This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
File: dyhBomMmMU6i5Dg0dd4xttzn26U.mft (raw, json)
Hash identifier: HPZBaFF1hHx37SzQvfLkcEiPklhp0C6Z8hxb18vBBRw=
Subject key identifier: 60:A1:4C:2C:55:FC:91:54:F6:7A:5F:BA:4F:5C:E5:11:E9:CE:91:EA
Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
Certificate issuer: /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Certificate serial: 03B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
Manifest number: 039D
Signing time: Fri 26 Dec 2025 23:51:52 +0000
Manifest this update: Fri 26 Dec 2025 23:51:51 +0000
Manifest next update: Fri 02 Jan 2026 23:51:51 +0000
Files and hashes: 1: dyhBomMmMU6i5Dg0dd4xttzn26U.crl (hash: YvEXdqe+e+4rzN3D/zIKj71W7902VEYP/UUrPYoXLLg=)
2: 73E82004BCA111ED914D176DC4F9AE02.roa (hash: LzJH4FwSIzAHt5kndFRR1wqiyJf/0fMEKdNxi5QEKA4=)
3: B5A58DFAA1DB11EDA7229653C4F9AE02.roa (hash: wpxndu3e3JLlbyaAJc8xMGR8CKGxyBNouBJsOCWSNis=)
4: 81F21152D1BD11EC9D8FBC52C4F9AE02.roa (hash: DavRSCZXh0NjWkBtqCUm0P5Y6uJAvAoKRo/hi86WtUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Jan 2026 23:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953 (0x3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9324, serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Validity
Not Before: Dec 26 23:51:51 2025 GMT
Not After : Jan 2 23:51:51 2026 GMT
Subject: CN=694f1f98-bf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:41:06:6f:08:68:e0:a7:4c:ec:b6:de:3d:
21:ef:66:0e:56:66:bc:34:15:fe:61:6d:b7:db:ff:
31:c8:2c:9e:f9:64:15:a2:bf:b6:5b:75:e1:3b:07:
7b:e0:ed:f0:53:ec:98:00:a1:e4:0c:c9:02:03:46:
17:ac:4b:66:46:df:53:49:6a:d8:bb:d4:f2:f7:c2:
43:b6:74:ef:bf:d0:48:12:c6:be:fe:e4:b5:0d:ed:
ef:6c:00:e3:43:ab:b5:b8:5f:82:17:b8:56:92:eb:
98:63:10:fd:24:55:c5:54:f7:af:64:18:54:84:e6:
ec:b5:6f:e7:d6:54:56:6b:85:ce:dd:88:10:96:7c:
b3:4f:ce:90:71:fb:d0:67:98:4f:06:b0:b2:a8:4f:
7a:49:ea:6c:7e:ac:ea:6e:9d:16:ce:06:3e:da:ba:
7e:16:03:fc:e2:3d:66:8c:68:8c:b0:14:1e:b4:43:
4e:8a:9d:5a:07:50:0c:93:c9:d7:63:d7:97:37:c0:
3c:72:60:44:ad:3a:bc:cd:ed:9e:28:ef:8a:dc:72:
ac:d8:ba:4b:85:69:1f:9e:68:20:92:d0:ad:3a:03:
4f:8a:92:b3:08:62:82:59:14:d9:97:cb:c4:d4:54:
e1:5b:96:03:2f:87:9f:62:00:87:70:c2:60:05:a7:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A1:4C:2C:55:FC:91:54:F6:7A:5F:BA:4F:5C:E5:11:E9:CE:91:EA
X509v3 Authority Key Identifier:
keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:de:4e:98:cf:ee:92:94:ea:83:0d:47:0e:78:e5:30:68:4d:
56:70:0d:3e:71:5c:b6:2c:74:5a:86:8e:af:ee:62:c6:d7:86:
97:4a:08:1c:7c:35:a0:55:98:f0:f4:57:f7:0b:04:bf:07:72:
39:7b:f3:06:e7:0e:84:66:6b:f8:f8:49:43:68:0c:63:ca:13:
a4:ec:18:74:db:c4:6f:63:2a:eb:c3:a9:12:45:91:29:c7:e8:
2f:27:b5:87:4f:9b:d7:d9:6a:39:c0:96:25:e4:42:f9:98:30:
56:eb:b3:82:0a:08:93:4c:e5:da:42:c2:5f:20:c1:60:16:78:
5d:26:87:70:88:a8:02:19:53:da:e9:d7:73:d5:f8:46:dd:70:
53:c5:29:39:f1:2c:69:31:ce:73:44:3f:99:9f:1b:d7:37:f4:
13:a4:90:98:0c:36:f3:85:c9:38:c1:1e:6c:1d:68:00:12:f1:
81:79:be:d9:cd:b9:b9:c5:dc:6c:e0:11:85:8c:ee:1f:5f:0a:
14:af:c2:b2:03:8a:91:cc:ed:cc:c2:d6:0d:f3:2c:9c:7b:64:
56:f4:25:18:89:66:c8:42:3d:46:5e:f5:be:1c:e0:5d:2e:17:
3a:da:0e:61:95:57:91:b3:be:87:83:26:1d:b4:49:f0:fe:89:
f9:8f:f1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 23:43:19 2025 by rpki-client