This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
File: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft (raw, json)
Hash identifier: gEaSeYr2d6FZQGi3VcuOcDeOhWESfSCwDof5Zx/LclQ=
Subject key identifier: DC:26:8F:DE:54:98:60:E8:4A:3F:60:2C:9B:B7:56:8B:F0:A3:89:81
Authority key identifier: 60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5
Certificate issuer: /CN=A91F59DF/serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
Certificate serial: 0699
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
Manifest number: 068B
Signing time: Mon 22 Dec 2025 21:40:16 +0000
Manifest this update: Mon 22 Dec 2025 21:40:16 +0000
Manifest next update: Mon 29 Dec 2025 21:40:16 +0000
Files and hashes: 1: YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl (hash: cGBMElowqOnPp6h9qgtlxHEng0RwAcTcsgTHvmeNQS8=)
2: 354314309C0F11EBAEFB6225C4F9AE02.roa (hash: JJP7X3f6AVH5KsSFfVI30UVBcX+xwO84hT0LgBX60uQ=)
3: 1348519E9C1211EBA38A7C4CC4F9AE02.roa (hash: jmj2Qf4qhtOu5u36GPmwSsc+P3+wO6jacfxys+6pyWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl
rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 21:40:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1689 (0x699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F59DF, serialNumber=609A3126E2369A97D47FD64498D8165E21E525C5
Validity
Not Before: Dec 22 21:40:16 2025 GMT
Not After : Dec 29 21:40:16 2025 GMT
Subject: CN=6949bac0-fa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:81:2b:75:60:2c:40:11:99:59:7d:53:4d:
65:a1:eb:1a:5c:41:9e:41:5b:9f:6b:36:1e:fc:53:
c7:9f:ba:cb:de:fb:1e:0c:74:a8:0b:13:92:0d:37:
1c:9d:ac:31:47:47:fa:42:fe:ad:74:f8:e8:79:73:
0d:8b:6b:e9:25:2d:75:93:f5:8d:40:25:eb:98:a2:
3b:9a:3d:21:c1:d7:76:0b:1c:86:9b:00:42:f0:3f:
8c:44:8e:9b:a9:22:e3:1d:77:00:51:02:f3:68:f6:
43:c3:42:d7:a1:8c:89:02:83:d9:66:d4:cf:5f:2e:
73:46:2f:01:33:07:71:19:26:0e:ab:f1:0d:b5:cf:
34:da:f9:03:a1:6f:e9:b2:c3:5e:8f:cd:7a:f2:22:
d5:13:58:84:b4:c6:b4:01:f4:d3:18:6f:91:36:1e:
20:27:51:c9:c4:59:c9:df:80:f6:3f:d9:a7:4e:69:
28:87:f6:b8:05:12:2d:cf:06:4d:91:66:f2:35:88:
0c:5f:0d:55:69:4d:aa:b6:5b:15:df:fc:f8:88:32:
38:44:ea:80:5e:6d:f3:a5:39:6d:2e:14:53:9d:f8:
da:4a:ad:26:bb:b2:ad:91:0e:50:c4:f7:c5:9b:e6:
1e:b1:db:fd:98:f6:9b:22:e2:21:10:0c:14:f2:c0:
28:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:26:8F:DE:54:98:60:E8:4A:3F:60:2C:9B:B7:56:8B:F0:A3:89:81
X509v3 Authority Key Identifier:
keyid:60:9A:31:26:E2:36:9A:97:D4:7F:D6:44:98:D8:16:5E:21:E5:25:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59DF/BB52F4AC9C0D11EBAED84B24C4F9AE02/YJoxJuI2mpfUf9ZEmNgWXiHlJcU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:65:6f:72:a2:f9:6b:4c:71:0c:32:d7:51:03:d4:c7:31:09:
80:08:ee:99:99:03:73:8d:8c:48:3e:37:78:55:fd:89:58:fa:
75:0f:90:74:fe:90:cf:1c:15:09:5a:b2:4c:e5:c2:e3:57:94:
5c:87:95:27:b7:33:2a:e3:4f:07:a7:74:c9:ad:b7:a3:e0:7c:
ee:97:c4:8a:93:b0:89:d5:0b:c9:13:09:e5:c8:d0:26:9e:73:
a4:ce:f1:32:11:ae:3d:c0:b5:cb:8a:7a:e3:71:ff:5c:40:7b:
f9:06:b5:0f:94:47:29:20:a4:c6:07:f8:54:38:dc:3d:a4:7f:
06:42:73:df:46:58:11:d4:3e:41:af:45:5d:c3:d0:fe:b1:e6:
ad:22:a1:45:10:8f:f0:8e:9b:76:b7:ec:7c:b7:bc:a0:fa:50:
2f:65:a3:f6:ad:be:0e:2c:81:b4:bb:7b:6e:f8:77:8e:9e:ec:
7e:f6:0b:f0:53:f8:54:49:11:fd:11:e7:70:02:ab:e2:8e:2a:
00:67:a3:50:77:1c:35:1a:1a:55:81:d6:77:fc:6e:5e:76:dc:
aa:16:b0:ea:f1:2b:cf:3e:21:3d:f4:5f:33:42:04:8d:6b:4e:
50:c9:37:72:51:82:84:5b:32:0d:7c:e7:e9:4f:c1:4f:8c:e4:
6d:22:dd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:21:06 2025 by rpki-client