This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
File: Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft (raw, json)
Hash identifier: OSD2xDfL0KCM2BWLqiRrw+h0G6lUtMM/YTF8YVc66sM=
Subject key identifier: 25:C3:F6:77:01:B6:CF:2A:8E:A5:1C:C8:0A:02:B8:60:42:0B:02:45
Authority key identifier: 63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A
Certificate issuer: /CN=A91D2706/serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A
Certificate serial: 0791
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
Manifest number: 078B
Signing time: Thu 04 Dec 2025 20:29:08 +0000
Manifest this update: Thu 04 Dec 2025 20:29:07 +0000
Manifest next update: Thu 11 Dec 2025 20:29:07 +0000
Files and hashes: 1: Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl (hash: g/oCH3E0tOGnhCsKxvHCL2GQXkkBocC8BgJ/Fw4nBMk=)
2: 35D4363E330711EB9D3AA60BC4F9AE02.roa (hash: M4Gqzd39PMwr7C0nKPOIDqHHsIaRLfcCY3hCq+E40tY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl
rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:29:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1937 (0x791)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D2706, serialNumber=639239063917EE92C099E46AD3696C2ECA7C510A
Validity
Not Before: Dec 4 20:29:07 2025 GMT
Not After : Dec 11 20:29:07 2025 GMT
Subject: CN=6931ef13-f619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:87:83:2f:9d:ce:0c:e6:41:a5:ff:74:3d:
0f:dd:6b:98:d5:83:78:ca:66:fa:fe:77:03:cd:e9:
7a:5e:31:4d:e6:0f:50:63:ee:d7:69:f7:d7:85:09:
be:e0:69:35:2b:a7:2f:a4:f7:5d:ee:54:ec:af:7d:
b9:09:76:98:11:d5:05:35:db:a3:7b:67:42:81:5e:
43:18:0e:59:2f:eb:03:e2:b1:c9:ec:37:ae:89:2b:
65:1a:78:18:0f:7f:13:9e:0f:e5:2c:31:fb:f0:8c:
54:c3:82:f7:22:75:22:11:c5:bf:3f:19:77:19:93:
1f:79:46:40:c1:58:b2:a7:9b:4f:7c:6d:28:22:9d:
2a:45:91:f2:d7:fe:b0:b1:82:1f:73:4c:31:57:70:
cb:48:bc:3e:47:83:c4:eb:7a:6d:24:f9:23:f2:a8:
52:73:69:08:4d:02:e5:e2:4c:10:ed:7a:2c:31:82:
3c:cc:40:50:1b:43:32:dd:4c:5c:45:d1:6c:6a:10:
3e:6f:16:54:41:d7:75:43:6d:ba:59:c7:af:6f:30:
bd:d3:53:ff:0a:2f:eb:9f:70:82:89:88:09:51:ca:
94:af:d2:72:5f:40:fc:a9:69:9c:ec:5f:e5:b9:d3:
d3:33:e4:30:d2:e1:f1:3f:a8:31:92:de:d9:37:00:
b2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:F6:77:01:B6:CF:2A:8E:A5:1C:C8:0A:02:B8:60:42:0B:02:45
X509v3 Authority Key Identifier:
keyid:63:92:39:06:39:17:EE:92:C0:99:E4:6A:D3:69:6C:2E:CA:7C:51:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y5I5BjkX7pLAmeRq02lsLsp8UQo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2706/04D457C2330611EBA282D30AC4F9AE02/Y5I5BjkX7pLAmeRq02lsLsp8UQo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:77:02:8f:e4:99:ff:f4:b7:0a:f2:2d:ed:16:24:f3:34:68:
72:9d:b5:01:38:67:44:dd:e5:73:87:9c:b0:68:c3:98:45:b2:
ab:06:52:ed:53:03:7d:17:2e:4e:1a:0b:6a:34:3e:38:cd:65:
84:7c:dd:5e:6f:ad:86:85:4f:7a:20:de:80:f0:2c:37:9b:86:
2d:6d:f9:72:d5:64:df:e7:02:6e:ba:53:72:71:d2:f4:f9:ea:
fe:38:88:a8:56:2e:07:f9:fe:1f:14:ba:c8:1e:6a:a3:03:c3:
71:32:9f:b5:70:9f:5c:de:a3:1b:24:20:04:45:10:ae:2d:c3:
87:47:7f:e0:50:f6:98:79:a8:50:b6:4e:a7:f7:ef:34:86:55:
90:0a:62:c1:0f:bd:00:41:a4:a8:bc:92:79:44:a5:53:e9:4f:
4a:92:6e:3b:73:17:4b:e3:d1:47:e3:d5:26:3e:f5:90:72:0a:
8d:67:55:3a:81:a3:11:a7:58:62:57:db:fa:ae:0f:84:30:66:
46:5b:e8:cc:5d:7e:20:65:a9:51:c1:08:a4:5b:89:f3:fc:de:
0f:dc:5a:10:e2:2b:67:22:65:59:4c:dd:19:ec:bd:d6:ee:4c:
5f:bc:dd:2d:f8:34:40:73:a7:17:37:e1:2d:18:c8:84:88:85:
1d:88:cb:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDI3MDYxMTAvBgNVBAUTKDYzOTIzOTA2MzkxN0VFOTJDMDk5RTQ2QUQzNjk2QzJF
Q0E3QzUxMEEwHhcNMjUxMjA0MjAyOTA3WhcNMjUxMjExMjAyOTA3WjAYMRYwFAYD
VQQDEw02OTMxZWYxMy1mNjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2guHgy+dzgzmQaX/dD0P3WuY1YN4ymb6/ncDzel6XjFN5g9QY+7XaffXhQm+
4Gk1K6cvpPdd7lTsr325CXaYEdUFNduje2dCgV5DGA5ZL+sD4rHJ7DeuiStlGngY
D38Tng/lLDH78IxUw4L3InUiEcW/Pxl3GZMfeUZAwViyp5tPfG0oIp0qRZHy1/6w
sYIfc0wxV3DLSLw+R4PE63ptJPkj8qhSc2kITQLl4kwQ7XosMYI8zEBQG0My3Uxc
RdFsahA+bxZUQdd1Q226WcevbzC901P/Ci/rn3CCiYgJUcqUr9JyX0D8qWmc7F/l
udPTM+Qw0uHxP6gxkt7ZNwCyAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXD9ncB
ts8qjqUcyAoCuGBCCwJFMB8GA1UdIwQYMBaAFGOSOQY5F+6SwJnkatNpbC7KfFEK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjcwNi8wNEQ0NTdDMjMz
MDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdwTEFtZVJxMDJsc0xzcDhV
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1k1STVCamtYN3BMQW1lUnEwMmxzTHNwOFVRby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MjcwNi8wNEQ0NTdDMjMzMDYxMUVCQTI4MkQzMEFDNEY5QUUwMi9ZNUk1QmprWDdw
TEFtZVJxMDJsc0xzcDhVUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUdwKP5Jn/9LcK8i3tFiTzNGhynbUBOGdE3eVzh5ywaMOYRbKrBlLt
UwN9Fy5OGgtqND44zWWEfN1eb62GhU96IN6A8Cw3m4Ytbfly1WTf5wJuulNycdL0
+er+OIioVi4H+f4fFLrIHmqjA8NxMp+1cJ9c3qMbJCAERRCuLcOHR3/gUPaYeahQ
tk6n9+80hlWQCmLBD70AQaSovJJ5RKVT6U9Kkm47cxdL49FH49UmPvWQcgqNZ1U6
gaMRp1hiV9v6rg+EMGZGW+jMXX4gZalRwQikW4nz/N4P3FoQ4itnImVZTN0Z7L3W
7kxfvN0t+DRAc6cXN+EtGMiEiIUdiMu8
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:34:31 2025 by rpki-client