This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
File: yGA2V1UkSO1buu1xck0iIPA798Y.mft (raw, json)
Hash identifier: lf4O8oCiij/mrdLORMxxfIceWBitHAr+P52307WbRb4=
Subject key identifier: 2B:65:AB:D8:72:72:5C:5A:0F:F3:1C:F7:DB:2C:34:B9:5F:DC:05:DC
Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
Manifest number: 010B
Signing time: Fri 05 Dec 2025 03:05:12 +0000
Manifest this update: Fri 05 Dec 2025 03:05:11 +0000
Manifest next update: Fri 12 Dec 2025 03:05:11 +0000
Files and hashes: 1: yGA2V1UkSO1buu1xck0iIPA798Y.crl (hash: dct2ygb9ljt+kPY4Xf9MOAJh+6znKPU5hV7Yxr1REig=)
2: 68EBA63A48B911EFB80D9535C4F9AE02.roa (hash: SDdYRvXnG416X1QTBXKH/HiVb0zTXNC7wcw8Ko4jVbs=)
3: C006CA2248B311EFB8A4C178C4F9AE02.roa (hash: BB5/p5ExgMeQd5Go8UNqIFMq/xQWZ4tohFPvDD4Zv98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6
Validity
Not Before: Dec 5 03:05:11 2025 GMT
Not After : Dec 12 03:05:11 2025 GMT
Subject: CN=69324be7-f7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:46:07:d6:68:63:b4:bf:22:40:91:71:c0:0c:
cb:6d:bd:ec:13:dc:20:fd:6e:69:6f:07:28:66:42:
d4:1b:86:15:3e:4f:c8:a2:29:a3:2b:6d:cc:7c:82:
1d:c6:9b:9d:ab:05:62:6f:99:ee:5c:10:f8:3c:c0:
1c:af:34:f5:f8:d9:94:ac:40:83:cf:ce:52:7a:b3:
da:cc:b8:cc:90:f6:41:0c:4c:a7:a4:69:80:cd:42:
23:a3:84:98:be:29:35:d5:a3:2c:74:ce:ce:31:ff:
5f:a0:d4:54:d3:18:1e:38:3c:43:46:0b:32:66:4a:
68:78:7d:ba:51:cf:92:20:71:8e:b6:24:79:54:4b:
d6:d1:f9:a0:4e:70:cf:a5:29:d8:c8:f8:03:f6:f9:
19:c6:84:76:4b:69:d2:b7:fc:4c:3a:eb:72:05:6a:
5e:87:ef:91:ee:dc:19:f1:43:65:17:d2:0d:a9:8e:
12:99:0f:08:9c:a3:dc:d8:1e:16:31:68:9c:95:14:
c4:8c:d4:10:df:9f:9c:db:e3:a0:75:96:d5:a5:9f:
4a:47:e9:eb:9b:e4:7e:c9:0b:ce:59:f3:53:41:9a:
c9:18:d3:9c:20:3c:8b:99:63:79:b5:15:37:b8:a3:
81:d3:a0:02:dd:23:19:24:7b:ae:43:c7:df:03:63:
09:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:65:AB:D8:72:72:5C:5A:0F:F3:1C:F7:DB:2C:34:B9:5F:DC:05:DC
X509v3 Authority Key Identifier:
keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7c:3a:f5:a4:f2:2a:f5:c9:d7:96:ab:4d:72:32:68:61:88:
12:57:df:7b:57:91:42:10:a1:91:e1:04:4d:c6:c8:8c:4a:ff:
13:dc:3c:6e:b8:ad:35:36:ff:90:63:9e:a2:09:d0:2e:79:13:
b0:b7:28:00:cc:47:d3:c6:17:d8:c6:f3:90:1f:77:49:31:a0:
43:2c:46:5c:be:85:80:cb:c2:a0:f5:75:dc:92:bf:d8:be:85:
91:fd:ad:8c:8d:39:4b:f1:03:3a:57:55:07:5e:e6:84:2c:8c:
cc:c8:8f:95:1a:8e:b3:f6:46:0a:d9:c5:c2:21:e8:34:9d:98:
fd:7d:2c:39:79:e6:e5:58:30:cc:9d:bb:e0:e3:65:60:1a:ff:
10:d9:9a:71:85:79:0c:01:6a:63:4b:9d:03:a4:8e:2b:4a:ec:
27:2f:38:6f:ad:8e:07:74:af:fc:89:d2:9f:ab:04:a3:51:63:
73:87:3e:d9:c1:50:c9:b8:df:dd:48:15:c4:bb:d1:45:41:90:
a1:76:58:b5:15:b0:06:3d:82:1e:b9:fc:02:2e:65:56:d3:8c:
87:ad:78:6d:11:d7:a9:ea:a5:6a:61:8b:b7:6b:3c:2a:26:7c:
a9:6d:7b:ca:f2:b8:24:86:21:20:0b:6f:cd:81:87:df:a3:c9:
94:19:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:59:16 2025 by rpki-client