This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
File: ElYBj-blOMQA9j_H4SHDpwHy3qk.mft (raw, json)
Hash identifier: 17WRUHMcOlmBOuZwFk1Bn2Ycl6sbTK563jK2uP4/TL8=
Subject key identifier: DF:D3:22:31:C8:12:F6:3F:1A:F5:8E:91:16:F0:27:61:DB:50:EA:5F
Authority key identifier: 12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9
Certificate issuer: /CN=A91E00FC/serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9
Certificate serial: 0A4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
Manifest number: 0A42
Signing time: Thu 18 Dec 2025 19:18:32 +0000
Manifest this update: Thu 18 Dec 2025 19:18:32 +0000
Manifest next update: Thu 25 Dec 2025 19:18:32 +0000
Files and hashes: 1: ElYBj-blOMQA9j_H4SHDpwHy3qk.crl (hash: /tG3UDpb7OjQcjxxMUcXvf78+ONd3iy3U2toE+hZE5M=)
2: 542CA96A0B1911EB92F1EB12C4F9AE02.roa (hash: h8TCOQAYkMWzOV4xPaOkVqyIiRzREyWEnJXkzl12ups=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl
rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2634 (0xa4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E00FC, serialNumber=1256018FE6E538C400F63FC7E121C3A701F2DEA9
Validity
Not Before: Dec 18 19:18:32 2025 GMT
Not After : Dec 25 19:18:32 2025 GMT
Subject: CN=69445388-9993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:60:ad:16:da:cd:82:23:40:f8:99:26:aa:28:
ac:ab:65:cf:4c:c4:b8:58:8e:dd:11:09:31:d2:1e:
01:63:92:87:53:f2:f4:40:26:e4:8a:77:64:f9:fc:
98:4b:ff:1b:4d:2f:31:98:b3:1b:37:99:76:ff:9d:
ed:2f:1a:e0:c9:07:d9:bd:23:df:9e:fc:fb:d1:00:
e7:63:6b:aa:86:06:08:e4:33:76:86:80:13:33:eb:
0d:b0:58:95:29:e9:4b:36:13:ca:f8:4b:58:23:26:
ae:b0:ce:0b:51:8c:41:c2:e7:7f:af:fb:36:28:e8:
ab:35:93:9f:ea:2b:2d:1e:b0:5f:56:68:8d:dd:40:
39:dd:65:29:4a:65:ca:4d:5c:a0:70:55:ec:30:22:
dd:77:06:86:ae:c6:7f:62:27:ea:d5:2d:a4:9d:d8:
a5:7e:3a:d5:37:e4:9a:b4:3a:be:96:f1:1a:74:86:
f2:de:b9:8f:73:f5:12:8f:9e:8c:53:82:1b:2f:34:
1a:51:26:4e:34:dc:4c:5e:e7:0e:94:fa:9d:2e:21:
05:13:13:7e:d0:4b:d1:24:59:36:60:f2:7d:0e:85:
8d:f1:a6:eb:6d:70:e2:8b:ad:a3:93:25:6d:bc:fa:
56:75:28:40:a4:5d:e6:20:73:27:23:f7:e0:b8:aa:
29:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D3:22:31:C8:12:F6:3F:1A:F5:8E:91:16:F0:27:61:DB:50:EA:5F
X509v3 Authority Key Identifier:
keyid:12:56:01:8F:E6:E5:38:C4:00:F6:3F:C7:E1:21:C3:A7:01:F2:DE:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ElYBj-blOMQA9j_H4SHDpwHy3qk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/5C8CB4D67F2F11EAADF4BF6AC4F9AE02/ElYBj-blOMQA9j_H4SHDpwHy3qk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c0:05:ca:41:fc:fb:54:1f:f8:ad:d0:61:87:90:b5:ad:cd:
84:df:14:e2:2b:d0:46:34:b7:cb:5f:3a:29:54:e5:7d:c9:2b:
50:4d:e1:62:be:6c:6f:56:a9:1e:33:bf:39:35:dd:23:ba:6d:
c3:15:da:2d:a1:43:5b:ef:35:6d:93:f9:cd:e6:31:91:6a:1d:
54:a0:db:cf:2c:a4:56:85:da:b6:f0:09:43:6b:97:2b:20:81:
a6:ff:f9:b0:3f:2c:dc:4c:56:fe:6c:9f:ec:3b:c4:10:a7:e0:
ac:d9:f2:09:31:7a:11:41:85:04:54:1e:94:de:0b:10:2c:9a:
c8:a8:c7:fc:65:25:a4:dd:a3:2b:81:d7:17:b3:a8:e7:ad:98:
d4:4b:82:b9:b1:dd:f5:c2:09:5a:8a:9a:d4:05:e0:f2:74:a8:
72:73:75:02:d1:0e:60:09:ba:61:8f:6f:25:c8:2b:8f:9b:c7:
93:19:4c:41:41:e2:7b:e9:e7:36:e5:97:ca:e5:2f:31:36:1f:
ce:86:1d:6f:40:bc:4c:53:a3:31:9e:66:f1:b3:86:07:60:4c:
b8:6c:0e:5b:05:d1:74:c0:f1:6b:4f:9a:7f:65:34:a5:8a:08:
96:d8:c7:41:b5:24:3a:7f:c1:af:bd:32:ee:2b:95:aa:de:4a:
ef:9c:7a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 14:52:41 2025 by rpki-client