This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft
File: InYg_8vfrJXUbmodsxewi6VihIA.mft (raw, json)
Hash identifier: KGW1lXlOGPT8zhwI9DoqHxTAkKIuQdMcgGaCNmhMG6A=
Subject key identifier: 65:1A:3E:AD:B5:C6:99:73:C4:4E:AE:2F:BE:78:8E:A8:1F:B1:B7:FD
Authority key identifier: 22:76:20:FF:CB:DF:AC:95:D4:6E:6A:1D:B3:17:B0:8B:A5:62:84:80
Certificate issuer: /CN=A91D4781/serialNumber=227620FFCBDFAC95D46E6A1DB317B08BA5628480
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft
Manifest number: 1F
Signing time: Fri 05 Dec 2025 05:36:26 +0000
Manifest this update: Fri 05 Dec 2025 05:36:26 +0000
Manifest next update: Fri 12 Dec 2025 05:36:26 +0000
Files and hashes: 1: InYg_8vfrJXUbmodsxewi6VihIA.crl (hash: jQId9XuweAE47Ex3ic3nQ+vAxRnhGq50cJlb3l1TAzA=)
2: 9F7CD49AA55A11F0A8F84D83C4F9AE02.roa (hash: pbHyabcv277elA+5L6jLrPBHXOT6ujxTAobCaGjI5cg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.crl
rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4781, serialNumber=227620FFCBDFAC95D46E6A1DB317B08BA5628480
Validity
Not Before: Dec 5 05:36:26 2025 GMT
Not After : Dec 12 05:36:26 2025 GMT
Subject: CN=69326f5a-8865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:ee:4c:3b:35:58:13:ca:4b:3f:9a:57:32:
0e:af:d4:81:25:fe:fb:81:54:ba:2f:00:8d:fa:38:
77:4b:7a:fc:1f:92:07:f3:df:1c:ad:a8:82:2a:66:
92:3a:72:e7:03:a0:d6:30:27:57:fd:79:22:da:1f:
aa:79:b5:93:68:2b:07:85:c1:2c:cb:08:a8:93:b5:
b8:73:f0:f3:0d:df:30:4d:3d:60:85:5a:b8:79:45:
82:c5:30:ff:d6:a6:1a:3c:81:b6:36:83:43:ce:3f:
8e:4b:17:94:2b:d3:27:b1:90:e8:d8:66:fa:d9:cf:
fc:41:b0:67:6d:6b:9e:81:e4:a3:20:d5:8b:3f:c0:
a5:60:8e:af:11:2f:57:a1:b7:40:c1:3e:d6:45:49:
15:e2:4e:96:e2:75:b8:30:42:6f:20:80:4d:8e:7a:
50:b3:20:e4:c9:72:3c:c8:84:08:58:60:71:5b:a1:
7b:b1:42:be:40:8a:eb:28:1f:7f:c8:3d:8d:09:9c:
a3:82:af:f8:08:5b:c3:dc:d2:07:6b:c6:a8:b1:56:
a5:99:ff:c6:99:fb:ae:60:55:73:fa:17:b0:a7:5c:
52:b3:a7:4b:c4:97:16:47:15:41:d4:d3:6d:90:52:
ed:f9:43:50:b4:04:f5:e0:7f:b4:f9:c0:28:c3:ec:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1A:3E:AD:B5:C6:99:73:C4:4E:AE:2F:BE:78:8E:A8:1F:B1:B7:FD
X509v3 Authority Key Identifier:
keyid:22:76:20:FF:CB:DF:AC:95:D4:6E:6A:1D:B3:17:B0:8B:A5:62:84:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/InYg_8vfrJXUbmodsxewi6VihIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4781/D90042CEA48D11F0AD97F016C4F9AE02/InYg_8vfrJXUbmodsxewi6VihIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:c3:c9:b6:90:4c:ee:9c:91:03:fd:ca:cc:43:22:d9:d9:ed:
64:9c:7f:1e:22:b1:bd:ae:cc:6b:b4:16:f3:25:ae:b4:98:b0:
9e:6e:a2:1c:27:56:6e:67:21:7a:29:a6:1a:51:f8:1b:31:a8:
88:9f:26:da:c8:d6:ea:9f:86:05:33:d6:01:39:46:7d:25:71:
79:48:b3:a9:96:d5:9a:d3:54:70:32:9b:38:a3:c7:46:bb:77:
db:67:d1:09:68:cb:a6:ee:3e:17:c8:cc:cd:b6:a1:22:52:bc:
54:29:b4:46:29:cc:6d:9c:81:90:62:f6:45:48:5e:90:bc:19:
62:28:2d:7c:58:1e:e7:c2:78:ca:53:4b:96:41:95:6c:bd:c5:
54:bb:44:5b:3d:ca:b7:13:cb:2c:64:b3:74:14:58:23:b7:76:
f2:20:9b:cd:1b:9e:70:de:be:c5:c5:63:96:fc:66:4d:8f:07:
6b:7d:17:0a:ec:5d:d4:40:08:fb:80:81:f9:60:00:c1:68:d0:
a2:d7:da:7e:4d:b3:7a:18:9a:17:dc:d6:66:2c:bd:9a:17:51:
d5:48:b7:e7:76:f9:61:aa:b9:bc:d1:01:c1:f4:0a:54:ef:d9:
82:ae:3f:30:46:e8:03:62:97:ef:f0:36:f8:eb:33:a7:4c:0a:
de:40:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:08:09 2025 by rpki-client