This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
File: YqwbuVgKcRmBnntrbrLDUVNHh_0.mft (raw, json)
Hash identifier: oQCOKy7AAUq1e3zqjiJnLm9y+8h/vo/0K9ggnN/jtXM=
Subject key identifier: 9D:9C:9B:7A:04:25:9F:E5:A4:B5:02:5B:B3:50:D7:44:AA:50:DC:F9
Authority key identifier: 62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
Certificate issuer: /CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
Manifest number: 0101
Signing time: Tue 23 Dec 2025 04:06:11 +0000
Manifest this update: Tue 23 Dec 2025 04:06:10 +0000
Manifest next update: Tue 30 Dec 2025 04:06:10 +0000
Files and hashes: 1: YqwbuVgKcRmBnntrbrLDUVNHh_0.crl (hash: IAxZy0BU/oVrCqBc4TvVYUNckqckxg0qkxXLOB5jtNU=)
2: 652283665B1A11EFA78B847EC4F9AE02.roa (hash: cRgznzypgNObdJ5+nUBdFPZbJ/XSHjedbIfP0KuyG4Y=)
3: 474934DE5B1A11EFBF0E1F7CC4F9AE02.roa (hash: Po3+3jwZqbergErT/CE07CzYXSwWNnVs3V/GDhF2/Rc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 04:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DD08, serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD
Validity
Not Before: Dec 23 04:06:10 2025 GMT
Not After : Dec 30 04:06:10 2025 GMT
Subject: CN=694a1532-65a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:31:29:17:32:0e:05:c7:41:b0:20:ab:fe:80:
62:4c:c3:9f:f8:b7:97:3f:aa:36:20:4c:54:f5:50:
e7:2f:1a:63:e3:0c:d3:80:7d:1a:8e:51:81:23:b7:
9f:2a:1a:23:d5:ed:a6:a6:84:46:ec:98:f6:93:cf:
26:ac:55:cd:63:61:b2:4a:96:8c:14:59:93:d2:b2:
25:e3:97:b5:5e:c7:5c:6c:87:49:08:6d:58:de:20:
76:0e:c1:c4:31:b5:20:53:04:cf:72:ed:ce:bf:de:
94:d6:73:ad:09:73:20:7a:08:b4:b8:f4:cb:30:17:
22:ff:5c:e0:77:f0:d3:0b:44:25:6d:b4:20:60:64:
cd:60:92:0d:62:e7:00:55:44:48:9c:11:93:d9:36:
9b:1c:61:51:78:20:e3:29:17:c3:9a:ce:84:bf:ca:
cc:f8:ed:f5:df:5d:f3:3c:68:6a:62:a0:21:79:e2:
c7:98:dd:06:a2:e2:4a:4d:89:24:ce:4b:83:f0:1d:
ce:3e:72:b9:8f:d7:08:b4:48:60:aa:55:fe:c6:21:
c3:4e:9e:ac:80:53:a8:14:fc:9b:7b:a3:a2:ce:75:
37:3b:8f:e6:ef:05:9b:63:cd:88:e2:3b:92:8b:e2:
0e:03:e8:6f:36:fe:dd:c2:ff:15:05:c5:f4:68:f8:
2e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9C:9B:7A:04:25:9F:E5:A4:B5:02:5B:B3:50:D7:44:AA:50:DC:F9
X509v3 Authority Key Identifier:
keyid:62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:bb:b9:fe:ed:a3:d3:e0:84:9f:06:e6:46:4a:7a:74:fe:0b:
e9:e0:57:71:1e:04:67:3a:16:23:9d:3e:ec:85:18:f2:78:f7:
2b:5b:1c:8e:6b:51:08:b9:01:0c:1a:cd:37:59:61:55:39:94:
32:d9:00:52:b4:5b:19:d1:ae:c4:59:a0:85:a8:4a:bb:7a:f3:
77:40:82:f7:85:a4:7b:c2:31:65:14:bc:d6:6f:55:5f:43:98:
fc:fc:33:64:e4:72:40:c9:6f:00:e5:d5:1c:3e:e5:ee:c4:fc:
5a:85:59:43:a0:90:a5:de:df:b7:82:4c:05:3c:43:49:df:df:
55:0f:92:dd:8f:35:0c:ea:7c:ac:d6:63:c7:a0:ab:7e:16:dc:
e5:e5:32:7a:c6:bc:a8:3d:d2:12:20:6e:c8:98:56:cd:f4:4a:
34:2e:4d:dd:69:b6:0e:9b:c1:ff:2a:75:f2:06:68:08:3c:3c:
7e:64:15:5a:e1:42:b5:e4:87:8f:eb:c4:bb:61:98:da:95:9b:
82:78:37:0d:18:75:45:fe:fd:62:e9:91:17:20:39:0d:82:ee:
a6:2c:e5:c5:f2:52:94:ee:5b:a0:99:38:73:51:84:0e:1e:56:
e3:54:e5:4c:ff:c4:3c:4b:e0:1b:1b:a9:aa:d9:1e:14:cb:d6:
a2:fa:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 21:24:33 2025 by rpki-client