:a6:dc:dc:3c:77:6f:4d:a7:e6:28:
57:27:f5:ad:f1:7e:0e:0c:35:d4:69:93:3f:4c:48:
dd:d4:91:c6:62:cc:0f:f0:a9:63:d1:f9:81:33:2a:
90:d3:1b:59:e2:bb:c5:1e:07:7e:6e:ea:05:f1:26:
7e:2a:ea:14:55:5e:69:b1:e3:ce:4b:a0:5a:7c:3a:
27:29:b2:d8:bb:cc:f5:64:1e:75:0c:11:27:56:5f:
ef:04:d6:80:6a:93:e1:da:41:00:95:0d:69:1f:0d:
29:25:70:63:5a:4f:dc:ec:da:d6:f2:e0:8d:59:1b:
f1:be:bb:28:e0:1d:d1:11:bd:34:03:20:7e:39:e2:
8b:4c:14:7e:9b:ce:29:c8:d5:73:be:45:84:60:fb:
bd:74:ea:b8:ea:36:fb:35:63:51:68:ff:df:a6:2c:
ef:e1:09:35:2d:89:70:df:f1:43:07:42:e2:64:c7:
92:84:df:c9:e5:50:08:14:04:a7:56:34:e1:85:5f:
61:6d:e9:85:89:2a:77:62:cd:39:a9:b8:82:de:ae:
76:38:1f:95:b6:30:a6:1d:9d:cd:8d:cf:49:3f:a5:
36:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A7:E2:FC:B9:64:02:AB:6F:20:6C:F0:95:E9:7C:FB:55:B5:D5:52
X509v3 Authority Key Identifier:
keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:84:a4:f7:56:09:e7:88:90:4b:e8:3e:3c:93:9d:1d:9b:73:
bc:be:73:78:95:62:4c:60:5f:ae:82:b8:eb:38:85:a7:6b:b6:
39:a1:2b:f1:6c:ac:4c:28:34:be:e8:ad:54:0f:30:7b:28:c4:
3a:1b:c1:d9:02:61:a4:0e:e0:5d:d4:e2:4f:0a:cb:8d:2e:4c:
af:80:5e:f2:a4:8a:b3:a6:2d:f8:5d:43:0d:1d:1a:39:5c:77:
db:b8:0f:24:43:9e:b9:12:3d:65:04:e4:a3:b0:a7:d7:ef:ed:
91:32:b1:6f:2c:2d:ad:d2:4e:5f:70:41:8b:a6:e0:83:c2:04:
7b:6b:6e:c5:81:cc:dc:1c:1c:72:fd:ec:3a:24:d7:b6:b7:d4:
62:c2:c2:27:cb:73:29:c3:71:f5:cf:38:32:00:61:1a:70:7d:
a8:f7:f9:90:00:67:58:41:09:37:55:ba:8a:30:cb:90:33:bc:
bf:07:8a:7b:d7:5d:42:ec:67:27:d7:46:c8:93:07:c1:6a:3e:
8c:6c:8a:fa:83:09:9c:08:5b:7d:91:a3:6a:a7:d2:3b:a3:9f:
66:31:77:46:8a:a1:df:4a:49:4f:18:34:a4:2f:54:00:2a:73:
a7:31:92:dc:5c:75:99:f9:d0:bf:2c:ca:68:b7:f3:f3:41:df:
5d:40:f3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:58:04 2025 by rpki-client