This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
File: gYkRn4AeKAprTdViZT7xA2lh0Js.mft (raw, json)
Hash identifier: dCqPKCzeQSojnjU7Bo5BmfaLqilqmMcvLWzqOOLkOzg=
Subject key identifier: 61:15:EC:8A:0A:AB:32:C0:AB:26:7D:03:D6:F1:9E:D2:89:C7:A8:33
Authority key identifier: 81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
Certificate issuer: /CN=A91D9CAE/serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Certificate serial: 04EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
Manifest number: 04E6
Signing time: Tue 16 Dec 2025 23:10:25 +0000
Manifest this update: Tue 16 Dec 2025 23:10:25 +0000
Manifest next update: Tue 23 Dec 2025 23:10:25 +0000
Files and hashes: 1: gYkRn4AeKAprTdViZT7xA2lh0Js.crl (hash: QA0641dl0MElQSWVVeNLC9/ofklQm8/TyA8LVbC9CLc=)
2: D30098F6413111ECB71E086AC4F9AE02.roa (hash: Vt6tO0X/X1UwDMUAdETQmDLxSBvUfwttK8IaifttuUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl
rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 23:10:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1259 (0x4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D9CAE, serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Validity
Not Before: Dec 16 23:10:25 2025 GMT
Not After : Dec 23 23:10:25 2025 GMT
Subject: CN=6941e6e1-e164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:a3:6a:3e:33:22:18:a4:fb:c0:b1:b0:54:
e8:d0:11:b3:e7:17:50:f0:ed:c6:f2:ca:17:42:00:
cc:19:7f:d2:5c:76:e1:9f:cf:84:a3:fb:80:97:73:
e4:dd:5e:4a:e1:12:32:f1:6e:81:a7:fb:41:2b:00:
2c:d2:7a:9b:76:a9:c4:d0:90:79:44:5c:1d:6c:36:
60:5c:de:77:8c:83:a1:75:a7:91:b6:21:37:51:a9:
f2:cb:7f:1e:f1:84:5b:c8:2c:17:26:77:ff:38:ba:
df:50:b4:6e:26:0d:e3:8d:b7:f3:a7:d9:78:11:c7:
2a:ac:3f:6e:6b:f7:5e:19:41:d9:00:01:92:b1:8b:
15:3c:6c:81:f5:b3:b2:ef:a5:82:07:e1:37:1a:d4:
6e:43:f1:a0:db:13:ea:29:cd:8e:73:b1:31:c7:d2:
4b:b0:cf:3f:d2:a1:2f:d5:dd:32:74:13:b4:30:8e:
cf:13:06:84:33:48:19:1a:ae:23:60:e7:cd:fd:0d:
7e:61:66:2c:22:9f:a7:16:1b:a8:66:a7:0e:cb:8c:
f7:80:8b:8a:df:be:b0:67:4c:3b:33:02:e5:e8:f4:
73:1e:f5:74:51:af:a3:67:66:58:aa:09:6f:51:e3:
c8:a9:23:02:86:8c:97:59:4d:6e:72:b7:92:f2:54:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:15:EC:8A:0A:AB:32:C0:AB:26:7D:03:D6:F1:9E:D2:89:C7:A8:33
X509v3 Authority Key Identifier:
keyid:81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:38:b4:d8:2b:fc:59:5a:fe:d4:70:23:23:a0:3f:89:6f:fb:
3a:c8:cb:a2:83:40:67:84:4f:fe:ed:c9:41:fa:a2:e0:bd:77:
b3:03:51:e9:0c:b6:3a:48:5b:65:1a:a0:f8:62:5e:91:94:68:
fc:e2:2a:7a:8e:d2:2c:57:0d:4e:0b:c6:90:3f:e3:c5:0a:9e:
31:97:f8:85:8a:9d:62:1d:f9:63:82:93:ac:3d:12:68:00:73:
0b:14:65:dc:37:08:fc:83:3d:f2:3a:0b:32:6b:29:68:04:59:
29:f4:e5:79:43:3a:e0:1d:7a:22:af:05:2a:f1:18:48:e6:59:
e7:f9:ad:21:57:9d:57:36:5b:43:50:d1:af:99:b6:b7:51:d0:
3e:48:83:ab:66:a9:d7:25:ad:2a:4e:11:16:10:5e:62:11:8d:
9c:22:35:9b:88:9b:58:bf:36:48:d6:8d:82:a1:ee:66:e8:fe:
8e:ee:30:9d:95:14:d2:bf:12:4d:13:61:59:03:68:f7:42:55:
67:bd:80:ca:d5:9a:8c:0d:68:eb:23:f0:07:bf:55:9a:f5:7c:
4c:87:45:7f:3a:2f:f2:23:bd:4d:3f:41:8e:27:66:0b:b8:1a:
61:11:60:b4:f5:09:ad:6c:61:5a:7e:2f:13:08:51:44:09:62:
ec:56:80:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlDQUUxMTAvBgNVBAUTKDgxODkxMTlGODAxRTI4MEE2QjRERDU2MjY1M0VGMTAz
Njk2MUQwOUIwHhcNMjUxMjE2MjMxMDI1WhcNMjUxMjIzMjMxMDI1WjAYMRYwFAYD
VQQDDA02OTQxZTZlMS1lMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugWjaj4zIhik+8CxsFTo0BGz5xdQ8O3G8soXQgDMGX/SXHbhn8+Eo/uAl3Pk
3V5K4RIy8W6Bp/tBKwAs0nqbdqnE0JB5RFwdbDZgXN53jIOhdaeRtiE3Uanyy38e
8YRbyCwXJnf/OLrfULRuJg3jjbfzp9l4EccqrD9ua/deGUHZAAGSsYsVPGyB9bOy
76WCB+E3GtRuQ/Gg2xPqKc2Oc7Exx9JLsM8/0qEv1d0ydBO0MI7PEwaEM0gZGq4j
YOfN/Q1+YWYsIp+nFhuoZqcOy4z3gIuK376wZ0w7MwLl6PRzHvV0Ua+jZ2ZYqglv
UePIqSMChoyXWU1ucreS8lRubwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEV7IoK
qzLAqyZ9A9bxntKJx6gzMB8GA1UdIwQYMBaAFIGJEZ+AHigKa03VYmU+8QNpYdCb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUNBRS9GRUQ1QTJBODQx
MkUxMUVDQUJGN0Y1NjZDNEY5QUUwMi9nWWtSbjRBZUtBcHJUZFZpWlQ3eEEybGgw
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dZa1JuNEFlS0FwclRkVmlaVDd4QTJsaDBKcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
OUNBRS9GRUQ1QTJBODQxMkUxMUVDQUJGN0Y1NjZDNEY5QUUwMi9nWWtSbjRBZUtB
cHJUZFZpWlQ3eEEybGgwSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCdOLTYK/xZWv7UcCMjoD+Jb/s6yMuig0BnhE/+7clB+qLgvXezA1Hp
DLY6SFtlGqD4Yl6RlGj84ip6jtIsVw1OC8aQP+PFCp4xl/iFip1iHfljgpOsPRJo
AHMLFGXcNwj8gz3yOgsyayloBFkp9OV5QzrgHXoirwUq8RhI5lnn+a0hV51XNltD
UNGvmba3UdA+SIOrZqnXJa0qThEWEF5iEY2cIjWbiJtYvzZI1o2Coe5m6P6O7jCd
lRTSvxJNE2FZA2j3QlVnvYDK1ZqMDWjrI/AHv1Wa9XxMh0V/Oi/yI71NP0GOJ2YL
uBphEWC09QmtbGFafi8TCFFECWLsVoD/
-----END CERTIFICATE-----
Generated at Thu Dec 18 11:12:53 2025 by rpki-client