This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
File: VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json)
Hash identifier: uGGJcBw7IhXvCMj3/K1zd7ZpEupIOt1WabfPXQxWaHM=
Subject key identifier: 8B:D6:B0:30:24:D5:FA:6D:F3:AB:7F:4D:2F:32:0F:9E:79:DF:62:1D
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial: 0DB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
Manifest number: 0D52
Signing time: Mon 22 Dec 2025 17:46:15 +0000
Manifest this update: Mon 22 Dec 2025 17:46:15 +0000
Manifest next update: Mon 29 Dec 2025 17:46:15 +0000
Files and hashes: 1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: hOlw4yjeJA6FCub41Iwrb7CzpRSIGTM3cbbxAQaoP1E=)
2: C97A1A3EB41C11F0AFF91911C4F9AE02.roa (hash: xcCQ983GyFPyaBhVSjqftGFct4u9tmz6aJ63T1WGRfA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 17:46:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3510 (0xdb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Validity
Not Before: Dec 22 17:46:15 2025 GMT
Not After : Dec 29 17:46:15 2025 GMT
Subject: CN=694983e7-3cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:fb:b1:d3:4d:e8:d5:9e:ec:d3:6e:b8:d7:
59:b5:01:92:27:b0:d3:df:8c:73:b4:8c:f9:1b:b9:
16:6f:50:d1:6e:eb:a9:bf:30:2c:00:bf:f1:21:10:
f5:1f:5c:09:6e:2c:56:78:0c:e5:c6:a2:11:9d:7c:
90:3c:59:ff:0d:25:28:6b:b9:13:67:4a:ca:d6:0c:
71:18:69:60:b3:59:e4:c4:59:e9:e1:e6:6c:d3:fa:
ad:7c:9a:43:94:40:6e:91:ed:35:b6:3d:7f:11:71:
48:7e:af:7f:83:bb:64:f2:b8:ff:b7:d4:a2:0e:2c:
0a:6f:44:88:e7:c1:e9:c4:35:bd:37:64:7d:bb:8e:
91:6f:80:65:68:cf:ed:89:0a:4e:1c:08:53:05:6f:
3b:b4:68:df:58:9e:99:f2:76:46:d9:10:8f:fd:2e:
c8:da:ec:8e:20:c5:89:9f:f2:cc:1a:3c:bd:b6:23:
d6:ad:f7:8a:fd:17:97:c7:dc:f3:81:7d:5d:34:ee:
aa:51:50:91:19:6b:37:fd:0a:30:17:1f:68:bc:4b:
20:12:51:f4:b3:41:f1:f4:d1:ce:33:64:5b:10:2f:
c1:16:dd:96:d7:0f:7e:fe:14:10:61:6e:57:d6:19:
48:87:8a:58:3d:c4:d0:ac:a2:77:5a:59:73:cc:0b:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D6:B0:30:24:D5:FA:6D:F3:AB:7F:4D:2F:32:0F:9E:79:DF:62:1D
X509v3 Authority Key Identifier:
keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:34:fd:59:ff:f5:13:bc:0e:cf:3b:d4:c8:07:97:47:fb:30:
0a:60:bf:c9:55:2c:ed:f3:5b:37:7e:37:e6:6a:80:17:b7:52:
34:d9:e6:12:b0:b1:5a:52:1d:28:54:0e:17:cb:50:af:1b:71:
f1:a9:fc:2b:8e:f4:7c:08:5d:42:af:10:18:df:75:43:1c:f7:
2c:46:84:68:b2:27:af:9b:0b:16:93:28:93:b5:78:d2:bb:63:
de:4d:ef:1e:fe:ce:68:74:58:c0:47:4e:92:20:75:b7:e3:0b:
06:01:a0:d7:41:dd:72:76:a6:eb:36:1c:be:99:f3:d6:a6:e4:
36:9c:96:4d:7f:ca:c0:a7:95:d0:24:89:d7:23:89:7d:d8:10:
8b:93:c8:de:b8:d2:1d:be:b1:fd:ba:69:16:30:c7:a7:09:aa:
c8:0e:d1:b6:b5:3c:29:dd:a9:bf:f9:f3:2f:db:35:19:bd:ea:
3f:b6:b6:75:f1:13:26:64:39:1c:ca:66:4f:e0:8b:b5:55:13:
98:0a:79:f6:69:77:2e:39:fc:47:45:85:7b:fe:d8:87:2a:fa:
86:e4:9d:f4:86:7e:a9:11:a1:ab:06:68:89:af:e0:6e:26:0c:
92:5b:b2:8f:f5:62:d2:37:5c:78:ef:11:ae:05:ce:7f:cf:80:
48:9c:37:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE3RjIxMTAvBgNVBAUTKDU0ODYzNzZCMDVCOEEyNTUyMzI5RTM2MUJENzI1Qzc3
RTFGOEQwQzkwHhcNMjUxMjIyMTc0NjE1WhcNMjUxMjI5MTc0NjE1WjAYMRYwFAYD
VQQDDA02OTQ5ODNlNy0zY2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArmT7sdNN6NWe7NNuuNdZtQGSJ7DT34xztIz5G7kWb1DRbuupvzAsAL/xIRD1
H1wJbixWeAzlxqIRnXyQPFn/DSUoa7kTZ0rK1gxxGGlgs1nkxFnp4eZs0/qtfJpD
lEBuke01tj1/EXFIfq9/g7tk8rj/t9SiDiwKb0SI58HpxDW9N2R9u46Rb4BlaM/t
iQpOHAhTBW87tGjfWJ6Z8nZG2RCP/S7I2uyOIMWJn/LMGjy9tiPWrfeK/ReXx9zz
gX1dNO6qUVCRGWs3/QowFx9ovEsgElH0s0Hx9NHOM2RbEC/BFt2W1w9+/hQQYW5X
1hlIh4pYPcTQrKJ3WllzzAutqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvWsDAk
1fpt86t/TS8yD55532IdMB8GA1UdIwQYMBaAFFSGN2sFuKJVIynjYb1yXHfh+NDJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdGMi80Qzg4QTdBMEZE
RkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9sVWpLZU5odlhKY2QtSDQw
TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZJWTNhd1c0b2xVaktlTmh2WEpjZC1INDBNay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTdGMi80Qzg4QTdBMEZERkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9s
VWpLZU5odlhKY2QtSDQwTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJNP1Z//UTvA7PO9TIB5dH+zAKYL/JVSzt81s3fjfmaoAXt1I02eYS
sLFaUh0oVA4Xy1CvG3HxqfwrjvR8CF1CrxAY33VDHPcsRoRosievmwsWkyiTtXjS
u2PeTe8e/s5odFjAR06SIHW34wsGAaDXQd1ydqbrNhy+mfPWpuQ2nJZNf8rAp5XQ
JInXI4l92BCLk8jeuNIdvrH9umkWMMenCarIDtG2tTwp3am/+fMv2zUZveo/trZ1
8RMmZDkcymZP4Iu1VROYCnn2aXcuOfxHRYV7/tiHKvqG5J30hn6pEaGrBmiJr+Bu
JgySW7KP9WLSN1x47xGuBc5/z4BInDfP
-----END CERTIFICATE-----
Generated at Tue Dec 23 01:57:32 2025 by rpki-client