This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
File: lY1wluouaxa8JKHQRXGdLsUUSX4.mft (raw, json)
Hash identifier: aWosLaAjpCeFMiOLNOdkYbFFcQd1VPjlkKQB4c2TA04=
Subject key identifier: F9:79:F5:69:56:61:0E:2F:7D:7B:B4:23:08:CC:41:8E:2E:24:C0:FD
Authority key identifier: 95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
Certificate issuer: /CN=A91E28D8/serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Certificate serial: 02C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
Manifest number: 02BC
Signing time: Fri 19 Dec 2025 00:39:41 +0000
Manifest this update: Fri 19 Dec 2025 00:39:40 +0000
Manifest next update: Fri 26 Dec 2025 00:39:40 +0000
Files and hashes: 1: lY1wluouaxa8JKHQRXGdLsUUSX4.crl (hash: 63//EzSgbAY4qj8BXM6YzhIKo9G5RCBzmAdww1Uoobk=)
2: 01109D481B9011EDBC68484CC4F9AE02.roa (hash: SSzVNdfhJc5xjlACETmueaivBNOUX59PK+NBqYEOe30=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 00:39:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704 (0x2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E28D8, serialNumber=958D7096EA2E6B16BC24A1D045719D2EC514497E
Validity
Not Before: Dec 19 00:39:40 2025 GMT
Not After : Dec 26 00:39:40 2025 GMT
Subject: CN=69449ecd-0b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:01:a2:53:1e:fd:20:22:65:7e:c3:20:9c:
2a:39:f5:f9:4a:4f:75:56:ba:42:d1:de:1a:23:2f:
3f:d3:8f:9f:86:b0:fb:23:89:5b:57:6e:de:c3:88:
a3:18:75:43:76:85:e1:87:61:dc:84:ca:74:a0:ed:
7b:1b:f5:6a:f7:8f:d1:91:a1:03:01:6e:c9:36:4d:
95:22:6e:99:e1:db:53:5d:06:b5:ba:2e:0b:19:9a:
ce:12:41:97:7c:88:77:33:6f:95:76:ec:eb:15:1d:
9e:ec:93:eb:14:d1:f3:61:c7:b2:5d:72:9f:97:79:
31:b9:65:c0:75:df:24:7e:65:af:1d:88:a4:d8:c9:
f9:28:30:02:18:19:ef:f9:db:08:4f:f6:59:1f:05:
4d:b0:ff:77:21:dd:52:b7:ad:cb:75:14:06:7b:f7:
b2:c9:64:9d:3a:0a:a1:14:e5:26:b8:dd:4b:1a:f8:
14:39:36:a8:3e:b2:6a:b1:de:53:00:ed:cb:c6:26:
d4:39:50:20:f7:24:1c:b0:fa:6e:89:b8:d3:85:9d:
81:bb:bd:d4:09:4c:4b:fd:62:44:1a:ef:7e:f0:8e:
0f:5a:45:b4:1b:92:1f:dc:ae:dc:da:ea:30:13:1f:
a9:92:2d:82:c1:dd:9f:06:92:06:90:4e:63:63:42:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:79:F5:69:56:61:0E:2F:7D:7B:B4:23:08:CC:41:8E:2E:24:C0:FD
X509v3 Authority Key Identifier:
keyid:95:8D:70:96:EA:2E:6B:16:BC:24:A1:D0:45:71:9D:2E:C5:14:49:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lY1wluouaxa8JKHQRXGdLsUUSX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28D8/6B24BCC21ABF11EDB5B4CC4CC4F9AE02/lY1wluouaxa8JKHQRXGdLsUUSX4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:a1:66:cb:41:0e:f9:d3:9f:06:f2:18:27:5a:64:1f:c8:e3:
72:8c:ef:3c:e1:65:81:7a:fa:70:15:aa:ce:e7:f0:f9:b6:31:
9f:51:df:07:27:f6:29:d9:a3:18:4a:dd:a8:73:db:ca:4d:e2:
76:63:e6:a0:41:74:e9:97:66:fb:df:c6:63:df:1d:e7:5f:01:
f7:e0:19:32:27:d3:8b:00:07:42:67:ab:7e:45:27:f2:6c:e2:
3b:d1:9b:ce:91:ee:8f:c3:29:e2:47:bf:90:9d:77:7f:34:e8:
b2:70:9a:46:94:42:96:56:f9:b2:36:3a:f3:c9:38:29:43:18:
f8:13:70:55:30:39:65:40:e5:b9:b2:f9:01:3c:ee:19:59:f3:
9a:5d:e7:59:59:ab:26:ce:10:b9:b6:11:3b:44:b4:59:4b:99:
88:80:f1:a3:cc:55:dd:88:37:05:43:0f:53:28:99:bf:25:30:
77:43:7b:6c:42:d3:bd:7e:cb:cd:ae:33:3c:60:30:08:c4:f6:
ea:c0:bd:1d:90:35:77:60:5c:ab:be:4c:85:7f:6a:29:09:c2:
ea:2c:2f:3e:d6:a8:81:27:0c:5d:f6:a2:57:5f:5a:c4:58:15:
2a:a2:df:c1:21:3a:7d:33:24:e5:1c:8a:aa:cc:a5:a6:0e:14:
af:2a:26:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI4RDgxMTAvBgNVBAUTKDk1OEQ3MDk2RUEyRTZCMTZCQzI0QTFEMDQ1NzE5RDJF
QzUxNDQ5N0UwHhcNMjUxMjE5MDAzOTQwWhcNMjUxMjI2MDAzOTQwWjAYMRYwFAYD
VQQDDA02OTQ0OWVjZC0wYjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsvUBolMe/SAiZX7DIJwqOfX5Sk91VrpC0d4aIy8/04+fhrD7I4lbV27ew4ij
GHVDdoXhh2HchMp0oO17G/Vq94/RkaEDAW7JNk2VIm6Z4dtTXQa1ui4LGZrOEkGX
fIh3M2+VduzrFR2e7JPrFNHzYceyXXKfl3kxuWXAdd8kfmWvHYik2Mn5KDACGBnv
+dsIT/ZZHwVNsP93Id1St63LdRQGe/eyyWSdOgqhFOUmuN1LGvgUOTaoPrJqsd5T
AO3LxibUOVAg9yQcsPpuibjThZ2Bu73UCUxL/WJEGu9+8I4PWkW0G5If3K7c2uow
Ex+pki2Cwd2fBpIGkE5jY0LH8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPl59WlW
YQ4vfXu0IwjMQY4uJMD9MB8GA1UdIwQYMBaAFJWNcJbqLmsWvCSh0EVxnS7FFEl+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhEOC82QjI0QkNDMjFB
QkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4YThKS0hRUlhHZExzVVVT
WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xZMXdsdW91YXhhOEpLSFFSWEdkTHNVVVNYNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjhEOC82QjI0QkNDMjFBQkYxMUVEQjVCNENDNENDNEY5QUUwMi9sWTF3bHVvdWF4
YThKS0hRUlhHZExzVVVTWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnoWbLQQ75058G8hgnWmQfyONyjO884WWBevpwFarO5/D5tjGfUd8H
J/Yp2aMYSt2oc9vKTeJ2Y+agQXTpl2b738Zj3x3nXwH34BkyJ9OLAAdCZ6t+RSfy
bOI70ZvOke6PwyniR7+QnXd/NOiycJpGlEKWVvmyNjrzyTgpQxj4E3BVMDllQOW5
svkBPO4ZWfOaXedZWasmzhC5thE7RLRZS5mIgPGjzFXdiDcFQw9TKJm/JTB3Q3ts
QtO9fsvNrjM8YDAIxPbqwL0dkDV3YFyrvkyFf2opCcLqLC8+1qiBJwxd9qJXX1rE
WBUqot/BITp9MyTlHIqqzKWmDhSvKiaR
-----END CERTIFICATE-----
Generated at Fri Dec 19 17:47:52 2025 by rpki-client