This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
File: Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft (raw, json)
Hash identifier: +4GsbFdAzeIoYNZQCqjpHpbpJyswiE30ERpK3dkHpDM=
Subject key identifier: A3:1B:EB:09:58:10:8F:FE:F2:8F:6B:C8:90:C3:ED:BD:F3:C8:8B:FA
Authority key identifier: 63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
Certificate issuer: /CN=A91AFB4C/serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Certificate serial: 0215
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
Manifest number: 0210
Signing time: Tue 09 Dec 2025 00:34:24 +0000
Manifest this update: Tue 09 Dec 2025 00:34:23 +0000
Manifest next update: Tue 16 Dec 2025 00:34:23 +0000
Files and hashes: 1: Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl (hash: sDb3TCH6ntnMWQC4C4PbHp8Ihck20XLY0jpxvYUnIuI=)
2: AD286018B29C11EDB216812EC4F9AE02.roa (hash: ck7frHwbdvA8vLLhGdgsJbIt8cpEwUyRbFKBDEFTB8E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 00:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFB4C, serialNumber=6349735904E1BC0D65BD594A07762BB5299C038A
Validity
Not Before: Dec 9 00:34:23 2025 GMT
Not After : Dec 16 00:34:23 2025 GMT
Subject: CN=69376e90-589a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:ac:43:88:6f:9f:ed:7c:80:92:95:7c:27:
30:0e:d8:7a:1a:2e:a5:69:91:9a:2c:a2:a2:29:e7:
5d:5d:92:4f:91:9c:5f:fd:68:60:98:94:a4:95:8c:
c7:ec:23:f3:5e:45:1c:cc:1b:e6:b2:64:f5:d4:20:
f4:6c:63:94:42:35:99:33:e2:84:ef:71:fc:b0:66:
3b:98:4a:b7:1d:f1:ed:af:b7:f0:73:83:dd:a9:05:
ed:ef:15:6d:2e:b8:b9:41:ee:10:24:46:95:0d:d6:
8d:0c:a0:2d:82:02:0d:1a:8f:48:dd:42:95:a1:68:
a0:9c:08:6e:97:a4:69:77:1b:75:b0:52:e3:98:3b:
84:2e:72:46:7e:f8:77:a9:d4:7b:9e:49:f1:2b:57:
2e:5c:e6:b4:1e:e6:c9:9d:da:f1:be:04:53:b2:1f:
ff:4b:21:b9:59:be:7f:dc:1a:83:5f:c3:c3:3c:c1:
f0:b6:41:1f:3e:d5:45:da:0e:ef:c2:7b:68:98:dc:
29:81:db:34:2d:32:67:36:1b:3d:b7:a3:db:ba:1b:
79:6e:a8:73:08:b0:1d:8b:7e:26:6b:9a:ad:e6:f5:
ad:99:9d:28:bc:8a:31:12:c9:6e:70:fa:49:d5:77:
31:a9:46:cd:1b:78:b3:16:a7:4b:89:26:26:08:b2:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:EB:09:58:10:8F:FE:F2:8F:6B:C8:90:C3:ED:BD:F3:C8:8B:FA
X509v3 Authority Key Identifier:
keyid:63:49:73:59:04:E1:BC:0D:65:BD:59:4A:07:76:2B:B5:29:9C:03:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0lzWQThvA1lvVlKB3YrtSmcA4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB4C/C470B22AB29711ED94EF0926C4F9AE02/Y0lzWQThvA1lvVlKB3YrtSmcA4o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8b:2c:8d:50:42:e0:65:7e:03:2d:fc:7d:23:30:0e:24:83:
ab:12:2c:39:45:fe:ed:51:cc:e9:f0:5b:79:c4:0f:03:a5:3b:
33:38:42:74:38:de:a9:59:e3:0f:48:9c:ee:8d:f5:75:28:3b:
a0:c3:5c:b0:7f:36:f9:33:cb:da:59:ad:7c:f4:ae:56:a5:a3:
09:a9:c9:20:29:ec:31:01:9b:9f:33:42:48:5e:03:ed:52:3e:
74:0a:96:bc:ba:26:f6:68:56:43:f9:b4:a5:ca:55:9a:6b:5a:
51:a7:c0:57:db:9c:e7:ba:58:a2:6b:af:c5:c0:39:13:82:50:
c8:32:33:27:65:9a:a1:13:88:1a:87:3d:f6:ff:0f:7a:2d:d6:
6a:6e:37:1d:95:81:3b:8e:2e:f3:39:22:18:ef:1c:53:df:40:
77:f7:12:b2:c7:10:c3:cc:20:8d:0b:88:2d:42:6a:64:66:10:
04:8a:ad:b8:25:64:1c:9f:fd:1e:fc:45:3a:9d:4c:fb:ca:2c:
53:cd:bf:e6:c5:ee:eb:e1:9a:95:a1:d5:cc:e9:e8:58:ab:f8:
11:fe:f3:85:35:5b:9b:3f:3b:87:31:1d:67:85:30:3a:34:26:
1e:4d:a3:6b:89:ca:49:2a:ea:23:c7:27:fd:03:fc:7e:27:3c:
08:2f:a6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 11 23:01:08 2025 by rpki-client