This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json)
Hash identifier: yhOBrjr5Z7m84qiH53ZE8ZrNL1w3qJbJA2JJGyi+tBI=
Subject key identifier: CE:35:AE:FF:65:9E:72:FE:7D:F1:25:26:20:F3:94:56:60:CB:03:26
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial: 02C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
Manifest number: 02BF
Signing time: Sun 07 Dec 2025 00:00:16 +0000
Manifest this update: Sun 07 Dec 2025 00:00:15 +0000
Manifest next update: Sun 14 Dec 2025 00:00:15 +0000
Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: DEEpfaBGc8kVZusrROVrRMDefmG6PDhwvSDXKwyrJgU=)
2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: 2l18e24CMiHud0NJE3O3nns7nMxFpBn60Kr5He67lRQ=)
3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: ZMuXU8x5oSWaUY/w5FJOwLEX4Eyd5ZHjHOMaRrHb7zk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 713 (0x2c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Validity
Not Before: Dec 7 00:00:15 2025 GMT
Not After : Dec 14 00:00:15 2025 GMT
Subject: CN=6934c390-acc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:56:4d:b9:68:b6:6b:d7:26:01:bf:a7:f2:
f7:66:d3:08:d5:de:8c:8d:2b:36:43:f6:23:e0:2e:
05:fd:24:38:66:66:b1:e3:0c:d3:67:a6:39:fb:03:
bd:f6:a3:c1:cf:db:c7:ce:fc:fd:7d:b4:7c:cd:fe:
f1:30:5f:0e:f7:ed:c2:ed:cc:12:2d:f0:ba:23:49:
00:6b:69:85:50:5a:b9:db:ee:15:65:02:c6:d9:52:
e1:15:5a:69:ab:04:46:fe:5e:47:37:69:8d:2c:2f:
3b:82:6b:26:a0:ca:1d:c2:51:c1:fa:bd:02:22:ed:
32:04:09:c0:51:0a:5e:79:67:4a:88:e8:7c:7f:60:
fd:5e:1f:64:83:d0:2c:5d:b1:51:80:fc:80:73:40:
44:a0:93:c2:29:82:16:c5:e9:88:97:ce:2f:c4:79:
4b:98:65:05:3c:7a:64:57:e4:94:db:e1:77:63:70:
b0:d4:eb:4d:97:d2:86:c4:3f:70:44:ca:d8:23:93:
e0:ed:27:61:41:f9:91:02:ee:71:15:fb:fd:2c:d7:
6c:d1:27:17:52:16:9b:f0:1b:d2:42:76:55:79:2a:
50:a1:19:cb:ca:1c:46:a9:25:40:f3:7e:3e:d5:c5:
57:bb:04:7c:47:fa:ae:29:1e:2a:d4:d0:b6:41:6b:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:35:AE:FF:65:9E:72:FE:7D:F1:25:26:20:F3:94:56:60:CB:03:26
X509v3 Authority Key Identifier:
keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:39:fd:39:cb:81:f0:41:d9:73:55:39:0f:e0:31:84:95:7c:
34:dd:62:ca:8e:ac:d3:0e:ce:f5:d3:52:6b:e0:7a:b1:fe:b9:
3e:3a:af:06:94:47:26:a0:e1:72:10:2a:5d:b3:52:aa:65:dc:
87:54:a7:ac:ef:3d:6a:4a:98:42:cf:ca:14:94:d7:a1:9c:49:
bf:06:9b:d3:60:bd:98:c7:8a:66:98:27:7b:f1:01:e2:ba:3a:
3a:49:a1:a9:71:9f:fd:fc:4d:c4:69:9c:6d:0f:9a:dc:5f:8a:
17:10:f9:38:42:7f:0b:7c:1c:b3:17:75:88:dd:46:13:ce:84:
9a:fd:a9:ff:5e:87:d0:5b:24:53:a9:bc:d9:32:d7:81:9c:28:
c8:5e:da:bf:07:95:c4:3a:56:c5:cf:71:1d:45:43:d4:b4:2d:
7c:1a:b7:04:1e:94:59:98:06:fc:60:a0:6b:99:7a:ca:42:4d:
3f:eb:18:fa:f5:cc:3a:5e:c5:e3:63:19:f2:76:ba:e4:12:c4:
d7:63:d4:f8:da:62:28:05:15:61:c5:9a:8b:cb:44:6d:b1:d2:
9d:b6:02:d1:be:c9:97:55:47:8c:6a:be:f5:bd:ac:3b:18:db:
2c:f1:d2:54:70:56:96:d7:65:73:22:03:cb:e7:73:75:79:9e:
3e:0e:56:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDFGOTUxMTAvBgNVBAUTKEQ2RjA2NzI0RDA5Njg3MDdFRDFERkFGREJCMjI1ODAy
QjNEQUExOTQwHhcNMjUxMjA3MDAwMDE1WhcNMjUxMjE0MDAwMDE1WjAYMRYwFAYD
VQQDEw02OTM0YzM5MC1hY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu7lWTblotmvXJgG/p/L3ZtMI1d6MjSs2Q/Yj4C4F/SQ4Zmax4wzTZ6Y5+wO9
9qPBz9vHzvz9fbR8zf7xMF8O9+3C7cwSLfC6I0kAa2mFUFq52+4VZQLG2VLhFVpp
qwRG/l5HN2mNLC87gmsmoModwlHB+r0CIu0yBAnAUQpeeWdKiOh8f2D9Xh9kg9As
XbFRgPyAc0BEoJPCKYIWxemIl84vxHlLmGUFPHpkV+SU2+F3Y3Cw1OtNl9KGxD9w
RMrYI5Pg7SdhQfmRAu5xFfv9LNds0ScXUhab8BvSQnZVeSpQoRnLyhxGqSVA834+
1cVXuwR8R/quKR4q1NC2QWuTTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM41rv9l
nnL+ffElJiDzlFZgywMmMB8GA1UdIwQYMBaAFNbwZyTQlocH7R36/bsiWAKz2qGU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUY5NS9GRjkzRUM3MjE5
NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3ZnRIZnI5dXlKWUFyUGFv
WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzF2Qm5KTkNXaHdmdEhmcjl1eUpZQXJQYW9aUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MUY5NS9GRjkzRUM3MjE5NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3
ZnRIZnI5dXlKWUFyUGFvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0Of05y4HwQdlzVTkP4DGElXw03WLKjqzTDs7101Jr4Hqx/rk+Oq8G
lEcmoOFyECpds1KqZdyHVKes7z1qSphCz8oUlNehnEm/BpvTYL2Yx4pmmCd78QHi
ujo6SaGpcZ/9/E3EaZxtD5rcX4oXEPk4Qn8LfByzF3WI3UYTzoSa/an/XofQWyRT
qbzZMteBnCjIXtq/B5XEOlbFz3EdRUPUtC18GrcEHpRZmAb8YKBrmXrKQk0/6xj6
9cw6XsXjYxnydrrkEsTXY9T42mIoBRVhxZqLy0RtsdKdtgLRvsmXVUeMar71vaw7
GNss8dJUcFaW12VzIgPL53N1eZ4+DlZt
-----END CERTIFICATE-----
Generated at Mon Dec 8 18:02:21 2025 by rpki-client