This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
File: ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json)
Hash identifier: y9jKyMHSnT2xy7mxhhJjHGMHmI4HG0zgqfc3NBeHJTo=
Subject key identifier: 2B:88:05:65:52:77:38:3D:E7:7E:15:CF:16:D6:D2:BD:7E:2E:E2:72
Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Certificate serial: 0CB1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
Manifest number: 0CA7
Signing time: Tue 02 Dec 2025 17:52:47 +0000
Manifest this update: Tue 02 Dec 2025 17:52:47 +0000
Manifest next update: Tue 09 Dec 2025 17:52:47 +0000
Files and hashes: 1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: 28Co7IRzovjp/ysZNGVapWVAtP67TB4gK6/p64XPPZE=)
2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: QXDdzYa6iyzovy5Z9ik5QXaJEcfXc3NGsSzn/V3Ryt4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 17:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3249 (0xcb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Validity
Not Before: Dec 2 17:52:47 2025 GMT
Not After : Dec 9 17:52:47 2025 GMT
Subject: CN=692f276f-3522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:c8:73:db:29:1a:a8:90:bc:bf:87:9f:b0:
ee:c0:9f:26:ec:5d:c9:c1:c2:29:26:aa:47:5e:e6:
7b:5a:d7:a5:30:be:37:d8:9c:60:eb:d5:06:5d:46:
05:88:6b:0e:52:e2:32:83:c8:34:ef:96:95:63:f0:
c2:14:5d:5c:3e:4b:14:cf:01:26:54:d1:72:5a:92:
d9:1b:7c:6b:0c:11:62:46:ab:aa:7c:ce:ff:47:17:
ab:55:2c:46:2a:b1:ca:93:20:75:76:c7:12:9d:6e:
0c:bf:02:55:e5:12:f0:5f:ac:ae:e3:ca:02:be:de:
c9:6c:fd:a7:d3:d7:46:36:0c:4f:99:c9:9d:12:c0:
58:31:96:76:c8:fd:8e:a0:9a:45:27:24:a2:e5:9b:
3b:c3:79:c3:23:70:a6:14:2f:07:48:2b:f6:9f:f0:
5b:31:89:b1:11:ff:f3:2f:7a:19:9d:1e:dc:5a:15:
28:43:06:e7:55:00:b9:2c:f2:48:e5:0a:88:82:24:
4b:3e:a4:89:ed:15:8f:5a:53:4c:af:88:08:53:f8:
f1:28:54:e0:07:e3:18:1d:24:31:12:b1:35:7f:5e:
c1:65:f0:34:75:04:72:63:99:d6:94:87:41:27:64:
22:c7:7a:b7:02:46:d0:83:12:8e:2f:95:b6:21:04:
63:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:88:05:65:52:77:38:3D:E7:7E:15:CF:16:D6:D2:BD:7E:2E:E2:72
X509v3 Authority Key Identifier:
keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:52:62:15:21:b1:88:6b:ea:39:f5:99:fe:bc:03:c0:30:f1:
ca:8d:31:77:57:bb:a0:4f:72:b8:e9:b1:2c:28:dd:25:d3:78:
84:1b:cb:78:98:76:6c:a8:b9:83:eb:5c:3d:e5:0d:76:90:c1:
ea:3c:08:37:5f:3f:e0:77:07:ec:ce:4e:97:71:6b:4c:58:9b:
73:44:57:97:1c:23:b8:58:ff:d0:56:c6:c8:e6:61:c6:88:50:
7b:95:a5:c3:71:3e:cf:ab:41:22:44:ec:5d:85:ed:65:de:ca:
8f:54:fd:19:c6:43:fc:2e:b3:76:f6:29:11:ba:2c:a2:54:9f:
8e:04:24:a6:97:59:05:fc:03:0a:cb:6b:7d:3a:ba:70:70:81:
ce:ec:d2:ad:55:02:3e:de:e7:f6:30:1c:3f:e9:60:66:c0:57:
ed:d6:43:5e:7d:8a:a6:9c:87:94:37:82:0f:e3:f4:f4:8a:8d:
e2:db:9b:99:42:9e:0b:e3:d3:5d:06:5f:86:2a:7f:b6:84:27:
15:8a:d4:3c:14:8d:15:2e:e2:fc:12:8b:84:69:f8:da:82:6b:
3f:4a:ba:ff:b3:a0:5d:86:13:13:d8:31:80:a1:b3:e2:d3:36:
a0:42:8c:a9:2e:68:62:74:bf:f4:8e:68:59:5d:fc:31:d8:c1:
a2:c9:5c:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU3QkExMTAvBgNVBAUTKEFGMkQ0NTNCRUJCRkRGNUYyOUI2M0FDMTY3NTRDNzhE
MUIwRkNCODgwHhcNMjUxMjAyMTc1MjQ3WhcNMjUxMjA5MTc1MjQ3WjAYMRYwFAYD
VQQDEw02OTJmMjc2Zi0zNTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAznrIc9spGqiQvL+Hn7DuwJ8m7F3JwcIpJqpHXuZ7WtelML432Jxg69UGXUYF
iGsOUuIyg8g075aVY/DCFF1cPksUzwEmVNFyWpLZG3xrDBFiRquqfM7/RxerVSxG
KrHKkyB1dscSnW4MvwJV5RLwX6yu48oCvt7JbP2n09dGNgxPmcmdEsBYMZZ2yP2O
oJpFJySi5Zs7w3nDI3CmFC8HSCv2n/BbMYmxEf/zL3oZnR7cWhUoQwbnVQC5LPJI
5QqIgiRLPqSJ7RWPWlNMr4gIU/jxKFTgB+MYHSQxErE1f17BZfA0dQRyY5nWlIdB
J2Qix3q3AkbQgxKOL5W2IQRj0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuIBWVS
dzg9534VzxbW0r1+LuJyMB8GA1UdIwQYMBaAFK8tRTvrv99fKbY6wWdUx40bD8uI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82ODEyREY5MjA0
RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMxOHB0anJCWjFUSGpSc1B5
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3J5MUZPLXVfMzE4cHRqckJaMVRIalJzUHk0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTdCQS82ODEyREY5MjA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMx
OHB0anJCWjFUSGpSc1B5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcUmIVIbGIa+o59Zn+vAPAMPHKjTF3V7ugT3K46bEsKN0l03iEG8t4
mHZsqLmD61w95Q12kMHqPAg3Xz/gdwfszk6XcWtMWJtzRFeXHCO4WP/QVsbI5mHG
iFB7laXDcT7Pq0EiROxdhe1l3sqPVP0ZxkP8LrN29ikRuiyiVJ+OBCSml1kF/AMK
y2t9OrpwcIHO7NKtVQI+3uf2MBw/6WBmwFft1kNefYqmnIeUN4IP4/T0io3i25uZ
Qp4L49NdBl+GKn+2hCcVitQ8FI0VLuL8EouEafjagms/Srr/s6BdhhMT2DGAobPi
0zagQoypLmhidL/0jmhZXfwx2MGiyVw0
-----END CERTIFICATE-----
Generated at Wed Dec 3 14:56:51 2025 by rpki-client