This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
File: iz8j61_ij1gF49J7lTe7r6fN-UY.mft (raw, json)
Hash identifier: hsJmD1wjmTiG/9v+ils8DN+fy6diw6Pqfg2dw2yfXAc=
Subject key identifier: 0C:8D:00:C4:8D:57:4E:E3:A3:3D:EC:15:FF:43:E7:BE:48:2A:09:42
Authority key identifier: 8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46
Certificate issuer: /CN=A91E6C2D/serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
Certificate serial: 0236
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
Manifest number: 0231
Signing time: Mon 29 Dec 2025 01:08:23 +0000
Manifest this update: Mon 29 Dec 2025 01:08:22 +0000
Manifest next update: Mon 05 Jan 2026 01:08:22 +0000
Files and hashes: 1: iz8j61_ij1gF49J7lTe7r6fN-UY.crl (hash: c0ygBpYD0A98woWeh9bkMRZpScT5J+qaAjLg7ftzcI8=)
2: E8F4B2C48A0911ED8FCEE137C4F9AE02.roa (hash: hyVOWGrjCzsgaB5t6a964tLdF9KDC2L1JSe9IYMG8n4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl
rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 01:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 566 (0x236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6C2D, serialNumber=8B3F23EB5FE28F5805E3D27B9537BBAFA7CDF946
Validity
Not Before: Dec 29 01:08:22 2025 GMT
Not After : Jan 5 01:08:22 2026 GMT
Subject: CN=6951d487-7c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:34:31:a3:b9:a0:df:44:69:3a:7e:ad:3d:
6d:dd:ee:25:5d:c8:55:b0:0f:42:fd:a1:7e:0b:41:
a8:32:99:1d:6d:3a:d8:24:f9:dc:ea:70:1c:c6:87:
af:80:55:aa:2d:c6:b1:c6:65:f1:24:f0:28:d5:4c:
76:98:66:a6:14:ea:ea:cd:d9:66:dc:5c:b5:8a:f9:
bb:0a:e4:14:be:72:c2:93:d5:09:88:7d:d4:b7:73:
33:3e:f2:8f:09:73:4b:2d:a2:4e:0c:84:4c:ab:d1:
97:7e:d5:33:83:06:ba:9a:f2:09:f6:f9:49:cd:2e:
1c:d0:82:ff:12:15:8a:6a:c5:29:ba:5a:6d:fc:17:
7c:0b:79:28:16:92:b1:c0:34:02:3e:fc:85:38:c8:
94:90:5c:2c:34:83:bb:b6:69:22:c0:66:05:b8:a8:
d6:03:ef:38:d8:01:0f:c2:ea:c6:f6:3b:92:19:7f:
e6:39:f0:62:de:43:99:9f:4e:ef:b4:60:e7:5f:d2:
7d:19:64:4d:1c:f8:0f:87:46:0a:08:32:0f:c0:1f:
94:0c:b1:72:0e:50:d3:e8:29:03:66:6e:20:c4:cf:
3c:aa:0f:8c:e9:b2:31:38:c1:33:4a:bc:eb:f2:43:
a7:98:f5:a5:7d:b1:08:b6:ec:fc:0f:26:c2:38:ad:
b4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8D:00:C4:8D:57:4E:E3:A3:3D:EC:15:FF:43:E7:BE:48:2A:09:42
X509v3 Authority Key Identifier:
keyid:8B:3F:23:EB:5F:E2:8F:58:05:E3:D2:7B:95:37:BB:AF:A7:CD:F9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iz8j61_ij1gF49J7lTe7r6fN-UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C2D/C372132C8A0711ED8290A837C4F9AE02/iz8j61_ij1gF49J7lTe7r6fN-UY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:34:85:a0:98:9d:ae:e6:ad:ce:5e:9b:50:8b:71:4d:18:54:
91:5d:b3:6f:8d:63:d6:05:95:bf:02:fe:12:5d:f3:8e:56:79:
72:91:bc:1b:69:fd:7d:9e:f1:48:62:9c:49:b8:f2:fe:fc:a7:
70:cb:f1:eb:ad:53:31:d7:72:51:33:ab:e8:e9:5d:ae:b9:db:
66:68:3f:e6:ad:f2:e3:4c:4c:bf:d5:d5:2f:73:e9:23:35:9e:
a6:5c:6b:a1:4f:53:a9:1a:a2:62:5a:85:67:40:73:d8:53:33:
c8:8a:9f:ef:45:ec:2d:8f:b5:0d:c8:09:db:52:b1:9c:7f:6d:
67:ab:e4:01:fe:dd:d0:fe:c8:54:26:50:06:52:5b:03:26:45:
92:9e:e7:fa:59:38:ea:af:3f:18:ec:6b:7c:bc:86:78:0a:63:
6e:bb:4a:8d:a3:36:5b:f6:d9:0a:6b:b3:b7:7c:dd:26:d4:8f:
58:23:95:56:15:10:4b:b1:a2:dc:89:11:59:f2:b8:01:b6:e1:
fb:f3:eb:cb:34:8f:68:f6:55:bf:45:8b:37:c0:8f:af:3d:92:
dd:71:41:73:3c:9f:54:0d:71:08:0e:0a:d8:6f:89:d0:d2:89:
d5:19:47:da:76:6d:19:ad:8a:ae:1c:94:f4:51:e5:a1:a9:ec:
e8:23:62:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTZDMkQxMTAvBgNVBAUTKDhCM0YyM0VCNUZFMjhGNTgwNUUzRDI3Qjk1MzdCQkFG
QTdDREY5NDYwHhcNMjUxMjI5MDEwODIyWhcNMjYwMTA1MDEwODIyWjAYMRYwFAYD
VQQDDA02OTUxZDQ4Ny03YzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtPE0MaO5oN9EaTp+rT1t3e4lXchVsA9C/aF+C0GoMpkdbTrYJPnc6nAcxoev
gFWqLcaxxmXxJPAo1Ux2mGamFOrqzdlm3Fy1ivm7CuQUvnLCk9UJiH3Ut3MzPvKP
CXNLLaJODIRMq9GXftUzgwa6mvIJ9vlJzS4c0IL/EhWKasUpulpt/Bd8C3koFpKx
wDQCPvyFOMiUkFwsNIO7tmkiwGYFuKjWA+842AEPwurG9juSGX/mOfBi3kOZn07v
tGDnX9J9GWRNHPgPh0YKCDIPwB+UDLFyDlDT6CkDZm4gxM88qg+M6bIxOMEzSrzr
8kOnmPWlfbEItuz8DybCOK20ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyNAMSN
V07joz3sFf9D575IKglCMB8GA1UdIwQYMBaAFIs/I+tf4o9YBePSe5U3u6+nzflG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkMyRC9DMzcyMTMyQzhB
MDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWoxZ0Y0OUo3bFRlN3I2Zk4t
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2l6OGo2MV9pajFnRjQ5SjdsVGU3cjZmTi1VWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NkMyRC9DMzcyMTMyQzhBMDcxMUVEODI5MEE4MzdDNEY5QUUwMi9pejhqNjFfaWox
Z0Y0OUo3bFRlN3I2Zk4tVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7NIWgmJ2u5q3OXptQi3FNGFSRXbNvjWPWBZW/Av4SXfOOVnlykbwb
af19nvFIYpxJuPL+/Kdwy/HrrVMx13JRM6vo6V2uudtmaD/mrfLjTEy/1dUvc+kj
NZ6mXGuhT1OpGqJiWoVnQHPYUzPIip/vRewtj7UNyAnbUrGcf21nq+QB/t3Q/shU
JlAGUlsDJkWSnuf6WTjqrz8Y7Gt8vIZ4CmNuu0qNozZb9tkKa7O3fN0m1I9YI5VW
FRBLsaLciRFZ8rgBtuH78+vLNI9o9lW/RYs3wI+vPZLdcUFzPJ9UDXEIDgrYb4nQ
0onVGUfadm0ZrYquHJT0UeWhqezoI2IA
-----END CERTIFICATE-----
Generated at Wed Dec 31 01:50:14 2025 by rpki-client