This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
File: BYl-c1406PZYdVSprzc0CCziidk.mft (raw, json)
Hash identifier: g6xo4rUxESJm4Do2vOm9vZG+DohiERSqct6djfhvDe8=
Subject key identifier: AF:D8:94:C8:B9:B5:D3:94:F8:02:0F:30:00:4C:5B:98:1E:71:91:00
Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
Certificate issuer: /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
Manifest number: 59
Signing time: Wed 03 Dec 2025 05:23:56 +0000
Manifest this update: Wed 03 Dec 2025 05:23:56 +0000
Manifest next update: Wed 10 Dec 2025 05:23:56 +0000
Files and hashes: 1: BYl-c1406PZYdVSprzc0CCziidk.crl (hash: flXZoj3uZVFH07pXST/cbZAWkW/3ysDD8gkOqg8OEGY=)
2: 2C3D8AAA50B511F09288303CC4F9AE02.roa (hash: BRO70xst4iX7U+BsAkMQkxP1DSIFJqspyvz/A47AIrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 05:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9
Validity
Not Before: Dec 3 05:23:56 2025 GMT
Not After : Dec 10 05:23:56 2025 GMT
Subject: CN=692fc96c-4d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:12:11:d8:71:63:49:a1:83:18:24:ea:54:
6c:ea:f0:e6:76:e3:5a:66:ad:ca:44:b3:71:08:aa:
c1:cd:ee:16:e1:ff:22:c5:d1:4a:e0:60:df:1b:ba:
e3:c4:78:91:d1:84:1d:4d:ae:4f:77:b5:53:ca:33:
2f:2d:e5:f4:3d:fd:fd:5c:e5:67:1b:4d:74:46:1a:
7f:58:62:8a:99:c1:f0:90:4b:c1:6c:f3:1b:8e:0c:
04:65:32:79:5d:5e:33:8e:1a:ed:dc:62:eb:9b:57:
08:4d:9d:8c:11:8c:23:a4:61:f5:a4:1c:88:af:35:
20:dc:0d:a8:81:73:74:07:d8:2f:b3:50:3d:ae:c9:
d7:15:b4:7f:b0:7a:7c:2f:d4:83:11:7b:0b:94:02:
53:e4:fb:c3:f1:ea:73:a7:2c:b9:71:e1:05:61:e2:
da:81:3e:d5:b8:d9:30:4f:51:df:f1:4b:3f:09:98:
bd:e4:09:90:5b:26:14:0b:65:8f:2f:42:73:aa:f6:
17:d0:24:e7:07:19:96:14:90:7c:3b:f0:c9:09:42:
14:29:bf:9d:b1:56:47:8d:44:dd:c9:f1:0e:25:a7:
34:b6:fd:fc:77:a2:b7:fc:d3:3c:0f:2f:39:49:d2:
ca:04:8a:c1:7a:5e:0b:cd:eb:2f:12:5d:b6:5d:ff:
36:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D8:94:C8:B9:B5:D3:94:F8:02:0F:30:00:4C:5B:98:1E:71:91:00
X509v3 Authority Key Identifier:
keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:ba:9b:97:92:a7:60:5c:16:5d:99:82:8d:cb:b4:69:21:f8:
26:5a:90:53:a7:d9:9a:30:4c:1b:ab:49:a4:60:85:fb:f5:5e:
6e:ce:96:a4:59:92:5e:b9:49:f0:14:54:23:c3:98:7a:4b:ad:
c9:3f:b7:44:1a:6f:f4:5f:e8:23:ac:be:5f:db:1e:6f:2e:a9:
ef:9f:dd:71:5b:9f:fb:54:a7:76:82:8a:b0:29:a1:4c:6c:bd:
29:6c:97:07:1e:76:72:a4:c8:f9:4d:c1:de:fb:86:89:20:b9:
1a:fb:1a:a3:ed:32:2b:b7:36:d5:93:c6:5a:39:b2:43:a9:67:
15:78:38:21:c1:2f:b4:9a:c8:3b:6d:20:7e:73:d1:b5:27:5e:
2d:3c:79:3a:78:c3:26:ce:1e:38:d2:c5:c9:90:50:f1:ec:3d:
a1:85:f8:75:d5:89:3e:cd:14:4d:b2:a7:f1:63:0f:b1:4d:9f:
38:1e:54:e3:d7:bf:ac:b3:43:ca:d0:99:00:39:c0:8a:8a:71:
d6:c1:82:98:78:83:0d:2b:cc:86:78:9f:5e:75:e2:bc:a7:90:
01:d4:03:cc:5e:2e:52:4c:08:d9:d5:94:95:8f:0f:81:ca:6d:
f7:0e:a0:81:ec:39:e4:40:24:5f:ab:b6:82:8d:94:d0:2d:62:
7a:aa:c1:99
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
ODlFNzExMC8GA1UEBRMoMDU4OTdFNzM1RTM0RThGNjU4NzU1NEE5QUYzNzM0MDgy
Q0UyODlEOTAeFw0yNTEyMDMwNTIzNTZaFw0yNTEyMTAwNTIzNTZaMBgxFjAUBgNV
BAMTDTY5MmZjOTZjLTRkMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3xxIR2HFjSaGDGCTqVGzq8OZ241pmrcpEs3EIqsHN7hbh/yLF0UrgYN8buuPE
eJHRhB1Nrk93tVPKMy8t5fQ9/f1c5WcbTXRGGn9YYoqZwfCQS8Fs8xuODARlMnld
XjOOGu3cYuubVwhNnYwRjCOkYfWkHIivNSDcDaiBc3QH2C+zUD2uydcVtH+wenwv
1IMRewuUAlPk+8Px6nOnLLlx4QVh4tqBPtW42TBPUd/xSz8JmL3kCZBbJhQLZY8v
QnOq9hfQJOcHGZYUkHw78MkJQhQpv52xVkeNRN3J8Q4lpzS2/fx3orf80zwPLzlJ
0soEisF6XgvN6y8SXbZd/zaLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUr9iUyLm1
05T4Ag8wAExbmB5xkQAwHwYDVR0jBBgwFoAUBYl+c1406PZYdVSprzc0CCziidkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OUU3Lzk5RDI4QzlDNEMw
OTExRjA5RjM4QjYyOEM0RjlBRTAyL0JZbC1jMTQwNlBaWWRWU3ByemMwQ0N6aWlk
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQllsLWMxNDA2UFpZZFZTcHJ6YzBDQ3ppaWRrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4
OUU3Lzk5RDI4QzlDNEMwOTExRjA5RjM4QjYyOEM0RjlBRTAyL0JZbC1jMTQwNlBa
WWRWU3ByemMwQ0N6aWlkay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAES6m5eSp2BcFl2Zgo3LtGkh+CZakFOn2ZowTBurSaRghfv1Xm7OlqRZ
kl65SfAUVCPDmHpLrck/t0Qab/Rf6COsvl/bHm8uqe+f3XFbn/tUp3aCirApoUxs
vSlslwcednKkyPlNwd77hokguRr7GqPtMiu3NtWTxlo5skOpZxV4OCHBL7SayDtt
IH5z0bUnXi08eTp4wybOHjjSxcmQUPHsPaGF+HXViT7NFE2yp/FjD7FNnzgeVOPX
v6yzQ8rQmQA5wIqKcdbBgph4gw0rzIZ4n1514rynkAHUA8xeLlJMCNnVlJWPD4HK
bfcOoIHsOeRAJF+rtoKNlNAtYnqqwZk=
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:14:39 2025 by rpki-client