This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
File: B7Y7XcFse0rper0AhqMVbV10Rlk.mft (raw, json)
Hash identifier: 8gMsg/AXzayNOaXlVBMOzmyuQDCwlPxOGR3tl6MUfi8=
Subject key identifier: E9:60:34:4B:97:06:66:1E:7C:FC:20:15:F6:45:B9:0B:4C:1B:24:C7
Authority key identifier: 07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59
Certificate issuer: /CN=A91C6E49/serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659
Certificate serial: 0259
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
Manifest number: 0254
Signing time: Sat 27 Dec 2025 00:44:08 +0000
Manifest this update: Sat 27 Dec 2025 00:44:07 +0000
Manifest next update: Sat 03 Jan 2026 00:44:07 +0000
Files and hashes: 1: B7Y7XcFse0rper0AhqMVbV10Rlk.crl (hash: fNNMn/E2HutrxbOHHFo6L6kANumpql2LJhdf5l54rPE=)
2: 98FD8A0E538411ED8D781C7CC4F9AE02.roa (hash: KvaqXLWWsSi0DyIW72uaV8JvweT4UuqZ2OwGOX+bYh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl
rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 00:44:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 601 (0x259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C6E49, serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659
Validity
Not Before: Dec 27 00:44:07 2025 GMT
Not After : Jan 3 00:44:07 2026 GMT
Subject: CN=694f2bd8-4395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:1a:76:29:f9:a7:cb:18:61:e7:f7:29:8b:
83:23:7e:de:b3:7e:ed:f8:72:79:1f:e2:c6:1c:cb:
2d:a2:52:e0:e2:3d:9b:b8:e4:14:76:81:cc:b7:9a:
21:b5:a1:57:e9:95:8d:a2:d2:ac:44:f1:fb:18:63:
aa:f9:b4:12:d5:84:57:d0:15:11:7e:21:42:64:cc:
db:85:52:9d:be:e5:d5:2a:35:d3:91:24:c8:48:d5:
c7:fe:e2:58:e0:ce:9e:b0:bf:fc:80:3d:1d:6a:e8:
1a:06:2f:df:b6:4e:c9:8e:7e:02:29:cc:e5:2e:10:
72:6f:ca:57:fb:e5:e6:01:d1:da:b1:87:31:40:61:
cc:30:b3:0f:84:a2:c9:69:9f:83:29:4f:73:82:a1:
ce:99:3d:03:41:cc:7c:c0:bd:68:99:a6:9f:cc:b0:
65:10:8a:59:71:a5:43:26:9f:71:ee:8e:2f:95:1f:
c4:60:7d:1d:7b:58:28:5d:3e:76:20:3f:5c:d7:e9:
34:e7:3d:45:0a:ff:43:9c:50:c8:f0:dc:e7:4e:0f:
14:33:54:8c:71:f9:95:bf:77:8e:81:ae:ed:c8:f6:
0d:a3:7c:2b:1a:b9:38:29:57:a9:c5:fa:0d:ad:dd:
b7:ae:32:1f:1b:2f:05:59:7e:17:4d:96:97:f6:d1:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:34:4B:97:06:66:1E:7C:FC:20:15:F6:45:B9:0B:4C:1B:24:C7
X509v3 Authority Key Identifier:
keyid:07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:03:bb:6a:a1:25:19:b0:dd:0c:7f:61:bd:a5:b6:ac:bf:c5:
9e:b0:ad:71:2f:aa:2d:b8:45:df:40:07:54:b5:53:e0:fd:7c:
9a:7a:93:b7:7b:04:1b:81:96:1d:fa:20:b3:db:42:c2:14:cf:
d7:e8:24:78:a8:32:df:2f:6b:32:7e:11:61:f9:c6:6d:a3:9a:
a1:e4:e5:bf:75:e5:22:61:c6:6b:6e:34:5e:d2:5e:41:6d:35:
10:aa:a6:a5:9c:e3:4b:b3:cd:10:91:0f:08:26:7c:7f:97:d5:
97:22:02:b3:e1:e8:82:6f:28:7c:c3:e3:cb:fc:52:f4:07:9b:
1c:87:0b:a0:87:97:66:03:3b:c7:60:29:b7:87:29:4b:8f:07:
17:2e:fe:36:36:af:48:8e:4f:22:60:f6:5d:e9:06:8c:3b:fb:
6b:27:1d:e0:52:d2:5b:db:28:d9:9d:ea:96:68:46:03:dc:19:
03:7b:33:9f:2a:f2:d8:31:e3:86:13:e0:af:9e:c8:d4:6f:60:
be:8c:1e:98:27:82:cc:7d:2d:7a:9a:7c:aa:be:f5:9c:b4:75:
2e:20:c0:d0:24:09:63:38:d9:a0:4c:a1:cf:35:42:ad:68:bc:
e5:b1:04:b0:6d:a5:80:65:2d:63:1b:99:d9:11:92:73:e4:3c:
53:d6:e8:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZFNDkxMTAvBgNVBAUTKDA3QjYzQjVEQzE2QzdCNEFFOTdBQkQwMDg2QTMxNTZE
NUQ3NDQ2NTkwHhcNMjUxMjI3MDA0NDA3WhcNMjYwMTAzMDA0NDA3WjAYMRYwFAYD
VQQDDA02OTRmMmJkOC00Mzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsoMadin5p8sYYef3KYuDI37es37t+HJ5H+LGHMstolLg4j2buOQUdoHMt5oh
taFX6ZWNotKsRPH7GGOq+bQS1YRX0BURfiFCZMzbhVKdvuXVKjXTkSTISNXH/uJY
4M6esL/8gD0daugaBi/ftk7Jjn4CKczlLhByb8pX++XmAdHasYcxQGHMMLMPhKLJ
aZ+DKU9zgqHOmT0DQcx8wL1omaafzLBlEIpZcaVDJp9x7o4vlR/EYH0de1goXT52
ID9c1+k05z1FCv9DnFDI8NznTg8UM1SMcfmVv3eOga7tyPYNo3wrGrk4KVepxfoN
rd23rjIfGy8FWX4XTZaX9tF24wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlgNEuX
BmYefPwgFfZFuQtMGyTHMB8GA1UdIwQYMBaAFAe2O13BbHtK6Xq9AIajFW1ddEZZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkU0OS9CMzNBQTdBNjUz
ODExMUVEOEFBOThGNzdDNEY5QUUwMi9CN1k3WGNGc2UwcnBlcjBBaHFNVmJWMTBS
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I3WTdYY0ZzZTBycGVyMEFocU1WYlYxMFJsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NkU0OS9CMzNBQTdBNjUzODExMUVEOEFBOThGNzdDNEY5QUUwMi9CN1k3WGNGc2Uw
cnBlcjBBaHFNVmJWMTBSbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVA7tqoSUZsN0Mf2G9pbasv8WesK1xL6otuEXfQAdUtVPg/XyaepO3
ewQbgZYd+iCz20LCFM/X6CR4qDLfL2syfhFh+cZto5qh5OW/deUiYcZrbjRe0l5B
bTUQqqalnONLs80QkQ8IJnx/l9WXIgKz4eiCbyh8w+PL/FL0B5schwugh5dmAzvH
YCm3hylLjwcXLv42Nq9Ijk8iYPZd6QaMO/trJx3gUtJb2yjZneqWaEYD3BkDezOf
KvLYMeOGE+CvnsjUb2C+jB6YJ4LMfS16mnyqvvWctHUuIMDQJAljONmgTKHPNUKt
aLzlsQSwbaWAZS1jG5nZEZJz5DxT1uhM
-----END CERTIFICATE-----
Generated at Sun Dec 28 21:40:41 2025 by rpki-client