This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
File: dyhBomMmMU6i5Dg0dd4xttzn26U.mft (raw, json)
Hash identifier: 8gOhekA2T3ssbh+EDIs0KAXFIj1r9/X7s+GRQKZE3uI=
Subject key identifier: AC:C7:77:88:C9:5E:CE:3B:3D:BD:57:94:AF:27:B2:0C:F1:25:16:33
Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
Certificate issuer: /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Certificate serial: 03B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
Manifest number: 039B
Signing time: Mon 22 Dec 2025 23:51:40 +0000
Manifest this update: Mon 22 Dec 2025 23:51:39 +0000
Manifest next update: Mon 29 Dec 2025 23:51:39 +0000
Files and hashes: 1: dyhBomMmMU6i5Dg0dd4xttzn26U.crl (hash: asidBh9rdHSYJI+cOiICo05+BE3s+o2qL7MRqsgVYoE=)
2: B5A58DFAA1DB11EDA7229653C4F9AE02.roa (hash: wpxndu3e3JLlbyaAJc8xMGR8CKGxyBNouBJsOCWSNis=)
3: 73E82004BCA111ED914D176DC4F9AE02.roa (hash: LzJH4FwSIzAHt5kndFRR1wqiyJf/0fMEKdNxi5QEKA4=)
4: 81F21152D1BD11EC9D8FBC52C4F9AE02.roa (hash: DavRSCZXh0NjWkBtqCUm0P5Y6uJAvAoKRo/hi86WtUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9324, serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Validity
Not Before: Dec 22 23:51:39 2025 GMT
Not After : Dec 29 23:51:39 2025 GMT
Subject: CN=6949d98b-0daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7b:a0:2d:cf:37:0b:ae:01:aa:ae:26:dc:e5:
b7:04:bd:8b:ed:08:0c:82:43:11:46:e8:fa:85:1c:
bf:ac:cb:69:13:bc:43:c1:c0:b8:b4:b9:3d:d1:9c:
14:aa:24:96:86:fe:c0:a3:0a:ed:d0:a3:c5:26:3a:
fc:d8:71:9f:69:69:6a:dd:c1:f2:d0:f8:02:ca:af:
73:0e:cc:0e:52:59:18:59:b6:e7:da:05:57:a7:64:
ab:d9:8c:ef:91:16:e1:84:8b:bc:f8:a8:23:af:98:
86:e6:1c:69:59:d4:7f:e3:49:d1:4c:14:a7:6e:d2:
d5:a6:c2:ca:58:88:6f:73:6f:f5:0f:c3:9b:5f:48:
65:54:0c:61:fc:93:e6:04:d4:e3:ea:b6:a2:72:ee:
0f:da:4a:14:68:da:3a:c8:2b:5f:cf:6d:8c:5a:1d:
0c:1b:1d:b7:0a:2f:82:f3:ba:a3:f4:7f:f4:63:7b:
0a:be:8e:90:43:ef:ee:56:be:9c:90:d0:81:22:1c:
a5:e2:6c:57:af:c6:86:5d:de:7a:66:98:51:96:6c:
83:09:65:bc:99:74:f9:3f:48:29:1a:ee:cc:06:59:
e9:1c:4d:1d:8a:42:82:5c:69:ff:f1:6a:c8:a5:f0:
5d:36:af:49:54:12:1d:0b:eb:0c:fc:27:c0:7a:c4:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C7:77:88:C9:5E:CE:3B:3D:BD:57:94:AF:27:B2:0C:F1:25:16:33
X509v3 Authority Key Identifier:
keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b0:49:f2:ac:f9:72:77:0e:17:dc:78:3c:19:ca:72:80:0a:
df:30:c9:d3:43:86:ae:fb:92:4a:31:76:40:ee:ef:cf:ff:83:
24:7f:b3:c5:7e:01:23:71:ec:d6:0d:fd:07:f6:77:0f:57:89:
22:62:21:90:bf:f9:1d:57:5b:b0:c6:15:4c:cc:ff:cf:e5:58:
f1:ce:b4:a8:9a:7f:3a:81:0d:1e:fb:54:a8:cd:5a:49:e2:63:
dd:ab:e2:b9:1a:7c:09:1c:28:a4:7e:c6:54:54:41:b3:fc:93:
a4:b6:d2:cb:b4:36:50:91:52:cf:a1:55:f2:a3:c9:3a:64:79:
70:79:e0:e0:cf:a2:e5:bc:f0:ba:51:2a:05:74:42:c6:bc:8b:
80:51:f0:61:58:63:47:62:3c:bb:ba:e9:04:f1:71:fc:2a:4d:
59:20:f7:db:09:f0:25:3b:e0:31:67:95:ec:eb:ea:2c:40:5b:
8d:9f:e5:7d:9e:16:9b:c2:3c:e4:d8:70:f6:a9:88:80:3a:9b:
26:7d:61:0a:56:3f:0f:47:e9:dc:62:be:33:23:71:65:e7:c2:
50:8f:68:22:fc:ce:b1:3c:01:dd:0f:c9:06:00:fb:f9:2a:69:
ce:55:02:b4:79:63:a7:0d:a5:71:9d:ca:18:64:e1:b1:88:24:
dc:5d:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:34:35 2025 by rpki-client