This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
File: ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft (raw, json)
Hash identifier: 9n0AGImqEtFaG0SJrntwCiuJ0aFH8E8QmOj4ra4UGsE=
Subject key identifier: 92:5A:D9:C5:E4:10:11:4E:11:C5:58:65:16:D3:55:C0:0A:6D:04:A1
Authority key identifier: 21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
Certificate issuer: /CN=A913F2E2/serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Certificate serial: 0114
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
Manifest number: 0111
Signing time: Tue 23 Dec 2025 03:56:39 +0000
Manifest this update: Tue 23 Dec 2025 03:56:39 +0000
Manifest next update: Tue 30 Dec 2025 03:56:39 +0000
Files and hashes: 1: ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl (hash: vZ7+RlOscIX7+XM8PNEn0z+zsTywPFizP4WBDbK8c34=)
2: A8051CC4508011EF81053074C4F9AE02.roa (hash: iZKi03yPXyvt2gp9n65NJaRxsO6y4f9eMVz9ZTKKOUE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 03:56:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 276 (0x114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F2E2, serialNumber=21261B89749893C3B31841B96FE3FB6323032F18
Validity
Not Before: Dec 23 03:56:39 2025 GMT
Not After : Dec 30 03:56:39 2025 GMT
Subject: CN=694a12f7-c2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:19:cf:f4:52:8d:c8:68:db:39:6f:35:fc:
5a:75:58:86:75:71:4a:e4:4e:73:8f:66:f0:a6:9a:
e5:19:10:71:90:77:b9:8b:2e:ca:e2:ae:b7:00:5f:
13:9e:4b:7f:f5:b9:e8:1a:b9:a0:a1:c7:25:f3:52:
25:8f:fd:90:d4:67:78:90:59:22:bb:f4:a2:89:5b:
85:cb:3a:34:23:eb:07:c3:90:f3:6a:7b:25:dc:bb:
fa:6c:9f:af:58:f8:c6:ec:12:9d:4c:94:36:28:ab:
14:c6:10:7f:e3:77:61:d6:38:a5:c1:ad:eb:06:d5:
bb:ec:05:f2:ee:dd:05:2f:f2:c8:bb:c5:f6:5c:4e:
2d:90:f4:f4:10:08:4b:ff:0c:58:34:64:cb:06:1c:
3a:e5:01:d9:d4:34:94:e7:81:28:61:cd:55:70:73:
34:4d:e9:4a:2b:40:2c:1c:5a:d4:17:67:db:d0:74:
47:ba:f6:31:b7:7a:7a:af:b6:f0:78:9a:af:39:39:
e9:ad:0d:a8:14:9a:4b:91:06:56:8a:82:b7:11:06:
fa:43:35:59:63:ca:1b:01:01:fc:4f:61:e1:1d:58:
22:1a:86:99:be:59:fe:8c:23:94:21:44:50:51:e6:
d6:1c:d9:dd:3d:d3:b7:48:e2:be:ae:7f:43:69:d3:
fa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5A:D9:C5:E4:10:11:4E:11:C5:58:65:16:D3:55:C0:0A:6D:04:A1
X509v3 Authority Key Identifier:
keyid:21:26:1B:89:74:98:93:C3:B3:18:41:B9:6F:E3:FB:63:23:03:2F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ISYbiXSYk8OzGEG5b-P7YyMDLxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2E2/C5B6B936440411EFB9A62C0DC4F9AE02/ISYbiXSYk8OzGEG5b-P7YyMDLxg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0a:0c:90:a4:9e:a7:04:24:1b:0f:4c:40:fc:8a:a0:fd:0d:
f9:13:3f:91:bd:c0:62:51:de:bb:df:d0:89:f4:2c:68:92:83:
8c:82:33:62:8f:f4:2e:b9:43:9c:47:6a:d1:f9:e4:52:45:9e:
3f:bd:ef:ae:8e:8e:1c:85:74:ab:77:1d:23:59:49:34:30:9b:
6e:e2:35:49:ae:18:4d:74:7a:38:67:d5:41:f3:00:81:2e:48:
d3:00:5c:40:98:85:0a:11:ea:f8:4c:0e:ba:5b:5c:e8:9c:77:
a6:9d:1c:14:aa:06:9f:87:92:f7:e9:dd:53:80:14:03:e4:c1:
6f:56:d2:7f:83:b7:88:b1:d3:01:de:8b:10:c5:36:05:65:55:
c0:c7:a9:a8:c2:19:2e:e9:c0:e4:e1:0b:ce:a2:53:1b:a2:c8:
62:6a:22:c6:4f:b6:0a:eb:32:25:59:d5:79:43:89:24:2f:e1:
f3:16:f5:bc:f6:0b:96:5f:21:38:5b:39:66:eb:b5:11:ce:7a:
7c:3b:eb:6c:2b:39:65:af:38:1c:25:a7:50:a6:a9:db:43:33:
67:6d:72:75:98:1b:8e:29:67:85:89:79:fa:b5:ce:30:44:ac:
f4:06:90:e7:d8:db:f3:69:af:65:c7:f5:6f:3b:2d:48:dd:8d:
f9:a3:09:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YyRTIxMTAvBgNVBAUTKDIxMjYxQjg5NzQ5ODkzQzNCMzE4NDFCOTZGRTNGQjYz
MjMwMzJGMTgwHhcNMjUxMjIzMDM1NjM5WhcNMjUxMjMwMDM1NjM5WjAYMRYwFAYD
VQQDDA02OTRhMTJmNy1jMmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzFoZz/RSjcho2zlvNfxadViGdXFK5E5zj2bwpprlGRBxkHe5iy7K4q63AF8T
nkt/9bnoGrmgoccl81Ilj/2Q1Gd4kFkiu/SiiVuFyzo0I+sHw5Dzansl3Lv6bJ+v
WPjG7BKdTJQ2KKsUxhB/43dh1jilwa3rBtW77AXy7t0FL/LIu8X2XE4tkPT0EAhL
/wxYNGTLBhw65QHZ1DSU54EoYc1VcHM0TelKK0AsHFrUF2fb0HRHuvYxt3p6r7bw
eJqvOTnprQ2oFJpLkQZWioK3EQb6QzVZY8obAQH8T2HhHVgiGoaZvln+jCOUIURQ
UebWHNndPdO3SOK+rn9DadP6jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJa2cXk
EBFOEcVYZRbTVcAKbQShMB8GA1UdIwQYMBaAFCEmG4l0mJPDsxhBuW/j+2MjAy8Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJFMi9DNUI2QjkzNjQ0
MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4T3pHRUc1Yi1QN1l5TURM
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lTWWJpWFNZazhPekdFRzViLVA3WXlNREx4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjJFMi9DNUI2QjkzNjQ0MDQxMUVGQjlBNjJDMERDNEY5QUUwMi9JU1liaVhTWWs4
T3pHRUc1Yi1QN1l5TURMeGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKCgyQpJ6nBCQbD0xA/Iqg/Q35Ez+RvcBiUd6739CJ9CxokoOMgjNi
j/QuuUOcR2rR+eRSRZ4/ve+ujo4chXSrdx0jWUk0MJtu4jVJrhhNdHo4Z9VB8wCB
LkjTAFxAmIUKEer4TA66W1zonHemnRwUqgafh5L36d1TgBQD5MFvVtJ/g7eIsdMB
3osQxTYFZVXAx6mowhku6cDk4QvOolMboshiaiLGT7YK6zIlWdV5Q4kkL+HzFvW8
9guWXyE4Wzlm67URznp8O+tsKzllrzgcJadQpqnbQzNnbXJ1mBuOKWeFiXn6tc4w
RKz0BpDn2Nvzaa9lx/VvOy1I3Y35ownA
-----END CERTIFICATE-----
Generated at Wed Dec 24 17:37:17 2025 by rpki-client