This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
File: IYqKoFAmewgF4_3IqTm_j7ywAQE.mft (raw, json)
Hash identifier: rC1wotemq3j2tQgyDx45KP79vz9syMO9k+4BJCiYFVQ=
Subject key identifier: 27:A3:BB:79:80:C1:18:9E:1B:8C:9D:7F:63:2B:7C:4F:78:8C:EB:9C
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial: 0719
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
Manifest number: 06E4
Signing time: Sat 20 Dec 2025 21:32:30 +0000
Manifest this update: Sat 20 Dec 2025 21:32:30 +0000
Manifest next update: Sat 27 Dec 2025 21:32:30 +0000
Files and hashes: 1: IYqKoFAmewgF4_3IqTm_j7ywAQE.crl (hash: GK+Aql+DWRIC9/dgalwlYp20MgatFyjKf7o739x2dQg=)
2: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (hash: EbkFTiXwUuM4uKc+Le4LDTESLEZ3plcvfpf4GyS68jQ=)
3: 7C7AE9B4A69D11ED970A2E1EC4F9AE02.roa (hash: s8KDuc2GwuTam8uLkRKj65TwjJKxip9pxFU2PqilzJk=)
4: 7D4AEECAA69D11ED970A2E1EC4F9AE02.roa (hash: wn/BM8TotG6wUb8Xjf5M9ZHwY2tRk82b/jlK0HvYDSc=)
5: EDA092C2A72B11EDAC3DA56CC4F9AE02.roa (hash: SjDNqIV8bfIECZ7LITLY5GAVFbuQWPpjP+0XRPHjJnM=)
6: 7DFD24A0A69D11ED970A2E1EC4F9AE02.roa (hash: eCzZBGM4yO3X43+DBBXORK5pWKKgJ5ykZOExObNr3Lw=)
7: A08AFBB284F211EE89828225C4F9AE02.roa (hash: +rlXfE57KQq96FSve4vj7ymxepa9D4fVPV/TYC7d4nQ=)
8: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (hash: PNBgm38gEmoFv4lqFvpAuI8EsQlFaIm9tEIE9Q4A0Q8=)
9: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (hash: MaAskf0TRxO3f2o7SBOUwJQzY2TsNLzK4Ofbrs+UHf4=)
10: EC545C28A72B11EDAC3DA56CC4F9AE02.roa (hash: uv9fFw+pkg9pgF9/d+q2xTVafbCWlh0YWB4iJUOPl98=)
11: 005CDC821F1411EC85E08546C4F9AE02.roa (hash: UjSbQygt5LC2l7V88EjIn2A0ZEggmitZY+iL8OvjiZ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 21:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1817 (0x719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Validity
Not Before: Dec 20 21:32:30 2025 GMT
Not After : Dec 27 21:32:30 2025 GMT
Subject: CN=694715ee-a68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:9c:7b:17:b6:a3:d6:87:58:4c:2d:c8:8d:
82:52:79:ab:2a:50:d1:52:12:a6:d9:91:eb:94:08:
b8:66:71:f4:c5:1e:5f:4c:5c:f1:62:8b:d4:4a:01:
5f:f9:20:cd:1f:c5:44:cc:db:cd:d0:07:f1:45:4c:
8a:d2:6a:99:6c:5a:1d:44:f9:1f:f8:f3:75:65:a3:
04:df:f5:b7:ad:2e:69:e1:bb:a3:34:ec:7b:7f:57:
79:99:64:0d:18:66:6a:3d:55:7c:9d:c5:73:ba:7c:
c7:8e:86:5d:06:d2:bd:44:cc:5e:98:1b:4a:c1:cf:
89:bc:8f:d4:35:72:73:4b:cf:70:b1:42:2a:f3:3e:
d2:ab:2c:88:1f:d5:23:c7:76:60:fe:2b:af:a8:0d:
96:4a:57:af:63:48:18:63:07:ec:52:11:a3:4b:c3:
24:08:de:9b:ee:f8:a9:f8:62:c0:be:ee:92:c4:0f:
20:28:1a:f9:c2:df:e4:5d:d0:92:9f:fa:0a:9b:ac:
3a:25:9a:13:e5:d3:fb:01:e7:da:4e:61:35:1c:e7:
81:ed:09:bc:57:db:2b:a6:e5:98:df:18:34:aa:35:
c4:50:af:fd:4f:f8:68:e5:60:5b:4a:69:ba:fd:95:
cf:c0:5b:e0:a9:23:28:c9:cb:8f:2a:4b:9e:98:e0:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A3:BB:79:80:C1:18:9E:1B:8C:9D:7F:63:2B:7C:4F:78:8C:EB:9C
X509v3 Authority Key Identifier:
keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:7d:a7:f2:73:10:6e:39:58:ea:4a:c4:ce:9c:7e:fc:ab:38:
93:b8:02:94:a8:6a:43:27:4c:09:32:d7:20:77:b5:72:15:66:
51:4c:04:aa:82:ee:0d:b0:54:6d:f6:5c:5e:6d:4f:b6:10:7b:
30:c8:f0:1b:ae:3d:5a:b5:d5:f7:73:88:06:dd:1c:28:23:92:
74:7c:5d:c7:5e:01:e9:24:2f:e2:d4:ba:7e:ab:49:86:d5:0c:
ca:a6:6b:d4:f2:0c:ca:1d:bb:0b:4c:48:3f:78:28:c9:3f:a0:
1d:4f:de:17:c2:6e:89:ff:e8:5f:5b:ea:47:6f:a0:ab:35:c9:
e3:f2:cb:e6:44:3b:28:48:05:42:a7:66:5b:3a:56:8f:74:65:
b4:33:ab:56:2b:d0:23:38:1c:90:37:10:f5:2b:46:2a:cc:2f:
73:62:17:73:c4:bf:e6:db:e8:15:c2:93:9f:fa:a3:75:6d:ca:
80:51:a3:93:e3:65:99:72:04:73:2a:65:0c:56:bc:ef:1e:d4:
23:55:a8:b5:b5:6b:94:21:c0:48:55:e4:04:82:7c:2b:1e:6c:
e1:e4:e2:b3:41:c7:43:60:92:4f:3c:c5:e9:42:8d:5e:86:98:
91:d7:36:ec:81:2c:e3:27:e8:b6:7c:f3:7a:ba:0a:9a:55:e8:
20:8c:e4:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG
QkNCMDAxMDEwHhcNMjUxMjIwMjEzMjMwWhcNMjUxMjI3MjEzMjMwWjAYMRYwFAYD
VQQDDA02OTQ3MTVlZS1hNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzoOcexe2o9aHWEwtyI2CUnmrKlDRUhKm2ZHrlAi4ZnH0xR5fTFzxYovUSgFf
+SDNH8VEzNvN0AfxRUyK0mqZbFodRPkf+PN1ZaME3/W3rS5p4bujNOx7f1d5mWQN
GGZqPVV8ncVzunzHjoZdBtK9RMxemBtKwc+JvI/UNXJzS89wsUIq8z7SqyyIH9Uj
x3Zg/iuvqA2WSlevY0gYYwfsUhGjS8MkCN6b7vip+GLAvu6SxA8gKBr5wt/kXdCS
n/oKm6w6JZoT5dP7AefaTmE1HOeB7Qm8V9srpuWY3xg0qjXEUK/9T/ho5WBbSmm6
/ZXPwFvgqSMoycuPKkuemOD79QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeju3mA
wRieG4ydf2MrfE94jOucMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2
QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB
UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MDZBQS84NjU4RTQ2Njg2QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3
Z0Y0XzNJcVRtX2o3eXdBUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCfafycxBuOVjqSsTOnH78qziTuAKUqGpDJ0wJMtcgd7VyFWZRTASq
gu4NsFRt9lxebU+2EHswyPAbrj1atdX3c4gG3RwoI5J0fF3HXgHpJC/i1Lp+q0mG
1QzKpmvU8gzKHbsLTEg/eCjJP6AdT94Xwm6J/+hfW+pHb6CrNcnj8svmRDsoSAVC
p2ZbOlaPdGW0M6tWK9AjOByQNxD1K0YqzC9zYhdzxL/m2+gVwpOf+qN1bcqAUaOT
42WZcgRzKmUMVrzvHtQjVai1tWuUIcBIVeQEgnwrHmzh5OKzQcdDYJJPPMXpQo1e
hpiR1zbsgSzjJ+i2fPN6ugqaVeggjOTr
-----END CERTIFICATE-----
Generated at Sun Dec 21 07:46:13 2025 by rpki-client