This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft
File: yyBKq8TrV0KH_ARSchxbAQqavzE.mft (raw, json)
Hash identifier: ZTK0r++YFT3gFTkQ9LY7fjmYAYON+jq/w2KSL4K3rXE=
Subject key identifier: 9A:4A:3E:D7:BA:6E:00:20:89:64:B6:C9:B7:12:DA:F3:A8:05:58:EB
Authority key identifier: CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31
Certificate issuer: /CN=A911082E/serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft
Manifest number: 50
Signing time: Tue 23 Dec 2025 06:09:18 +0000
Manifest this update: Tue 23 Dec 2025 06:09:17 +0000
Manifest next update: Tue 30 Dec 2025 06:09:17 +0000
Files and hashes: 1: yyBKq8TrV0KH_ARSchxbAQqavzE.crl (hash: 8on8ndZQQlqKFGN79Q56phRmWc1ZBTku5zknPv9rPMg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl
rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:09:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911082E, serialNumber=CB204AABC4EB574287FC0452721C5B010A9ABF31
Validity
Not Before: Dec 23 06:09:17 2025 GMT
Not After : Dec 30 06:09:17 2025 GMT
Subject: CN=694a320d-2774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0b:2e:58:ad:24:39:0d:0d:b8:87:51:f8:5f:
8d:d9:88:54:bc:90:ed:3b:e1:3f:43:9d:c5:11:12:
e7:4d:50:e5:89:91:d0:16:ea:39:05:c7:49:ae:11:
85:01:66:d1:17:fa:ef:40:4d:77:5d:3b:5b:bd:8a:
cd:6e:58:09:cc:e5:df:50:89:8a:a7:f3:bb:31:ff:
85:be:35:3f:22:87:74:5c:c5:a0:f9:27:76:47:e0:
73:e7:b0:05:51:31:e1:40:f0:7f:9d:6e:92:2f:8e:
00:59:5a:39:9b:20:6b:cd:0f:dd:70:1c:d5:b4:dd:
36:ba:52:9a:d1:8c:45:59:12:b2:0e:46:2a:53:c0:
c7:32:65:01:f8:a7:b5:46:32:80:ec:83:94:64:4d:
5b:35:6f:48:a7:60:56:4f:9f:df:ea:29:de:f2:f0:
87:48:09:d2:8e:59:e9:7b:60:28:bc:3d:4c:98:44:
72:cd:b1:49:51:ff:b6:0e:54:7a:96:89:ed:fe:38:
34:09:c1:47:6c:a1:b1:19:32:ce:65:c8:57:60:61:
e1:2a:e8:16:c2:3b:1a:c2:4a:d8:f2:33:e2:86:69:
4d:52:09:68:5b:62:b9:a8:bd:14:3e:44:e9:75:e9:
fb:36:52:e3:55:db:42:df:1d:55:ab:8c:ef:50:9e:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4A:3E:D7:BA:6E:00:20:89:64:B6:C9:B7:12:DA:F3:A8:05:58:EB
X509v3 Authority Key Identifier:
keyid:CB:20:4A:AB:C4:EB:57:42:87:FC:04:52:72:1C:5B:01:0A:9A:BF:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyBKq8TrV0KH_ARSchxbAQqavzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911082E/8DFE636666E211F0BEABE93EC4F9AE02/yyBKq8TrV0KH_ARSchxbAQqavzE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e9:3a:83:ba:92:54:c4:69:d7:f2:e5:d2:98:60:23:7d:50:
90:36:2b:c0:a6:8c:c0:9f:5f:99:f0:08:88:71:fc:53:9f:49:
94:ed:20:41:f4:fa:ef:3d:b1:5c:29:70:0c:45:29:ab:c2:e8:
37:4f:ae:11:06:6d:ff:45:6c:e5:fa:9b:63:aa:0b:c9:a8:19:
41:9a:f1:fa:03:06:84:e1:57:e6:3b:cd:b5:f9:4d:46:12:43:
91:e5:32:46:37:51:e6:3b:f2:07:9c:38:0b:7c:04:5c:a3:20:
b8:8f:c8:05:0b:eb:70:04:e8:db:b4:98:5f:51:f0:cb:fe:12:
2b:f5:7a:e5:b7:d0:60:db:71:7b:6b:f1:a3:b8:6f:4c:f2:bc:
a8:a9:c0:c7:f4:5b:c2:c8:a3:6a:8d:8a:db:00:20:e3:0a:da:
3b:7a:3d:3b:98:e6:e7:7c:df:0b:c2:d9:7f:0c:64:06:c7:6e:
53:91:ba:60:75:39:a1:25:b6:2a:96:2c:04:ae:a1:07:cc:07:
1c:38:b6:02:4d:ab:16:82:ac:c1:cd:ef:dd:8a:d0:f6:c5:7d:
56:07:30:51:6c:5a:2b:d9:b7:cb:8a:45:59:21:6c:3e:6a:53:
19:91:a4:41:fb:50:1f:09:0a:54:32:7d:6f:3b:db:df:cd:87:
ff:36:5d:32
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MDgyRTExMC8GA1UEBRMoQ0IyMDRBQUJDNEVCNTc0Mjg3RkMwNDUyNzIxQzVCMDEw
QTlBQkYzMTAeFw0yNTEyMjMwNjA5MTdaFw0yNTEyMzAwNjA5MTdaMBgxFjAUBgNV
BAMMDTY5NGEzMjBkLTI3NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQD4Cy5YrSQ5DQ24h1H4X43ZiFS8kO074T9DncUREudNUOWJkdAW6jkFx0muEYUB
ZtEX+u9ATXddO1u9is1uWAnM5d9QiYqn87sx/4W+NT8ih3RcxaD5J3ZH4HPnsAVR
MeFA8H+dbpIvjgBZWjmbIGvND91wHNW03Ta6UprRjEVZErIORipTwMcyZQH4p7VG
MoDsg5RkTVs1b0inYFZPn9/qKd7y8IdICdKOWel7YCi8PUyYRHLNsUlR/7YOVHqW
ie3+ODQJwUdsobEZMs5lyFdgYeEq6BbCOxrCStjyM+KGaU1SCWhbYrmovRQ+ROl1
6fs2UuNV20LfHVWrjO9QnlA/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmko+17pu
ACCJZLbJtxLa86gFWOswHwYDVR0jBBgwFoAUyyBKq8TrV0KH/ARSchxbAQqavzEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwODJFLzhERkU2MzY2NjZF
MjExRjBCRUFCRTkzRUM0RjlBRTAyL3l5QktxOFRyVjBLSF9BUlNjaHhiQVFxYXZ6
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveXlCS3E4VHJWMEtIX0FSU2NoeGJBUXFhdnpFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEw
ODJFLzhERkU2MzY2NjZFMjExRjBCRUFCRTkzRUM0RjlBRTAyL3l5QktxOFRyVjBL
SF9BUlNjaHhiQVFxYXZ6RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAI3pOoO6klTEadfy5dKYYCN9UJA2K8CmjMCfX5nwCIhx/FOfSZTtIEH0
+u89sVwpcAxFKavC6DdPrhEGbf9FbOX6m2OqC8moGUGa8foDBoThV+Y7zbX5TUYS
Q5HlMkY3UeY78gecOAt8BFyjILiPyAUL63AE6Nu0mF9R8Mv+Eiv1euW30GDbcXtr
8aO4b0zyvKipwMf0W8LIo2qNitsAIOMK2jt6PTuY5ud83wvC2X8MZAbHblORumB1
OaEltiqWLASuoQfMBxw4tgJNqxaCrMHN792K0PbFfVYHMFFsWivZt8uKRVkhbD5q
UxmRpEH7UB8JClQyfW8729/Nh/82XTI=
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:01 2025 by rpki-client