This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
File: _x_VyU8S81-tE63yeZqJj94Gysk.mft (raw, json)
Hash identifier: atpO60Hw6aZwo6nolcHTTysMSxHOVzha4OKYmkLykhk=
Subject key identifier: AC:F2:37:37:54:6E:BC:2F:6B:F2:17:2A:10:FC:3E:7A:AE:14:F0:1D
Authority key identifier: FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
Certificate issuer: /CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
Manifest number: 011E
Signing time: Thu 25 Dec 2025 03:49:55 +0000
Manifest this update: Thu 25 Dec 2025 03:49:54 +0000
Manifest next update: Thu 01 Jan 2026 03:49:54 +0000
Files and hashes: 1: _x_VyU8S81-tE63yeZqJj94Gysk.crl (hash: wa1maYUVorVqzZB/5WyQNLfwWQHGcwsXAtHWAvw+UOA=)
2: A81815BE31B711EF8F3D5F6BC4F9AE02.roa (hash: LwVsRjUQzSRI9ydULu5dHXqYOgccHVAUOAaCO30tHhs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl
rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 03:49:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91504D6, serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Validity
Not Before: Dec 25 03:49:54 2025 GMT
Not After : Jan 1 03:49:54 2026 GMT
Subject: CN=694cb462-ab7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:1c:0d:b4:3a:b9:7d:c6:be:c0:cb:92:00:
72:59:cb:a2:2b:06:d3:25:30:c0:f5:4f:b6:26:f2:
5a:19:4f:77:38:71:dd:e2:21:58:f0:6b:4a:5e:20:
d6:08:79:3d:c3:3c:53:df:00:5e:87:92:d2:19:19:
cc:e3:1b:80:66:58:a6:ff:59:d0:6a:86:98:1c:8d:
ba:05:ee:b0:e5:d8:31:ff:d5:6f:20:9c:b7:e0:ad:
68:57:ba:61:b6:64:f7:04:5a:88:da:6f:22:fa:85:
3d:48:45:6e:7e:32:60:fa:c5:cf:a9:41:90:89:d6:
5c:a4:35:6b:86:b6:07:28:bc:26:98:da:59:78:f8:
e4:11:05:e6:75:97:fd:01:b2:c4:11:d7:8f:d5:7e:
74:52:b5:87:17:41:51:46:1a:fc:96:1e:d8:d3:1e:
11:df:7f:1b:1b:e4:b0:9c:f9:f2:aa:d9:2a:f6:0e:
55:bc:bd:b6:e8:69:ac:f4:d3:72:99:e6:a0:2e:ee:
45:2e:44:9f:85:f2:29:20:86:a8:86:2e:96:7a:89:
a5:72:ae:31:64:2e:4a:de:6e:b7:a7:af:aa:88:1b:
58:90:36:be:88:6f:52:d0:23:38:91:e2:8a:1f:6f:
17:cf:46:f4:bd:90:0c:48:5b:87:fa:0c:e8:45:fa:
c6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F2:37:37:54:6E:BC:2F:6B:F2:17:2A:10:FC:3E:7A:AE:14:F0:1D
X509v3 Authority Key Identifier:
keyid:FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:01:f1:a8:27:47:69:5e:3c:84:8e:3f:44:23:8a:8d:29:b2:
e0:9f:a0:03:6d:88:65:20:d7:56:30:79:3d:f4:84:5f:3b:f2:
cd:fb:08:50:1a:0f:ff:b1:8c:08:40:b1:fd:90:e7:21:a9:da:
81:cd:34:68:c2:6d:7f:64:11:a4:6d:3f:8d:8c:cf:17:12:07:
49:59:56:53:58:ae:a1:5b:69:cd:69:a9:f9:4f:c8:43:48:ff:
68:31:5c:19:26:df:78:45:5e:5c:b1:c7:73:c1:7d:c4:a2:7b:
26:8f:5a:e4:ed:7c:46:8b:ae:a0:39:e0:68:7b:94:6b:bc:75:
e0:90:3d:30:a7:43:b3:cf:ea:ad:ce:0d:f1:4f:93:ca:c8:d5:
78:ed:6e:06:b2:9d:a2:25:e6:57:a7:e1:77:8a:35:7e:43:d4:
fc:0f:02:c9:bc:fb:af:14:77:19:0e:45:dd:56:04:3d:93:b4:
2d:5c:70:80:85:9b:4a:45:bc:d9:9d:73:52:6d:b6:c0:92:28:
3a:01:5e:f9:10:36:26:83:67:d2:df:fb:1b:24:67:93:a9:56:
12:9e:2f:92:9c:59:93:6f:38:0f:db:ba:3f:9e:d1:5d:a4:a2:
b3:59:30:fc:4a:f5:e4:a9:1b:e6:93:26:81:4d:44:24:2a:c0:
0c:f6:67:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 13:11:20 2025 by rpki-client