This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
File: LYC7UpVYC-No2mj7jQPqtI16xss.mft (raw, json)
Hash identifier: IrYJdwoWSOuraehTKYmJjAJi8J/ASDHREW342A/ThXA=
Subject key identifier: D5:70:E3:55:02:E2:88:61:0C:76:E1:69:F7:C5:7E:49:67:D6:02:44
Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
Certificate issuer: /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
Manifest number: 010A
Signing time: Wed 03 Dec 2025 03:22:26 +0000
Manifest this update: Wed 03 Dec 2025 03:22:26 +0000
Manifest next update: Wed 10 Dec 2025 03:22:26 +0000
Files and hashes: 1: LYC7UpVYC-No2mj7jQPqtI16xss.crl (hash: taaCNUpACpnfrDir7VBi0w4tW4tBhqLVE3CiRWSIkzU=)
2: 70ED9D2837D111EF99A8011CC4F9AE02.roa (hash: ON0MiwZBInBHM7jc0lp0894BhHXsr6LrKE7baf75anU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Validity
Not Before: Dec 3 03:22:26 2025 GMT
Not After : Dec 10 03:22:26 2025 GMT
Subject: CN=692facf2-1caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:b2:7d:6a:9a:42:09:23:4d:c9:47:9d:42:
ef:b9:05:d2:c2:a4:2d:08:6f:50:3c:3c:b7:eb:89:
34:c2:27:90:df:09:64:80:23:e4:4d:dd:94:d5:dd:
7e:40:eb:e1:df:7d:de:c9:ed:15:cc:1a:b2:5d:de:
a4:3c:f7:c0:13:22:65:5f:24:80:b0:3d:fb:cb:51:
a6:5c:16:00:89:2e:8a:0a:f5:d5:9a:ec:ac:b7:50:
1d:59:3d:71:3b:2b:5e:5c:19:54:e0:1e:da:9c:68:
44:db:1b:23:3e:07:cd:f3:ee:3e:34:8b:33:45:e2:
62:3c:29:c7:65:51:8a:74:fa:71:08:8a:8b:63:17:
40:db:aa:bf:66:a7:93:21:4d:ec:ae:30:33:99:1c:
5d:b2:b8:1f:8c:13:48:cb:b4:cb:42:b9:0a:17:78:
ee:77:4c:52:0d:96:f2:81:54:0b:2f:c9:1c:68:43:
d7:88:d6:8b:b2:45:1c:b7:66:cb:f1:09:a9:2d:e8:
cc:eb:fd:37:e9:65:b6:39:d8:35:01:db:9a:84:ba:
a6:41:5c:f7:bb:9e:b8:2f:95:17:29:5a:db:cb:1d:
1d:49:fd:81:bd:5f:d2:55:92:5e:60:07:37:c0:58:
36:e3:7c:78:bb:5c:dd:eb:b1:c3:a0:c3:88:b7:51:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:70:E3:55:02:E2:88:61:0C:76:E1:69:F7:C5:7E:49:67:D6:02:44
X509v3 Authority Key Identifier:
keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:0b:fd:a3:ca:c3:63:3d:0f:e9:26:09:ef:b4:cf:24:29:8f:
70:50:de:9c:98:be:72:82:7b:30:31:c2:07:35:d9:bd:38:f9:
59:2f:5f:26:00:90:1c:8d:fb:0f:66:d8:58:ed:c0:af:1d:ae:
9f:97:dd:7e:09:7b:0b:c7:3a:a4:20:d5:1a:ae:96:39:58:00:
19:cb:21:0d:e4:7b:2e:0f:21:60:0c:12:d8:d6:05:10:6d:b8:
96:e7:e5:55:26:4c:ad:8a:84:5d:e3:42:54:cf:4f:b0:39:79:
0a:4d:3e:e2:b1:6e:5f:c5:39:fb:e3:d1:21:80:55:31:49:42:
64:3b:76:f6:76:99:ec:a8:60:31:23:01:e1:25:bc:54:de:e7:
07:0a:5a:e6:31:b2:8e:d5:35:18:76:df:2c:c7:c5:0c:44:e0:
94:96:b6:fc:94:7b:33:58:6c:0f:16:d8:3b:59:79:01:00:22:
ed:c2:36:ff:e8:9a:a6:1a:4a:eb:90:bc:13:0b:2e:90:2d:43:
c6:24:cd:ec:79:37:4b:c6:49:3d:c3:dd:55:d0:f0:c4:47:15:
73:d7:71:50:69:18:2d:26:ef:ff:b5:c6:53:01:e0:b3:37:fe:
90:f8:82:4d:1a:89:cf:e7:1f:24:51:f2:f0:57:97:ce:6c:27:
90:b1:13:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 15:32:10 2025 by rpki-client