This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
File: PykJw_UywAsCV7klbHbroxTc0A8.mft (raw, json)
Hash identifier: K33wNo8bt84/EmktdckZGawRQJqTSpT/HbgC2/uqM9o=
Subject key identifier: 57:00:7F:78:DB:52:9E:2A:7D:87:30:E9:97:6C:9F:5F:62:FB:5B:2E
Authority key identifier: 3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
Certificate issuer: /CN=A91C71A5/serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Certificate serial: 02FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
Manifest number: 02F2
Signing time: Mon 29 Dec 2025 00:20:23 +0000
Manifest this update: Mon 29 Dec 2025 00:20:23 +0000
Manifest next update: Mon 05 Jan 2026 00:20:23 +0000
Files and hashes: 1: PykJw_UywAsCV7klbHbroxTc0A8.crl (hash: QyuqMJspfuayGT3YaVp5L1EKF2BQCFvsQyQW2hM8zJ0=)
2: 99A7637060B311EEBA329E54C4F9AE02.roa (hash: Sdc1sOHrwKDGZqW0ILPwFUzKSKTDUensRtaAvqeeJxU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 00:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 764 (0x2fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C71A5, serialNumber=3F2909C3F532C00B0257B9256C76EBA314DCD00F
Validity
Not Before: Dec 29 00:20:23 2025 GMT
Not After : Jan 5 00:20:23 2026 GMT
Subject: CN=6951c947-7497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:74:35:30:18:f0:89:c2:c4:0d:aa:0c:5b:
3c:08:21:19:32:1b:cd:f0:18:92:6b:a5:c5:71:9a:
33:5f:e3:1f:24:f0:19:9d:02:29:41:a4:41:c3:b5:
53:89:43:06:98:48:fa:12:7d:7c:22:9c:ed:4b:89:
11:01:bb:31:7b:50:e6:75:fa:70:af:24:34:64:b9:
6a:c5:1e:87:e8:10:5d:5f:99:c4:54:0e:58:5c:c9:
e3:da:f6:ad:3f:aa:eb:9a:49:49:d6:05:ce:13:0c:
bf:e6:ec:d6:6e:91:5e:1c:b6:f9:e4:96:a5:b3:59:
41:b1:8d:8c:43:d3:73:f7:a2:57:49:58:2d:c4:27:
29:f7:d5:25:50:ad:4e:83:b2:f6:34:19:2d:42:b1:
0f:57:18:86:4d:c9:0a:3e:b3:be:59:e9:91:d4:13:
4b:c0:07:ad:36:00:2d:1e:73:9d:d0:3c:02:b8:46:
19:82:c5:04:ef:e4:b7:3b:f1:76:86:2b:23:c9:f9:
fd:23:68:b5:d7:28:a5:a5:e4:d7:7f:fc:0e:33:ff:
ab:c8:71:12:74:58:db:91:17:aa:e0:91:39:03:dc:
7e:01:e5:e8:9b:d7:ac:2f:c3:72:f3:49:6c:99:bd:
c1:a4:b4:2c:77:1e:05:90:24:f2:31:f9:ce:41:9f:
d5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:00:7F:78:DB:52:9E:2A:7D:87:30:E9:97:6C:9F:5F:62:FB:5B:2E
X509v3 Authority Key Identifier:
keyid:3F:29:09:C3:F5:32:C0:0B:02:57:B9:25:6C:76:EB:A3:14:DC:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PykJw_UywAsCV7klbHbroxTc0A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C71A5/3BFA28340A8311ED8D6D832AC4F9AE02/PykJw_UywAsCV7klbHbroxTc0A8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:03:d8:4e:89:e5:21:35:11:e5:31:d2:97:d6:58:87:75:6f:
ed:b6:95:db:e8:d0:1b:ea:12:a3:c1:1b:8c:c2:b3:28:7d:d3:
bf:3c:6b:e8:3d:ce:ee:20:25:07:d8:5e:d5:1a:15:89:78:7d:
1f:fa:50:e3:ff:79:2e:79:04:9e:a8:eb:3e:8b:e8:3d:0a:59:
fd:be:a7:ba:33:51:09:ce:ff:e9:b2:bf:83:41:7a:c1:16:eb:
95:c4:b0:c2:aa:3d:de:3e:da:f4:da:e7:64:78:51:9a:cb:f0:
7a:26:da:9b:a6:01:70:90:2e:c6:48:d6:b8:80:4b:43:06:fe:
79:58:df:45:78:dc:c2:6e:15:62:86:f6:fa:70:a1:40:84:25:
6a:d6:c8:3c:c6:73:ad:0f:e6:50:5c:aa:8c:7f:9f:37:2f:3d:
ff:2a:2f:4b:c4:8f:07:c7:56:3a:86:2a:52:1d:23:ef:cb:40:
31:3d:82:f7:da:fd:d1:de:b2:3b:7d:42:9b:4f:d6:a0:38:a2:
a1:da:90:8f:03:dd:87:ad:22:fe:13:17:a3:77:69:13:cf:9b:
e0:46:ba:53:76:be:37:8e:c6:fd:44:54:3f:ba:fd:69:80:a5:
62:07:50:61:e2:7c:2b:e6:22:43:20:7a:f5:fb:94:a9:c8:1f:
65:27:c9:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzcxQTUxMTAvBgNVBAUTKDNGMjkwOUMzRjUzMkMwMEIwMjU3QjkyNTZDNzZFQkEz
MTREQ0QwMEYwHhcNMjUxMjI5MDAyMDIzWhcNMjYwMTA1MDAyMDIzWjAYMRYwFAYD
VQQDDA02OTUxYzk0Ny03NDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoQJ0NTAY8InCxA2qDFs8CCEZMhvN8BiSa6XFcZozX+MfJPAZnQIpQaRBw7VT
iUMGmEj6En18IpztS4kRAbsxe1DmdfpwryQ0ZLlqxR6H6BBdX5nEVA5YXMnj2vat
P6rrmklJ1gXOEwy/5uzWbpFeHLb55Jals1lBsY2MQ9Nz96JXSVgtxCcp99UlUK1O
g7L2NBktQrEPVxiGTckKPrO+WemR1BNLwAetNgAtHnOd0DwCuEYZgsUE7+S3O/F2
hisjyfn9I2i11yilpeTXf/wOM/+ryHESdFjbkReq4JE5A9x+AeXom9esL8Ny80ls
mb3BpLQsdx4FkCTyMfnOQZ/VQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcAf3jb
Up4qfYcw6Zdsn19i+1suMB8GA1UdIwQYMBaAFD8pCcP1MsALAle5JWx266MU3NAP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzFBNS8zQkZBMjgzNDBB
ODMxMUVEOEQ2RDgzMkFDNEY5QUUwMi9QeWtKd19VeXdBc0NWN2tsYkhicm94VGMw
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B5a0p3X1V5d0FzQ1Y3a2xiSGJyb3hUYzBBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzFBNS8zQkZBMjgzNDBBODMxMUVEOEQ2RDgzMkFDNEY5QUUwMi9QeWtKd19VeXdB
c0NWN2tsYkhicm94VGMwQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAbA9hOieUhNRHlMdKX1liHdW/ttpXb6NAb6hKjwRuMwrMofdO/PGvo
Pc7uICUH2F7VGhWJeH0f+lDj/3kueQSeqOs+i+g9Cln9vqe6M1EJzv/psr+DQXrB
FuuVxLDCqj3ePtr02udkeFGay/B6JtqbpgFwkC7GSNa4gEtDBv55WN9FeNzCbhVi
hvb6cKFAhCVq1sg8xnOtD+ZQXKqMf583Lz3/Ki9LxI8Hx1Y6hipSHSPvy0AxPYL3
2v3R3rI7fUKbT9agOKKh2pCPA92HrSL+Exejd2kTz5vgRrpTdr43jsb9RFQ/uv1p
gKViB1Bh4nwr5iJDIHr1+5SpyB9lJ8nw
-----END CERTIFICATE-----
Generated at Mon Dec 29 16:17:37 2025 by rpki-client