This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json)
Hash identifier: y0bSMDOCMNw92xcESGeGIaStkQowBdPN1FuPVqcUZDc=
Subject key identifier: 90:DF:2D:2A:36:D1:04:4E:51:AA:6C:76:83:5B:C8:EA:D7:0B:BA:A2
Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Certificate serial: 0DC6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
Manifest number: 0DB1
Signing time: Sat 06 Dec 2025 17:19:56 +0000
Manifest this update: Sat 06 Dec 2025 17:19:55 +0000
Manifest next update: Sat 13 Dec 2025 17:19:55 +0000
Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: FS3i096+Cy4D2fpp/JcL1QfMaCHz8R8ELakcV5zsRm0=)
2: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: h9Ek+uVHJkd43jpvXLhIeId4TZWOhn+0W2MAspUZuOw=)
3: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: sy4Su4ASjc+OqwWE5jPxA/U7NJeDsxDapY34Q7SzDAE=)
4: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: +QLq15+GCrbTMv3T/U18UwN/WHFJnfWgXMxuf5yq0ts=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3526 (0xdc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Validity
Not Before: Dec 6 17:19:55 2025 GMT
Not After : Dec 13 17:19:55 2025 GMT
Subject: CN=693465bc-33e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9a:fe:24:4a:da:03:97:f6:3f:58:d1:54:dd:
1d:ab:c2:18:f9:7b:0b:9d:dc:16:ca:64:b9:24:75:
1a:a7:a0:bb:f6:46:35:d3:9f:e3:66:af:40:be:a0:
c5:89:58:0b:da:36:05:8b:2e:82:e0:8a:93:c8:58:
5c:18:5c:08:26:af:9a:06:8b:6a:26:83:04:5e:00:
d3:cf:c3:46:6f:5b:39:e4:21:52:98:f9:5b:a0:fc:
ad:b0:ab:e7:d9:38:63:4d:48:55:3f:c0:b2:f8:64:
c0:b2:d0:6f:86:a8:71:c3:ab:05:cf:89:c0:ae:a3:
23:d8:fe:59:6d:d2:e9:c8:0d:73:ab:ff:c2:95:c0:
91:80:89:ee:8c:59:7a:a6:f4:64:27:48:d8:b4:35:
8f:eb:8d:8a:0e:77:dd:8b:39:be:f1:3d:5a:51:ef:
f4:f7:53:1d:3c:e3:6f:a2:3e:32:72:b8:a7:12:2f:
18:d8:5e:48:83:fa:a2:87:b6:a2:6f:98:44:93:d7:
7a:21:fc:62:a8:2e:70:57:c5:71:46:69:06:4c:48:
79:13:9f:d0:49:f8:da:af:15:f3:2c:53:95:e6:af:
ab:b6:69:36:4d:a5:e1:6e:fc:db:e5:80:bc:e7:d1:
cd:3b:14:c6:14:49:9c:7d:69:55:be:bc:6e:f7:78:
2a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:DF:2D:2A:36:D1:04:4E:51:AA:6C:76:83:5B:C8:EA:D7:0B:BA:A2
X509v3 Authority Key Identifier:
keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f6:7d:91:0b:9c:24:c5:1d:ae:73:e8:94:7c:c6:64:c8:e3:
c9:0a:54:d7:9b:df:cb:b2:07:4e:ad:be:1a:ba:a7:3c:36:da:
fc:44:d9:37:6c:0e:26:f5:1d:7b:ad:0d:74:2c:18:06:67:44:
0b:3b:65:d1:a7:e1:5f:88:b7:8b:47:8f:23:66:f9:1e:45:f7:
74:71:a5:52:13:fb:81:91:b5:54:d4:c2:dc:39:ce:24:e9:70:
ff:34:44:c5:6b:0f:ee:9e:82:ee:dd:24:a0:67:7d:7f:1a:0b:
fc:a5:b7:5b:bf:11:70:30:3f:49:f0:5b:97:b7:bf:b8:72:45:
46:e4:23:4e:6c:27:c9:4b:2c:5f:e1:a8:f0:55:a8:2c:81:65:
e3:82:de:f1:b5:4e:d0:cc:35:64:36:e2:a5:c5:c9:3e:f5:dd:
58:5e:ce:a1:a8:03:c5:99:5e:0a:77:92:2a:ce:be:91:0f:cc:
03:b9:71:dc:52:0b:cf:0f:ae:35:78:f4:7a:0b:87:ef:2e:06:
2c:1e:aa:70:e8:fd:c2:f7:1c:27:b0:18:14:b5:73:15:d8:99:
a2:ab:17:52:1a:f9:21:cc:20:af:26:1e:7a:31:00:50:f8:28:
83:ad:e1:7c:d6:97:d8:59:8d:98:da:0d:36:8d:b3:37:9f:99:
29:8f:78:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:58 2025 by rpki-client