This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
File: Y19XnOBVlw4BocO3dQIcjj4ieIc.mft (raw, json)
Hash identifier: 0Hx4vk+SV1hGnVFsq2iqo3eqfOn8tz5+IDRA/I1OSLg=
Subject key identifier: 7F:AC:32:E1:E2:C2:EB:79:69:FF:04:8D:41:D0:AE:77:31:18:41:70
Authority key identifier: 63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
Certificate issuer: /CN=A91F4294/serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Certificate serial: 0E5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
Manifest number: 0E56
Signing time: Thu 04 Dec 2025 17:19:25 +0000
Manifest this update: Thu 04 Dec 2025 17:19:25 +0000
Manifest next update: Thu 11 Dec 2025 17:19:25 +0000
Files and hashes: 1: Y19XnOBVlw4BocO3dQIcjj4ieIc.crl (hash: hauihG22yzgDEZQzZHVkxrVzWul05keuLHP2kaE0PT8=)
2: 1E018994AEBF11E993F33C65C4F9AE02.roa (hash: VAz7Q8OmwNVtqjw21t41eYyn3+glN8lqbyiXL2P+yek=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 17:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3678 (0xe5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4294, serialNumber=635F579CE055970E01A1C3B775021C8E3E227887
Validity
Not Before: Dec 4 17:19:25 2025 GMT
Not After : Dec 11 17:19:25 2025 GMT
Subject: CN=6931c29d-109e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:33:d7:df:d2:6b:e8:78:84:72:27:ff:61:
44:a1:ee:9d:f9:4c:d2:cb:15:21:f5:c7:a2:81:9a:
df:6c:87:5d:1c:35:af:54:2c:fc:84:32:2c:ba:3d:
6c:e0:e9:a3:4d:8b:e6:d6:da:47:76:32:58:f5:26:
5a:95:d8:5f:24:3f:e4:3e:06:fe:fd:34:fb:84:7a:
77:a6:cb:2f:7e:6f:47:0e:47:7f:13:1b:c1:b0:c5:
cd:57:26:a1:db:d0:be:70:29:38:63:4d:57:fc:56:
fd:03:5c:79:3c:69:39:94:cf:ec:2b:27:9e:b6:dc:
e6:7a:31:79:fc:42:76:99:20:df:0b:55:8d:82:d2:
8c:1d:89:57:1f:15:4c:2b:fc:28:af:56:49:29:e3:
68:37:a9:b2:7b:a1:4d:46:18:8b:7f:e3:7c:a4:3e:
3b:a6:66:ad:f1:4f:24:04:26:a4:13:a4:d0:e6:75:
ee:a6:2c:a4:a3:c8:41:ff:27:c2:56:35:b3:4b:08:
3e:c8:4d:ed:b8:fa:fd:bb:d6:31:d1:8d:71:98:6d:
35:db:c6:88:fc:60:44:63:54:1c:f6:1a:a7:66:bc:
19:87:5d:3b:24:c8:86:e8:c1:cf:85:c2:fb:a9:40:
c7:2b:4f:40:2a:33:74:32:ef:ce:c5:3c:52:01:61:
01:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AC:32:E1:E2:C2:EB:79:69:FF:04:8D:41:D0:AE:77:31:18:41:70
X509v3 Authority Key Identifier:
keyid:63:5F:57:9C:E0:55:97:0E:01:A1:C3:B7:75:02:1C:8E:3E:22:78:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y19XnOBVlw4BocO3dQIcjj4ieIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4294/0CB5EAFAAEBE11E980FB4E63C4F9AE02/Y19XnOBVlw4BocO3dQIcjj4ieIc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:b5:fb:db:9d:d1:90:01:1b:22:d9:10:97:bb:d8:25:99:8d:
93:c7:b2:96:ec:37:fb:e1:c1:c9:41:e5:98:b4:5b:1a:0c:d1:
a5:ea:f3:21:30:aa:3f:aa:0f:47:3a:7f:91:34:be:ba:ac:ca:
30:bb:58:cc:45:df:09:60:7e:de:9f:b8:d3:29:96:f6:25:7b:
bb:6c:e3:12:08:ad:03:d0:53:bf:cd:74:25:f8:89:c7:0c:b2:
58:a4:46:4c:b3:a5:0a:8c:45:dd:77:8d:9e:ad:bb:0a:f5:c4:
5c:ba:ae:79:ec:ad:98:53:e7:81:2f:be:c2:35:3c:47:2c:4d:
51:16:37:62:b4:9d:17:9b:94:1f:10:48:fa:59:20:04:f1:19:
22:31:81:82:ad:8b:f6:8a:71:a7:81:7b:8c:ed:79:fc:b9:de:
94:e4:e4:ae:5c:2f:dd:97:e2:bf:39:de:5b:19:29:5a:46:20:
f3:06:e9:12:a0:8f:56:4f:d3:a8:a7:c0:1c:0c:78:d9:a4:6c:
93:e9:e0:a9:a8:cc:70:f0:ea:22:11:c3:00:12:6c:31:76:df:
09:a4:53:b7:59:3d:22:88:bf:97:87:41:57:ff:f6:7c:02:24:
81:a6:7a:e3:7e:6c:f3:c6:50:a8:4f:31:42:4e:1a:51:23:ee:
61:76:37:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQyOTQxMTAvBgNVBAUTKDYzNUY1NzlDRTA1NTk3MEUwMUExQzNCNzc1MDIxQzhF
M0UyMjc4ODcwHhcNMjUxMjA0MTcxOTI1WhcNMjUxMjExMTcxOTI1WjAYMRYwFAYD
VQQDEw02OTMxYzI5ZC0xMDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs6Uz19/Sa+h4hHIn/2FEoe6d+UzSyxUh9ceigZrfbIddHDWvVCz8hDIsuj1s
4OmjTYvm1tpHdjJY9SZaldhfJD/kPgb+/TT7hHp3pssvfm9HDkd/ExvBsMXNVyah
29C+cCk4Y01X/Fb9A1x5PGk5lM/sKyeettzmejF5/EJ2mSDfC1WNgtKMHYlXHxVM
K/wor1ZJKeNoN6mye6FNRhiLf+N8pD47pmat8U8kBCakE6TQ5nXupiyko8hB/yfC
VjWzSwg+yE3tuPr9u9Yx0Y1xmG0128aI/GBEY1Qc9hqnZrwZh107JMiG6MHPhcL7
qUDHK09AKjN0Mu/OxTxSAWEBiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+sMuHi
wut5af8EjUHQrncxGEFwMB8GA1UdIwQYMBaAFGNfV5zgVZcOAaHDt3UCHI4+IniH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI5NC8wQ0I1RUFGQUFF
QkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3NEJvY08zZFFJY2pqNGll
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kxOVhuT0JWbHc0Qm9jTzNkUUljamo0aWVJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDI5NC8wQ0I1RUFGQUFFQkUxMUU5ODBGQjRFNjNDNEY5QUUwMi9ZMTlYbk9CVmx3
NEJvY08zZFFJY2pqNGllSWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5tfvbndGQARsi2RCXu9glmY2Tx7KW7Df74cHJQeWYtFsaDNGl6vMh
MKo/qg9HOn+RNL66rMowu1jMRd8JYH7en7jTKZb2JXu7bOMSCK0D0FO/zXQl+InH
DLJYpEZMs6UKjEXdd42erbsK9cRcuq557K2YU+eBL77CNTxHLE1RFjditJ0Xm5Qf
EEj6WSAE8RkiMYGCrYv2inGngXuM7Xn8ud6U5OSuXC/dl+K/Od5bGSlaRiDzBukS
oI9WT9Oop8AcDHjZpGyT6eCpqMxw8OoiEcMAEmwxdt8JpFO3WT0iiL+Xh0FX//Z8
AiSBpnrjfmzzxlCoTzFCThpRI+5hdjdl
-----END CERTIFICATE-----
Generated at Sat Dec 6 11:20:53 2025 by rpki-client