This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
File: ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json)
Hash identifier: Gy6XH3kbSatn8x4kB+jjSQGNvHG2gxFIcxb773ZSu9A=
Subject key identifier: 64:4F:C1:26:AF:31:52:15:47:BF:B7:19:38:28:AC:6C:F5:F0:98:C5
Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
Certificate issuer: /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Certificate serial: 0EE7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
Manifest number: 0ED6
Signing time: Thu 04 Dec 2025 17:12:42 +0000
Manifest this update: Thu 04 Dec 2025 17:12:41 +0000
Manifest next update: Thu 11 Dec 2025 17:12:41 +0000
Files and hashes: 1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: QkAZ8uCQ+MGeAIsSmrMX3CY6/wmIdAmTsq/uTLcOKwo=)
2: 5C154406988911E991B10838C4F9AE02.roa (hash: rlBKToBwc/S7CrTJwY8L3fa6c6H9ms0SKbG322SWU2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3815 (0xee7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Validity
Not Before: Dec 4 17:12:41 2025 GMT
Not After : Dec 11 17:12:41 2025 GMT
Subject: CN=6931c109-bd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:60:d3:39:23:fc:29:43:33:61:c0:fa:ea:
e6:a0:81:e4:ea:09:22:9c:06:d3:3f:b0:1f:21:25:
67:a1:f5:e5:0d:4a:a9:5f:28:72:92:cb:f7:ff:11:
27:0a:c2:60:d7:23:f7:03:2d:8d:17:d5:c9:95:e1:
e3:8c:c6:fa:bb:b0:f2:59:82:b5:47:26:a2:5a:8c:
35:a2:ec:2c:59:f1:7f:24:95:71:d6:8c:2b:8b:b9:
68:e3:58:8b:5b:c2:ad:bc:63:c2:04:69:9a:a2:db:
8b:de:fa:9d:c2:92:9d:27:79:e1:32:f2:75:22:e9:
67:69:5d:d4:cd:95:03:42:59:5e:ec:a1:bb:ce:8d:
81:47:99:6f:95:f2:bd:6b:85:4a:cf:71:ed:c0:d2:
d9:bf:40:12:ab:65:76:6c:d6:bd:c0:c3:dc:3c:67:
06:85:33:ac:97:13:28:04:04:75:b5:8f:87:ef:20:
ea:67:00:da:f7:6e:a8:43:6b:ca:d5:67:42:15:11:
a4:3b:e1:c5:63:2b:d2:82:26:67:ce:59:8c:1d:01:
9d:7f:64:c0:40:a8:e4:98:9b:7e:7a:31:c2:7f:db:
d1:1e:ae:4c:86:a8:91:f9:99:f3:84:01:d5:ab:cd:
96:a0:89:9c:86:a4:3c:f4:21:90:f7:4a:66:91:6d:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4F:C1:26:AF:31:52:15:47:BF:B7:19:38:28:AC:6C:F5:F0:98:C5
X509v3 Authority Key Identifier:
keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:96:d5:d8:e7:88:7b:ec:1b:f2:d4:6a:3c:d6:98:96:fe:5c:
ac:89:9a:92:a1:32:ae:73:0f:c8:4b:c0:c4:b6:d0:4a:be:9d:
9e:bd:9f:57:a5:53:3c:0c:26:33:71:79:8b:51:87:e5:98:c9:
54:98:29:01:81:70:e9:e2:c9:09:2f:87:9b:8c:56:f9:9e:17:
97:26:e7:0c:0f:af:47:76:e9:a6:93:5d:d3:fa:67:c1:0c:3c:
96:6c:ee:52:0d:5a:4c:92:a4:63:5b:c3:1a:3e:30:49:58:57:
98:3f:8a:ce:5c:5d:c4:25:10:26:80:b4:9d:40:e8:54:a1:64:
57:ed:44:89:04:9b:32:0e:1b:a2:9b:fd:1f:cc:a4:71:ef:de:
b7:67:0f:2e:c4:07:06:f9:fe:b5:19:0b:e9:ad:83:d3:c5:65:
5a:0a:b5:2b:71:7a:b9:8f:8b:df:97:f3:14:85:94:56:0d:55:
3a:30:44:59:ce:6d:58:10:0c:30:26:a8:7c:07:4d:b5:77:0e:
3c:bf:46:68:6d:ce:7e:d5:78:6e:0c:2d:ac:f9:25:00:d3:b9:
e0:9b:93:19:72:9a:cb:37:d2:3a:52:6a:50:22:e0:aa:fa:63:
07:52:24:de:51:84:de:77:c2:92:0b:48:38:12:27:46:85:16:
c7:cf:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:56:27 2025 by rpki-client