This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
File: _UnAZPyj6S3swYqPUElLIfwB8lY.mft (raw, json)
Hash identifier: 9PdsITqmr0cU1ip18zkjl8UA4q8HhQdKW/bFpswQd0I=
Subject key identifier: BC:89:60:BE:49:C1:9E:D5:27:BE:84:42:FD:20:A6:A9:8F:54:1E:F0
Authority key identifier: FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
Certificate issuer: /CN=A91934DE/serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Certificate serial: 0213
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
Manifest number: 0206
Signing time: Wed 31 Dec 2025 01:36:43 +0000
Manifest this update: Wed 31 Dec 2025 01:36:43 +0000
Manifest next update: Wed 07 Jan 2026 01:36:43 +0000
Files and hashes: 1: _UnAZPyj6S3swYqPUElLIfwB8lY.crl (hash: 4CrzLFoFEdQ0cZlB4z3HUPLWU9gpOYkmssMjDYNoJrE=)
2: 358556D2D98F11EDA9A38028C4F9AE02.roa (hash: w60npFN7Kaoau14A8nUumKIk6Z7FI9jzoRmBuAraQgw=)
3: 05F11BACDF4A11EDA4190947C4F9AE02.roa (hash: xNw6lqRZVzml6zGHz7sRyZFWQnA5LMwPw8PJ9UjVWeM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 01:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 531 (0x213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91934DE, serialNumber=FD49C064FCA3E92DECC18A8F50494B21FC01F256
Validity
Not Before: Dec 31 01:36:43 2025 GMT
Not After : Jan 7 01:36:43 2026 GMT
Subject: CN=69547e2b-bc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:91:57:3b:a4:a0:81:92:3e:37:cb:54:9c:bf:
c1:e0:5f:80:19:88:ba:b5:ea:5a:60:ba:8e:c3:37:
08:75:82:8a:b0:0a:01:48:22:ac:8b:57:e8:69:a4:
4d:82:20:8a:bf:0e:57:9b:9c:5c:6a:89:c7:7b:05:
ed:8e:2d:01:26:74:86:9f:dd:b6:2c:f1:2c:c2:1b:
5c:51:5b:8f:51:fa:eb:83:e1:b7:9a:fe:bf:2f:d1:
4a:0b:b9:4e:83:c4:2a:7e:d4:95:75:c3:c1:8d:04:
26:73:25:83:4c:5f:56:a5:eb:7b:78:60:30:69:60:
66:50:eb:03:f2:70:f7:9b:af:90:6a:01:e7:a0:b6:
a8:97:44:7c:ef:51:8b:00:82:96:56:c0:5a:10:01:
2f:fb:1a:75:c9:7b:b0:29:ab:2c:2e:46:c7:8c:94:
09:d9:5f:af:61:80:91:da:78:8a:86:1f:fd:d7:2d:
31:aa:e5:4c:5e:10:24:60:dc:25:a7:e4:31:37:8e:
50:e7:c0:b4:d5:34:99:7c:71:df:94:1f:b1:5d:51:
09:8b:33:25:d0:f4:e9:01:ed:bf:f6:a4:c1:77:2c:
ea:87:7a:08:df:f2:5f:d2:d1:c4:c5:af:ee:ae:76:
a6:e9:ea:68:ca:23:27:01:1c:7b:8f:94:b9:9e:d4:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:60:BE:49:C1:9E:D5:27:BE:84:42:FD:20:A6:A9:8F:54:1E:F0
X509v3 Authority Key Identifier:
keyid:FD:49:C0:64:FC:A3:E9:2D:EC:C1:8A:8F:50:49:4B:21:FC:01:F2:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UnAZPyj6S3swYqPUElLIfwB8lY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91934DE/A941D5E2D8E411ED92EA3620C4F9AE02/_UnAZPyj6S3swYqPUElLIfwB8lY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e9:ff:75:9c:ad:fd:6f:38:11:07:2f:a4:03:78:ce:c0:0b:
0f:14:e5:34:80:b6:a1:40:8b:17:47:52:23:99:b3:53:ea:21:
cb:aa:6c:e6:c9:f9:d3:1f:25:76:12:79:0e:37:58:95:a0:2a:
87:53:51:34:fe:73:45:ba:18:2a:61:15:c5:60:1c:29:e1:b1:
e0:82:6f:84:9d:e6:ca:54:44:a7:6c:46:3c:c2:83:c7:79:2c:
ca:3e:15:bb:72:36:25:e6:ea:7a:37:60:69:08:90:1a:a9:86:
7c:a2:5e:6b:32:36:3c:ba:82:cd:63:81:f4:69:59:83:78:35:
17:80:58:ff:50:5b:f9:7e:a3:56:2f:34:59:5c:48:e9:40:2b:
ac:f9:46:2e:89:a5:88:64:15:7f:eb:4d:36:2b:e6:f7:00:86:
cb:83:f1:1d:1f:04:a7:90:5a:4c:b2:3f:b1:94:3a:cc:fa:9a:
a0:d4:e9:a2:38:8a:f6:da:39:1c:f0:9d:21:65:36:50:24:5f:
20:eb:27:63:c0:e8:29:88:75:35:bf:b4:8c:76:ce:f4:7a:38:
24:90:f6:6b:3d:5d:70:0c:67:bc:41:ae:6e:54:45:66:dc:5d:
88:d2:2c:f2:e0:5a:b4:46:4b:d9:42:02:37:dd:5a:25:ed:e6:
d8:7d:2c:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTM0REUxMTAvBgNVBAUTKEZENDlDMDY0RkNBM0U5MkRFQ0MxOEE4RjUwNDk0QjIx
RkMwMUYyNTYwHhcNMjUxMjMxMDEzNjQzWhcNMjYwMTA3MDEzNjQzWjAYMRYwFAYD
VQQDDA02OTU0N2UyYi1iYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3pFXO6SggZI+N8tUnL/B4F+AGYi6tepaYLqOwzcIdYKKsAoBSCKsi1foaaRN
giCKvw5Xm5xcaonHewXtji0BJnSGn922LPEswhtcUVuPUfrrg+G3mv6/L9FKC7lO
g8QqftSVdcPBjQQmcyWDTF9Wpet7eGAwaWBmUOsD8nD3m6+QagHnoLaol0R871GL
AIKWVsBaEAEv+xp1yXuwKassLkbHjJQJ2V+vYYCR2niKhh/91y0xquVMXhAkYNwl
p+QxN45Q58C01TSZfHHflB+xXVEJizMl0PTpAe2/9qTBdyzqh3oI3/Jf0tHExa/u
rnam6epoyiMnARx7j5S5ntTFAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyJYL5J
wZ7VJ76EQv0gpqmPVB7wMB8GA1UdIwQYMBaAFP1JwGT8o+kt7MGKj1BJSyH8AfJW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzRERS9BOTQxRDVFMkQ4
RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZTM3N3WXFQVUVsTElmd0I4
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19VbkFaUHlqNlMzc3dZcVBVRWxMSWZ3QjhsWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzRERS9BOTQxRDVFMkQ4RTQxMUVEOTJFQTM2MjBDNEY5QUUwMi9fVW5BWlB5ajZT
M3N3WXFQVUVsTElmd0I4bFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCi6f91nK39bzgRBy+kA3jOwAsPFOU0gLahQIsXR1IjmbNT6iHLqmzm
yfnTHyV2EnkON1iVoCqHU1E0/nNFuhgqYRXFYBwp4bHggm+EnebKVESnbEY8woPH
eSzKPhW7cjYl5up6N2BpCJAaqYZ8ol5rMjY8uoLNY4H0aVmDeDUXgFj/UFv5fqNW
LzRZXEjpQCus+UYuiaWIZBV/6002K+b3AIbLg/EdHwSnkFpMsj+xlDrM+pqg1Omi
OIr22jkc8J0hZTZQJF8g6ydjwOgpiHU1v7SMds70ejgkkPZrPV1wDGe8Qa5uVEVm
3F2I0izy4Fq0RkvZQgI33Vol7ebYfSzU
-----END CERTIFICATE-----
Generated at Wed Dec 31 11:54:22 2025 by rpki-client