This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
File: yOujNL19pukuZ8QIvQN4e66uDK0.mft (raw, json)
Hash identifier: nCX0ogiHJ80ANRayDQ+94EFdfld6Ti+G+oMzHn00IXo=
Subject key identifier: 1F:9E:48:C7:0A:42:24:5F:78:7D:40:71:B9:AE:13:1D:8E:1E:3A:6B
Authority key identifier: C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
Certificate issuer: /CN=A91CFE07/serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Certificate serial: 0DCE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
Manifest number: 0DB9
Signing time: Mon 22 Dec 2025 17:32:20 +0000
Manifest this update: Mon 22 Dec 2025 17:32:20 +0000
Manifest next update: Mon 29 Dec 2025 17:32:20 +0000
Files and hashes: 1: yOujNL19pukuZ8QIvQN4e66uDK0.crl (hash: vaKMaLjfpxxjDd3qFM0nM+/tlSQC7hDLexmlnW2wMv4=)
2: A82C70A4C9FA11EBB7F2E749C4F9AE02.roa (hash: +QLq15+GCrbTMv3T/U18UwN/WHFJnfWgXMxuf5yq0ts=)
3: A95EC0B2C9FA11EBB7F2E749C4F9AE02.roa (hash: h9Ek+uVHJkd43jpvXLhIeId4TZWOhn+0W2MAspUZuOw=)
4: 226B7BC2AAC611EE9F22785DC4F9AE02.roa (hash: sy4Su4ASjc+OqwWE5jPxA/U7NJeDsxDapY34Q7SzDAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:32:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3534 (0xdce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFE07, serialNumber=C8EBA334BD7DA6E92E67C408BD03787BAEAE0CAD
Validity
Not Before: Dec 22 17:32:20 2025 GMT
Not After : Dec 29 17:32:20 2025 GMT
Subject: CN=694980a4-386f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d1:a0:5c:76:ac:cb:b4:c7:4b:3b:2f:1b:30:
e2:95:b0:50:c5:3d:b5:b5:e4:e9:ae:c8:97:d6:ab:
44:8e:84:bd:1b:08:d0:94:0a:cb:cf:d8:d1:cc:40:
75:bb:8d:3e:25:de:a3:27:17:5d:bc:42:7a:be:94:
0d:28:c9:f5:63:f6:81:11:db:e1:59:1b:f6:c9:c9:
37:b0:5c:59:2f:01:2c:91:77:8b:a0:b3:98:50:36:
d4:8c:07:9f:5e:51:5a:f1:ca:17:37:9f:54:fd:b1:
ae:8e:0e:1d:54:83:a0:c5:9c:66:aa:85:d8:ef:7b:
f9:d9:35:2b:b0:cc:a6:25:5e:d0:52:b0:26:53:57:
3a:0b:71:5c:77:db:07:e7:80:69:1a:52:63:ab:34:
b7:9a:e0:17:cc:43:17:b1:58:7f:51:b3:98:4a:29:
5f:cb:ba:78:fb:23:9a:bb:a1:80:c3:50:7d:06:fa:
59:93:e6:3c:e3:42:89:a6:b8:73:59:47:55:5a:dd:
ca:1c:e9:b4:dc:ef:05:c3:f1:22:c0:fa:8b:96:5f:
b0:89:85:ed:59:99:df:60:ad:b2:b3:f9:4b:31:e0:
ad:1c:1c:37:39:a9:77:1c:44:4d:3f:de:7a:e0:82:
a7:bb:ba:27:9d:56:05:bb:96:3f:ed:dd:07:87:a3:
36:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9E:48:C7:0A:42:24:5F:78:7D:40:71:B9:AE:13:1D:8E:1E:3A:6B
X509v3 Authority Key Identifier:
keyid:C8:EB:A3:34:BD:7D:A6:E9:2E:67:C4:08:BD:03:78:7B:AE:AE:0C:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yOujNL19pukuZ8QIvQN4e66uDK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE07/962C4B7ED2BF11E9A84D6622C4F9AE02/yOujNL19pukuZ8QIvQN4e66uDK0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:b9:79:0e:84:02:e4:0b:f5:58:fc:be:78:21:97:67:3f:d5:
f5:2e:4b:60:70:52:c9:df:56:fb:be:42:28:6c:f3:3b:37:37:
b4:52:8f:df:73:91:f6:b9:67:b7:50:1e:52:b3:4b:b6:0c:f9:
bc:dd:77:87:2b:08:80:c3:cd:68:c1:1e:fb:f9:e8:2b:1f:08:
d3:85:27:30:0c:ab:9c:b9:2e:7f:0a:63:f7:4f:a6:41:88:c3:
f2:a6:fc:74:49:9a:04:57:f1:a9:38:f2:27:f0:63:7e:b2:cc:
cd:c1:3f:79:e1:df:82:93:0f:15:c3:97:45:c2:ab:80:a1:22:
3e:63:a0:a1:9d:7e:61:20:46:b2:78:24:e6:83:54:be:78:c2:
a6:63:ea:b1:ae:1b:ae:ea:b5:31:8e:8a:4f:dc:24:9d:c2:19:
6a:a0:5f:f9:4c:a5:73:b3:13:6c:28:c2:5a:cd:a1:83:a3:23:
27:07:23:fc:bf:30:a7:51:dd:e8:a4:8f:d6:31:1b:30:87:c0:
07:12:25:99:57:f6:35:87:d1:3a:20:cf:4e:6f:4b:1e:8a:c3:
a2:9d:46:e4:7c:9f:b3:d0:12:5f:34:3c:0d:77:04:8e:da:4b:
ad:bc:ad:9e:16:86:96:53:51:43:68:6d:7d:19:a6:97:53:51:
e2:7e:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:58:48 2025 by rpki-client