This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
File: ny5XiO95WFurdhmHfTlierLl1Rk.mft (raw, json)
Hash identifier: EcDv1OrGI4sk8yQc9HWCzbpVohIwVw+fwXqePzxXg30=
Subject key identifier: E3:FA:4F:60:46:1D:0F:56:81:E7:4A:4F:EB:75:FD:8B:35:33:1A:81
Authority key identifier: 9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
Certificate issuer: /CN=A913A7A6/serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Certificate serial: 0A81
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
Manifest number: 0A79
Signing time: Wed 24 Dec 2025 19:06:08 +0000
Manifest this update: Wed 24 Dec 2025 19:06:08 +0000
Manifest next update: Wed 31 Dec 2025 19:06:08 +0000
Files and hashes: 1: ny5XiO95WFurdhmHfTlierLl1Rk.crl (hash: MPsGw75/AtZWv+mfpYz5FS+IXBt6lykABJ3Idwjl/d8=)
2: 4DAFC184ADC011ED897A4050C4F9AE02.roa (hash: Za3bISDsY9jXSiAUyE8K8a9BeVgovmO/YNcIsWrBq60=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 31 Dec 2025 19:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2689 (0xa81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=9F2E5788EF79585BAB7619877D39627AB2E5D519
Validity
Not Before: Dec 24 19:06:08 2025 GMT
Not After : Dec 31 19:06:08 2025 GMT
Subject: CN=694c39a0-9e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:00:0f:dd:f2:97:1f:0c:0e:6f:65:94:fd:
78:a2:90:6d:a8:b9:e9:85:65:01:a2:b4:d3:15:aa:
ad:52:8e:7c:d6:77:27:6a:5e:e0:7e:6b:a5:30:cd:
53:56:23:e7:5f:a3:7e:41:d5:ad:af:45:95:51:a3:
59:12:94:08:97:0b:4c:80:0a:b2:c9:e2:96:18:30:
30:8f:42:1d:6f:29:23:87:0f:93:d4:3e:92:41:2c:
30:7f:b1:24:e6:3f:db:c1:cc:34:35:a5:64:b3:e5:
73:45:e7:1d:80:ed:d0:c3:3e:44:93:0e:46:17:fd:
6a:2a:79:be:24:8b:ee:30:69:d3:36:cc:39:3e:fc:
f1:ad:82:44:31:af:cf:ab:d6:0f:04:ba:19:45:8a:
fd:16:e5:fb:0f:89:11:ac:b2:33:25:22:d1:89:e8:
f5:0c:89:0b:3e:dd:f2:95:98:0d:62:26:fd:c8:7c:
f2:06:94:18:c4:1c:89:d8:a6:81:79:cd:c3:ba:76:
f6:0f:dc:e8:95:40:57:1f:90:22:b2:18:14:cc:57:
68:61:d9:69:84:ef:36:35:b6:bf:66:5c:4e:99:18:
8a:b8:bf:28:04:57:b0:82:57:1c:40:5f:f9:a0:c8:
82:7f:fa:67:fb:00:1a:f8:53:c5:11:95:7e:29:90:
d7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FA:4F:60:46:1D:0F:56:81:E7:4A:4F:EB:75:FD:8B:35:33:1A:81
X509v3 Authority Key Identifier:
keyid:9F:2E:57:88:EF:79:58:5B:AB:76:19:87:7D:39:62:7A:B2:E5:D5:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ny5XiO95WFurdhmHfTlierLl1Rk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/457A8E8273B611EA9B8C1F5CC4F9AE02/ny5XiO95WFurdhmHfTlierLl1Rk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ea:05:e0:ac:17:08:34:e9:b8:37:61:ef:df:2e:ad:2c:e6:
f4:70:8f:10:e7:07:cc:42:25:3e:61:9d:9f:dd:ab:fd:68:51:
67:df:67:aa:a5:a8:7a:5e:d6:95:a5:2c:b3:c3:b2:0b:00:7c:
75:f2:1a:26:07:8e:73:04:15:59:40:a0:8c:c6:81:db:ca:52:
55:2d:fa:b0:b0:3e:85:25:8e:0b:e7:d8:75:fc:5e:39:76:53:
58:0f:d6:78:aa:c9:2d:1c:27:8e:62:dd:e0:c9:a6:63:2c:d1:
dc:26:f7:e1:0e:87:ce:13:2d:7e:46:f0:fd:b8:d1:4a:06:0e:
20:5b:c3:07:3b:33:0b:82:56:d8:24:a7:2b:15:38:13:d5:ba:
5f:0e:b2:83:a1:a7:3f:4d:5e:f4:22:34:d8:9a:55:d2:bb:c6:
bb:f5:28:d3:20:5c:30:51:29:2e:69:b8:d8:43:7a:88:ad:cc:
58:45:dd:66:3a:64:27:1c:5c:dd:d1:6c:02:94:e3:33:b5:66:
48:46:1d:e7:fa:93:fa:a8:8f:45:b6:e0:cc:cf:01:19:19:a5:
b7:09:25:42:17:27:ac:62:f3:2c:00:d7:ef:39:19:ff:72:56:
d9:5e:15:f4:b2:79:58:4b:71:86:07:1d:fc:6a:6d:a0:a5:eb:
1a:13:97:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 00:28:17 2025 by rpki-client