This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json)
Hash identifier: 2uLCYdlidLKJwHiMbcH9cCLlBL9u5BlHe0+qz9uZAng=
Subject key identifier: 3F:BD:BF:04:A9:E4:6A:9F:91:AA:6C:95:33:B7:EA:9B:0F:41:EE:17
Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F
Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
Manifest number: 01C6
Signing time: Fri 05 Dec 2025 01:12:21 +0000
Manifest this update: Fri 05 Dec 2025 01:12:20 +0000
Manifest next update: Fri 12 Dec 2025 01:12:20 +0000
Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: G8016cuvTvOPwWa7jFSfvJHso7kP1yPEJePih018kxU=)
2: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: lTkc7C0RlmKbFSYdbjr+dPk/Bz3louAuGeeNLMUaa3U=)
3: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: OFcdlnYr84QtfXIjFkq221jW9RB67N6+iA5hYs6y+y0=)
4: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: kXqagkJo/A0eBKA6rzsFPrgkBqXmX4C+r5kQGo8fciw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl
rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:12:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F
Validity
Not Before: Dec 5 01:12:20 2025 GMT
Not After : Dec 12 01:12:20 2025 GMT
Subject: CN=69323174-b0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:cb:ac:7a:39:bf:a4:a4:dc:6c:12:3e:76:
f6:fe:d1:c9:e4:7c:c4:7d:43:ef:ae:a0:cc:71:eb:
60:a2:bf:e1:4b:2e:dd:02:ad:13:3d:1f:11:b5:e2:
b4:8b:2b:7a:d9:3c:76:4c:46:b0:02:f8:f4:5b:09:
ee:6f:a9:3f:5c:d9:42:0c:10:52:85:54:1d:65:7e:
4f:8f:48:d5:79:cb:86:1b:7b:30:99:91:76:6d:e8:
fe:73:66:c4:58:a8:c6:a0:ed:42:1d:46:f1:17:17:
53:be:1e:8a:09:ab:12:69:53:40:5b:2b:81:8c:e8:
4b:39:23:a4:8f:58:38:0a:f1:01:4c:39:56:9d:ff:
0b:64:87:f1:ff:3c:60:1f:8e:3d:94:77:a2:a1:be:
5d:d0:35:76:65:31:6d:9e:4a:cb:a2:e5:5e:92:a3:
e7:3e:99:fd:38:9d:d5:c3:20:55:c3:af:3f:39:1f:
ea:6b:2b:34:23:54:9e:55:4e:73:09:21:78:e8:f0:
d8:85:5d:12:1f:1b:cd:32:ff:d6:34:f8:a0:e0:4e:
50:2f:7b:b6:67:7e:bd:8f:f7:19:9e:8d:60:3e:2f:
1f:5d:2f:8c:fe:60:fd:68:52:6e:f5:86:19:3f:6a:
c0:f6:a1:ed:58:90:88:7c:f0:28:f8:30:dd:77:cd:
c1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BD:BF:04:A9:E4:6A:9F:91:AA:6C:95:33:B7:EA:9B:0F:41:EE:17
X509v3 Authority Key Identifier:
keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:44:7c:d6:74:39:6f:d0:43:99:f1:2e:30:88:2b:e7:e9:eb:
88:fb:7a:e7:83:31:a3:9e:48:0b:99:2d:b0:19:a8:30:1a:49:
54:69:f9:da:e0:7d:74:19:69:44:8b:eb:4c:d8:80:44:1b:06:
c7:95:23:94:ef:b3:ec:f2:e2:3e:f6:15:c8:71:20:f1:f8:ba:
2f:a9:7d:66:cf:ea:aa:76:1f:80:3a:3f:8f:78:f0:04:8a:db:
c8:65:66:5a:6f:56:44:7f:58:08:78:fa:20:51:18:b8:34:b2:
19:21:d9:e4:9b:21:81:5a:66:7e:a5:7b:2c:ee:a8:08:27:cd:
b2:cc:ee:e3:9b:f3:3a:30:fd:4b:79:81:2e:9d:82:0c:c7:9d:
f8:93:59:52:4c:13:17:56:1f:b9:cf:57:ba:41:70:63:3f:cc:
a2:fb:46:5e:aa:35:4b:e2:1e:43:62:26:86:7c:ba:99:13:cd:
99:7d:56:85:13:6b:df:41:cb:55:6e:37:50:f6:50:7d:0d:47:
8a:c6:c6:cb:16:bd:0d:43:02:3c:7d:0c:a0:ea:6d:43:e4:5a:
ef:27:2c:48:00:40:87:2a:01:9a:f2:0c:4d:55:4d:b3:56:b7:
88:80:c0:07:26:b7:b5:af:0f:79:13:0f:9f:5b:af:f3:b3:0a:
64:96:2a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:12:58 2025 by rpki-client