This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json)
Hash identifier: zR7oKuhNgWKnqPeoHtocXrGS+i/F9cJff4M+I1FVeVU=
Subject key identifier: AF:CD:D5:D5:0F:FD:60:BD:C2:E2:EF:5F:39:C5:25:1D:AF:FD:CE:1F
Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17
Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017
Certificate serial: 06DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
Manifest number: 06DE
Signing time: Thu 04 Dec 2025 20:51:23 +0000
Manifest this update: Thu 04 Dec 2025 20:51:23 +0000
Manifest next update: Thu 11 Dec 2025 20:51:23 +0000
Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: LQx117aJ8FpOJ3LqeCLYzihWTLsUcq2JkQ3SMLm8oC0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl
rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758 (0x6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017
Validity
Not Before: Dec 4 20:51:23 2025 GMT
Not After : Dec 11 20:51:23 2025 GMT
Subject: CN=6931f44b-b947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:77:1f:72:cc:fd:dd:0c:ba:45:19:51:65:
f4:79:b4:9a:f9:d4:bb:cc:d2:ab:f6:b7:09:35:f0:
f8:11:99:91:e0:2f:3b:02:47:86:2f:a8:6c:b6:d2:
7c:17:e5:de:43:54:6b:4e:7a:00:b2:5d:f1:d9:8b:
7a:55:21:f9:60:7d:2b:bd:f9:42:82:37:ce:1e:67:
fc:db:16:b9:38:26:90:89:d2:31:c0:2d:bd:3a:9b:
0c:d3:58:a5:6e:b5:ef:09:c3:91:b7:0a:ec:4b:5f:
1a:04:09:5a:39:07:eb:1a:91:a0:ad:84:e9:4f:9f:
b9:62:a2:49:81:d5:a4:7b:c7:7c:27:53:d7:98:b0:
c5:b8:11:80:c9:b5:98:d6:fa:6f:a2:2d:f6:01:c2:
27:11:c0:6c:72:4d:70:fe:6f:01:db:55:96:38:1c:
c6:d2:28:4d:b4:c7:5e:ab:bd:05:76:38:7a:dc:2f:
f9:dd:54:fe:46:c9:dd:24:ba:37:ca:74:50:74:52:
42:96:72:ab:41:0b:bc:46:de:fb:54:a6:be:fc:62:
c8:b8:2c:cc:30:cd:d8:3f:c1:be:47:56:bc:45:85:
c4:a3:66:35:f2:f9:dd:c5:fe:ad:f3:4c:ea:84:50:
9f:22:2e:88:ec:0d:c0:30:a1:3d:15:c7:01:06:51:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CD:D5:D5:0F:FD:60:BD:C2:E2:EF:5F:39:C5:25:1D:AF:FD:CE:1F
X509v3 Authority Key Identifier:
keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:a6:67:11:95:21:9d:4a:e2:b3:0e:7a:cf:e2:fc:18:43:53:
e2:a9:a4:25:90:da:e3:27:e1:53:58:cd:64:4d:12:d0:82:bd:
1a:ba:5d:ee:34:fa:23:4c:f2:35:28:08:d3:4f:ba:7a:82:61:
17:bf:c5:42:fa:94:33:50:55:f9:af:d0:65:f2:f5:99:eb:c2:
88:a1:6d:d9:a2:28:49:3e:f7:0e:5a:5a:85:75:a3:08:c8:6c:
3a:48:46:f0:6f:07:a6:c3:8f:dc:65:e8:c1:41:80:45:d8:42:
a0:94:e5:f6:27:42:bf:96:a5:23:0e:cf:60:ce:4b:d7:f1:f0:
c7:f0:7a:36:59:cc:a1:ec:e2:2f:8d:6b:65:c8:f6:fe:95:c9:
cf:99:0c:95:44:87:8d:53:f0:91:03:1a:77:af:25:1f:a2:0f:
ff:df:e8:2a:82:1c:29:87:85:a0:da:72:4e:89:5d:75:cc:c1:
47:73:5c:0c:57:97:72:e1:68:66:41:da:2d:45:b7:a9:74:a0:
e4:62:cc:ba:42:4d:ed:ac:e7:da:1b:1e:3a:53:3b:21:b7:c1:
50:f7:56:a5:10:b3:fd:aa:a3:b7:d5:f4:56:d0:3b:2c:44:95:
d2:74:cd:d1:89:41:8a:9b:dd:6d:15:ae:1b:15:de:47:07:14:
93:ee:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:01:32 2025 by rpki-client