This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
File: yPWXElLMBM4--LZy7nTid7LM1hU.mft (raw, json)
Hash identifier: 9EWM1l3uDnUv4GyNk6gFVR1Gkqs0pvbFGCeSm7HSUvQ=
Subject key identifier: 04:3B:9D:08:FA:87:CB:84:16:90:73:D4:DA:BE:47:96:C0:7E:10:A3
Authority key identifier: C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15
Certificate issuer: /CN=A91F72E2/serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615
Certificate serial: 37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
Manifest number: 36
Signing time: Tue 23 Dec 2025 06:21:31 +0000
Manifest this update: Tue 23 Dec 2025 06:21:31 +0000
Manifest next update: Tue 30 Dec 2025 06:21:31 +0000
Files and hashes: 1: yPWXElLMBM4--LZy7nTid7LM1hU.crl (hash: mMioLl/HiDYg/tg4/3ZGb1q1NZmMr3/Te5AwjwG2yZc=)
2: 13542BE28C9311F099562747C4F9AE02.roa (hash: 74FroNCdegFOPZiDBlEbhFtWJ9Myu+nQaF/Cyco73vs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl
rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:21:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F72E2, serialNumber=C8F5971252CC04CE3EF8B672EE74E277B2CCD615
Validity
Not Before: Dec 23 06:21:31 2025 GMT
Not After : Dec 30 06:21:31 2025 GMT
Subject: CN=694a34eb-0c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:79:69:cb:0f:bd:7e:0d:d9:97:20:59:0a:
98:6a:ea:ce:07:43:d5:4e:02:ee:ff:41:09:a7:8f:
ad:ae:c1:5e:b4:6f:90:cc:cc:9b:fe:b9:24:3c:d3:
e4:66:21:93:74:79:c2:c4:91:85:4e:9d:11:2e:de:
a1:45:df:5a:24:88:24:58:37:59:64:c7:ac:dd:74:
9c:3d:12:db:1b:d0:6e:a3:c8:5d:da:5a:c4:ec:c2:
c8:f1:40:89:7d:2c:d3:b4:3a:75:e7:72:eb:bc:8b:
c1:9d:eb:c1:66:91:63:c4:f8:d3:0e:ed:a3:b4:7e:
8a:12:db:b8:24:fa:75:05:69:fe:ca:6f:77:ec:6c:
d1:3a:94:f0:aa:12:4b:a8:1a:1a:0e:a9:cd:43:b6:
ea:be:fb:a6:e3:c9:e6:44:1e:2c:a1:65:e5:b6:ee:
bb:5f:35:a6:85:94:35:60:48:a7:3c:0b:ed:27:40:
60:23:83:29:b8:3d:ee:3f:5d:34:d1:85:e7:9c:61:
34:88:10:5f:10:17:9e:9a:bf:ce:d0:8a:89:02:eb:
13:57:10:49:09:f1:9f:14:4f:f7:f3:0d:1f:79:1e:
16:e3:51:e2:fa:be:35:6a:c3:74:14:15:98:77:6b:
fd:1d:11:78:d7:e1:fb:58:5a:3a:cf:05:49:de:8f:
5e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3B:9D:08:FA:87:CB:84:16:90:73:D4:DA:BE:47:96:C0:7E:10:A3
X509v3 Authority Key Identifier:
keyid:C8:F5:97:12:52:CC:04:CE:3E:F8:B6:72:EE:74:E2:77:B2:CC:D6:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPWXElLMBM4--LZy7nTid7LM1hU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F72E2/C6A1F20A8C8F11F09423F119C4F9AE02/yPWXElLMBM4--LZy7nTid7LM1hU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7b:52:13:d2:eb:1c:82:d1:a5:db:3f:a9:7f:20:17:09:a3:
97:4c:82:fd:d4:5b:3c:d1:8c:9c:62:d7:a1:6e:15:73:58:4d:
98:d2:e7:ec:1e:e6:8c:d8:75:5b:b1:e5:42:a1:03:6b:6a:7d:
80:33:6e:59:6f:f7:50:8d:68:47:b0:0e:05:d5:69:16:c0:65:
5e:46:db:5f:fb:b9:81:6d:72:9b:0e:6b:cc:40:e0:91:9b:ed:
d5:83:5f:38:3d:2f:fe:a9:35:00:f3:34:37:c2:6c:68:fd:10:
b5:fd:0a:1c:a6:98:39:5e:3e:d8:35:8c:a0:eb:0e:97:af:dc:
20:f4:86:55:9f:3c:74:3b:1b:6a:f2:de:6d:6f:3d:12:c7:56:
54:7e:b1:fa:7a:81:a9:b9:8c:9c:f5:6a:a7:05:c9:56:2e:b0:
a9:12:0c:d0:d6:c5:c8:aa:0a:23:1c:11:4e:dc:2e:1c:b5:20:
98:f7:39:fa:af:2d:25:05:5e:7e:17:2a:0b:16:75:0c:32:23:
3d:e4:07:35:5f:2c:95:52:9e:fb:a1:19:e1:27:2d:c4:6a:4b:
26:06:6a:47:f3:eb:98:d5:20:42:64:4c:ae:58:b5:cf:01:a0:
85:6e:f9:68:74:37:fd:92:2d:58:1a:64:c0:cd:39:d9:c9:8d:
30:2c:45:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:43:19 2025 by rpki-client