This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
File: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft (raw, json)
Hash identifier: TZ58y+WWA1XkPGa1jY06qrrJWi7I73gyc2VM5DbU6z0=
Subject key identifier: F9:9C:3F:69:51:52:7B:BC:1D:92:28:90:FF:C3:2F:B2:23:19:1A:64
Authority key identifier: 63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
Certificate issuer: /CN=A91DCDB3/serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Certificate serial: 0194
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
Manifest number: 018F
Signing time: Fri 19 Dec 2025 02:44:47 +0000
Manifest this update: Fri 19 Dec 2025 02:44:46 +0000
Manifest next update: Fri 26 Dec 2025 02:44:46 +0000
Files and hashes: 1: Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl (hash: dHIiF5kN/n5DFG6VSVVLr148q6ngq2xhps/rsonPEVY=)
2: A4B89C5082B111EEB427125DC4F9AE02.roa (hash: Si3a7BG/8OJeYXWshDKB1ssBaH31J9TWvH+Wp+wV/dA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCDB3, serialNumber=63A29ABD87F4A1FE55CBF2A0F409750AC34AC235
Validity
Not Before: Dec 19 02:44:46 2025 GMT
Not After : Dec 26 02:44:46 2025 GMT
Subject: CN=6944bc1f-b6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:d4:e5:1b:99:25:10:9e:52:7c:b8:6f:2b:
cc:35:e3:7f:7e:47:c6:c4:0e:15:cc:ef:30:61:e1:
75:b6:85:41:c1:13:4e:f3:73:7e:15:e3:c7:ca:83:
c2:88:30:f2:ef:c7:57:b6:e4:be:dc:62:c7:46:0f:
ec:37:64:d9:02:cd:01:f4:5e:75:7a:35:b4:6d:74:
06:80:74:95:47:98:0d:fd:04:d7:b8:3e:97:72:7d:
97:51:f7:f1:3d:32:40:3b:90:8e:51:bc:4a:3e:61:
d5:18:43:6f:c4:2d:82:92:ba:26:4d:10:2f:0b:b0:
a9:ba:b5:d8:e4:a4:26:0f:a1:0c:e7:bb:fd:00:80:
52:2b:fd:41:16:64:86:93:dc:05:8f:66:4b:0a:e4:
45:7a:b3:49:b8:bb:25:bd:56:f2:f7:44:9b:92:ba:
59:05:d4:62:aa:9f:74:c9:44:9d:7d:66:49:85:00:
a9:10:1c:c0:4b:48:a8:be:e9:77:73:0d:eb:46:55:
3e:f6:c1:96:9e:be:9f:a2:42:45:05:c3:79:5a:0f:
be:9f:e8:be:0d:05:19:d1:bd:b7:2d:9b:6d:bf:56:
e2:f7:5e:af:b6:8c:d5:62:58:7d:94:55:77:1e:a8:
85:25:c7:76:43:b3:e9:01:eb:b3:71:58:5b:b4:06:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9C:3F:69:51:52:7B:BC:1D:92:28:90:FF:C3:2F:B2:23:19:1A:64
X509v3 Authority Key Identifier:
keyid:63:A2:9A:BD:87:F4:A1:FE:55:CB:F2:A0:F4:09:75:0A:C3:4A:C2:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCDB3/9305D2E082AF11EEBEC59759C4F9AE02/Y6KavYf0of5Vy_Kg9Al1CsNKwjU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1d:79:57:03:1b:d1:f2:d4:73:55:e8:1f:4d:8f:c9:0b:3b:
4a:99:13:3b:30:26:a0:91:7d:f5:3a:ad:71:0c:51:c7:bf:95:
56:74:8d:fa:7a:e5:13:5c:de:c7:bb:3d:2e:95:c6:b6:c5:9c:
2f:46:e7:f7:03:4f:54:8f:f8:e7:1a:d0:1e:90:b0:e6:21:cc:
c4:a8:12:d7:67:1e:cb:4a:09:f3:49:ae:45:0c:5f:f6:a3:4e:
ef:84:76:71:36:31:49:9d:b2:1f:b3:37:90:b5:8e:35:58:80:
51:af:7d:16:5d:1e:ea:5f:83:55:49:98:60:be:4c:7d:ec:a6:
5f:30:39:09:0a:a4:54:18:4f:a1:13:c4:d9:7d:51:43:2c:07:
3e:5f:10:26:f3:04:31:3f:0f:c2:80:89:b8:08:77:e3:db:69:
15:6f:0f:5e:be:75:b9:d2:85:5f:9d:5b:4b:93:a3:9f:36:55:
be:97:a7:d0:e2:2f:92:07:19:ba:52:19:58:4d:45:21:77:28:
2b:80:73:7a:24:6f:d2:1b:2b:08:2f:43:c2:22:2b:e2:42:c0:
d8:57:b7:e8:17:5e:49:75:2a:83:40:b7:b5:0f:c4:65:0e:90:
71:a5:9f:fc:79:49:72:a9:cf:8a:8a:47:ee:3a:13:f4:e2:29:
16:a0:65:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:05 2025 by rpki-client