This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
File: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft (raw, json)
Hash identifier: TpAdb/I/TDVe2Dgko907Qm13+SYF0XYrAsXKmNz/tDA=
Subject key identifier: 41:EA:75:36:1D:B6:7C:52:53:DC:CD:67:89:62:8E:FE:BF:86:C6:90
Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02
Certificate issuer: /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
Certificate serial: 01EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
Manifest number: 0D05
Signing time: Sat 06 Dec 2025 18:34:00 +0000
Manifest this update: Sat 06 Dec 2025 18:33:59 +0000
Manifest next update: Sat 13 Dec 2025 18:33:59 +0000
Files and hashes: 1: 1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl (hash: zvYd9hrLd77RzLXy7I/caQl9L0exfxKDjBInTjFhlE4=)
2: 751E90665BAB11EFB9769A80C4F9AE02.roa (hash: eILOAPk7hEfHA4Xc/eZDuicer6q0kZbC4fsjNG1XiFo=)
3: 21980772889311F09BCDF026C4F9AE02.roa (hash: vyvXubrm30cc5Lys14j8eTN8Ivb86Ln6IWEbkR3PYy0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl
rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 18:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
Validity
Not Before: Dec 6 18:33:59 2025 GMT
Not After : Dec 13 18:33:59 2025 GMT
Subject: CN=69347717-6736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:22:a8:f3:77:ae:aa:53:1c:d1:38:02:d3:
80:ff:d3:f5:37:0c:fd:f8:d1:8e:45:6d:10:8f:0c:
21:86:7e:05:66:c0:50:e2:78:21:2c:18:29:40:51:
55:fc:86:03:42:57:53:f9:c3:b7:b5:e6:f7:34:d4:
6d:6d:8e:29:4c:ec:53:cb:e1:66:f5:ab:2f:4a:29:
b2:22:9e:65:9a:d0:dd:d7:77:4d:86:48:93:48:43:
19:49:7c:6d:a2:3f:1f:1c:47:2e:6a:a5:94:8e:db:
08:a8:7d:bc:28:0c:5d:e5:3b:e0:31:37:83:6a:36:
23:b2:c9:c2:22:52:93:70:ef:4b:27:dc:ca:fd:fc:
2a:17:16:36:50:87:7e:a6:ef:d3:5f:94:54:de:24:
2a:bc:47:9a:2d:e8:4d:b4:0f:9c:d0:1b:26:0c:0c:
9d:31:ea:a7:b0:2f:12:83:25:d0:85:77:26:55:f4:
d1:ae:ef:ea:af:12:bf:37:b0:43:60:bd:d7:80:38:
e5:75:02:62:c6:d9:5b:5d:89:ff:d3:12:64:fc:c9:
d2:c6:d8:05:a5:dc:27:d9:ab:df:57:9c:f2:77:6b:
d4:b0:48:48:d6:da:0c:ce:0b:78:5c:9d:50:b6:ac:
8d:ee:a9:c3:a9:4d:7e:3c:6d:5d:37:58:4d:57:9b:
e9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EA:75:36:1D:B6:7C:52:53:DC:CD:67:89:62:8E:FE:BF:86:C6:90
X509v3 Authority Key Identifier:
keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:17:16:dd:82:5d:85:d8:15:7e:ea:ed:fa:a8:7b:45:ce:d9:
88:7e:61:4a:3b:fb:b2:9c:98:dc:5f:cd:61:d5:82:71:bf:3c:
70:c1:2b:41:98:98:d1:de:f8:28:92:f1:10:67:ac:b4:0b:4b:
98:6a:41:a1:c0:7c:e6:8b:6b:e6:6c:fa:36:55:1b:0b:cc:ae:
e3:4f:12:9a:f1:d5:77:5c:ac:63:f1:0b:9b:58:c8:f4:62:ff:
28:8e:53:f3:e0:36:e2:78:66:79:f3:4a:b4:49:28:ed:12:8a:
9f:81:7f:f5:9b:f4:35:2d:67:de:c8:ce:2f:4d:a0:29:cd:f2:
42:b5:3d:3e:88:ac:34:36:23:af:10:5d:5c:c2:04:6f:0d:ec:
ef:a7:c6:95:3c:a9:b9:d6:58:8f:06:96:91:b7:81:ac:04:ee:
3e:b8:d1:77:27:97:d2:ed:99:e1:3b:d6:63:69:1a:77:c8:9b:
51:7c:16:d5:80:ef:d1:6a:d4:66:54:7f:73:9c:46:ca:45:36:
b0:d6:a6:2c:b3:26:c6:cc:08:35:28:4b:99:aa:fb:35:9f:74:
49:98:f4:47:2b:be:33:a9:35:93:20:4f:a5:5b:4b:57:95:df:
de:cf:27:54:1d:09:61:ff:d7:b6:07:a5:fb:bd:54:54:90:51:
03:26:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:14:28 2025 by rpki-client