This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json)
Hash identifier: 1M9mFvUQWT1/d4DIwuOVPF1uibWPwe1HBRzUixQbECI=
Subject key identifier: 8A:52:EF:0C:3B:98:6C:7D:C9:98:E5:75:7E:E4:CB:D9:A0:42:01:D4
Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
Certificate serial: 06CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
Manifest number: 06BF
Signing time: Sun 28 Dec 2025 21:30:47 +0000
Manifest this update: Sun 28 Dec 2025 21:30:46 +0000
Manifest next update: Sun 04 Jan 2026 21:30:46 +0000
Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: MIpPUDWe4VkNcLdSFM7n9tzlv40Tu5XyesmEDHpw/vg=)
2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: erfaODFOCzcH5Y8Uxve2UG+lwqlcZgOFKf0CxYTQBCg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl
rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Jan 2026 21:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739 (0x6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91293E9, serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C
Validity
Not Before: Dec 28 21:30:46 2025 GMT
Not After : Jan 4 21:30:46 2026 GMT
Subject: CN=6951a187-0c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:fc:b0:ff:37:00:7e:66:a6:ef:0b:90:43:
a9:45:bd:f0:d3:76:7c:03:d6:2e:e8:b3:d3:e1:7a:
48:ec:5c:9c:3c:db:ac:29:bc:a8:26:ed:b9:60:dd:
38:48:3c:74:9d:19:db:43:b1:7f:2a:88:f5:b1:3e:
6d:72:a9:47:e2:84:b3:f0:52:ba:54:ec:43:11:e6:
8d:75:f0:df:1f:f0:43:6e:70:32:86:14:fc:60:1c:
0f:17:f0:38:6d:ef:b4:7c:2d:37:c9:78:fe:9b:89:
05:a0:e8:f0:ae:aa:ee:ad:bb:c6:fb:f9:e1:4d:04:
67:97:8d:b5:29:84:49:a8:4f:0c:a9:c7:f5:e0:97:
bd:12:e8:5b:90:6e:f7:46:49:5d:cb:12:e0:78:9a:
f0:d9:25:10:79:4d:15:27:0d:d1:1a:62:bc:d7:f1:
2f:5b:14:c8:d2:26:31:4e:9b:ae:9b:33:7d:9d:81:
43:e2:cf:2f:c3:42:d2:ef:54:d0:0e:a7:55:58:0e:
2f:8e:e4:68:d3:d5:b6:f6:41:75:fb:a8:61:f6:a2:
14:a5:30:7c:b2:bf:4b:de:ae:e8:51:8f:0a:37:2f:
10:41:88:23:2e:37:fe:3d:dd:21:1e:0b:5b:21:c9:
33:5d:39:8a:95:ca:94:00:96:8d:52:7b:89:3e:e4:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:52:EF:0C:3B:98:6C:7D:C9:98:E5:75:7E:E4:CB:D9:A0:42:01:D4
X509v3 Authority Key Identifier:
keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e3:37:fd:35:13:32:2d:a7:7d:b4:85:7e:da:b2:16:1b:1e:
b0:d4:6f:24:2c:1e:59:47:15:1f:5b:1a:4f:3d:cb:d9:a4:7c:
4d:31:d8:c4:48:ba:58:e5:a7:3e:2b:23:9a:11:1b:92:08:44:
74:74:e7:65:eb:cc:47:9e:63:80:fb:8a:1e:6e:81:a5:61:e6:
59:6e:02:76:e8:5a:d6:b8:52:9b:ea:96:a6:d2:bf:48:3a:7c:
1c:e4:b4:a9:67:cd:2f:99:a4:18:90:a4:a6:14:d1:e4:1e:8a:
6d:37:3d:6a:12:65:d5:1a:0c:7a:37:85:e9:4d:ae:88:28:87:
83:0e:ab:6d:af:0d:90:c8:bf:6c:ae:aa:96:78:f2:f4:48:5b:
43:b8:b0:d4:21:6c:28:e0:ac:29:0c:96:15:74:5c:d2:44:2a:
51:2f:81:25:7c:e7:3d:13:22:f5:80:e1:5b:4e:da:cd:42:bf:
b8:00:b6:c1:cf:04:c9:ca:c0:22:2a:0b:9d:1e:05:bd:04:1a:
12:2b:e3:6f:c4:84:3c:2d:4f:d9:5b:09:58:b2:db:be:cd:dd:
df:d9:2e:c0:1d:94:0c:dc:e3:e8:78:8e:64:22:de:de:84:85:
77:3a:e3:12:72:a5:bd:56:b4:58:9c:12:73:10:ad:48:90:06:
28:02:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:30:17 2025 by rpki-client