This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json)
Hash identifier: Sydz32tQ0umzTvPiDun0BBJoBFLHLWXgY4lruI1u44g=
Subject key identifier: 00:44:EB:42:6F:59:61:FE:83:13:3B:93:AA:A0:8C:02:4F:A7:F8:6B
Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
Manifest number: EC
Signing time: Mon 29 Dec 2025 04:27:02 +0000
Manifest this update: Mon 29 Dec 2025 04:27:02 +0000
Manifest next update: Mon 05 Jan 2026 04:27:02 +0000
Files and hashes: 1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: BYUMmkxH6LWkBKwxmYkMdHpKAWDlMKcQkryYhLI4+Q4=)
2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: /MZsQd7r1AUngKpTxxkCkkNWLr5PAUrY0B8gx8HXfWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 04:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C
Validity
Not Before: Dec 29 04:27:02 2025 GMT
Not After : Jan 5 04:27:02 2026 GMT
Subject: CN=69520316-e125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e6:d1:e8:87:4b:51:ca:61:8a:92:92:a1:8c:
72:b3:56:ac:f1:13:98:2e:36:4c:a8:e1:dd:7e:7b:
19:b0:ce:f6:6f:a8:0c:be:10:26:40:47:0a:90:3a:
04:7d:39:e3:22:06:29:05:d3:04:ec:51:c2:ba:d5:
a2:d7:8a:2b:19:56:d2:b9:6d:88:3a:34:bc:7d:fc:
15:97:e1:cf:59:27:0b:de:83:14:f7:e6:d4:39:79:
75:90:a6:44:a9:41:81:65:ae:b9:d3:58:cc:4b:da:
d4:be:60:69:7b:8b:32:e0:33:25:08:3b:e0:f6:c8:
45:21:fb:6a:72:7b:21:4c:e9:97:a5:65:26:e1:a7:
fc:4b:f3:2e:11:d4:26:4a:f6:c7:b1:80:f7:6f:96:
53:b7:14:f3:1c:44:79:99:4f:a4:2d:ad:85:e9:7c:
f0:56:10:9b:da:55:12:5b:55:5d:dc:3c:36:f2:55:
be:a1:81:25:f1:21:54:1f:a5:09:26:e9:3b:04:2b:
24:89:00:a7:a9:7e:a5:70:58:e8:f6:14:dd:2b:47:
d2:7d:aa:60:e5:5f:22:e9:7f:44:cf:89:30:c4:5c:
0d:dc:46:ce:0b:6f:c5:8c:b1:69:78:21:1d:0e:74:
85:db:b9:b9:a2:71:61:a9:83:6d:7b:9b:ed:9d:fb:
7d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:44:EB:42:6F:59:61:FE:83:13:3B:93:AA:A0:8C:02:4F:A7:F8:6B
X509v3 Authority Key Identifier:
keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:99:6e:2c:8a:0f:de:a0:11:e8:50:af:15:0f:4c:a7:a4:5a:
c8:d3:2b:ca:c5:2b:41:5e:14:06:22:a3:70:5b:4a:d6:71:16:
c8:da:31:be:ae:9d:5e:93:f5:a9:d9:12:f8:54:d3:e4:a1:fd:
3a:56:97:b7:16:4c:5c:84:c1:bc:50:72:5b:70:f8:df:d6:ae:
09:11:b0:ee:9f:94:a8:de:e5:8a:fb:6f:1a:fa:f5:6d:cd:76:
b7:81:95:9e:d7:48:30:23:df:e9:0d:9f:0a:26:52:3f:da:9c:
63:86:bf:53:65:96:ab:48:0d:f6:ce:b1:2f:d7:da:da:ca:b6:
e1:b2:89:c9:35:ed:b9:92:da:bf:86:6c:80:78:05:d0:2f:48:
40:0c:ea:41:5b:be:76:a1:43:72:56:71:2b:2c:8f:24:6e:62:
93:41:af:8a:21:2d:08:d8:0e:56:a7:9d:89:17:8d:68:64:4b:
17:42:a8:79:f1:65:b8:ae:57:5d:07:c4:42:ee:b5:9d:c9:af:
70:75:77:78:44:fd:75:2b:df:65:4c:e6:44:3c:e9:e3:30:e3:
0d:93:a5:f0:c5:03:59:39:db:fa:fc:38:e0:c8:58:85:5a:1b:
b3:a0:b9:b3:68:f0:d6:44:4d:4b:1d:a2:67:aa:22:7f:e5:96:
ec:e9:ec:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkZFNEUxMTAvBgNVBAUTKEM3MjAwMjc2N0ExMEVDMkZGMTQ1MTVBMkFBQjg2RTYx
NDA5N0E3NUMwHhcNMjUxMjI5MDQyNzAyWhcNMjYwMTA1MDQyNzAyWjAYMRYwFAYD
VQQDDA02OTUyMDMxNi1lMTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+bR6IdLUcphipKSoYxys1as8ROYLjZMqOHdfnsZsM72b6gMvhAmQEcKkDoE
fTnjIgYpBdME7FHCutWi14orGVbSuW2IOjS8ffwVl+HPWScL3oMU9+bUOXl1kKZE
qUGBZa6501jMS9rUvmBpe4sy4DMlCDvg9shFIftqcnshTOmXpWUm4af8S/MuEdQm
SvbHsYD3b5ZTtxTzHER5mU+kLa2F6XzwVhCb2lUSW1Vd3Dw28lW+oYEl8SFUH6UJ
Juk7BCskiQCnqX6lcFjo9hTdK0fSfapg5V8i6X9Ez4kwxFwN3EbOC2/FjLFpeCEd
DnSF27m5onFhqYNte5vtnft9qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABE60Jv
WWH+gxM7k6qgjAJPp/hrMB8GA1UdIwQYMBaAFMcgAnZ6EOwv8UUVoqq4bmFAl6dc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU0RS9EMTY1RTRBMjdC
RTMxMUVGODhEOUM3NTNDNEY5QUUwMi94eUFDZG5vUTdDX3hSUldpcXJodVlVQ1hw
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3h5QUNkbm9RN0NfeFJSV2lxcmh1WVVDWHAxdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RkU0RS9EMTY1RTRBMjdCRTMxMUVGODhEOUM3NTNDNEY5QUUwMi94eUFDZG5vUTdD
X3hSUldpcXJodVlVQ1hwMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARmW4sig/eoBHoUK8VD0ynpFrI0yvKxStBXhQGIqNwW0rWcRbI2jG+
rp1ek/Wp2RL4VNPkof06Vpe3FkxchMG8UHJbcPjf1q4JEbDun5So3uWK+28a+vVt
zXa3gZWe10gwI9/pDZ8KJlI/2pxjhr9TZZarSA32zrEv19rayrbhsonJNe25ktq/
hmyAeAXQL0hADOpBW752oUNyVnErLI8kbmKTQa+KIS0I2A5Wp52JF41oZEsXQqh5
8WW4rlddB8RC7rWdya9wdXd4RP11K99lTOZEPOnjMOMNk6XwxQNZOdv6/DjgyFiF
WhuzoLmzaPDWRE1LHaJnqiJ/5Zbs6ezB
-----END CERTIFICATE-----
Generated at Tue Dec 30 00:23:24 2025 by rpki-client