This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
File: yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json)
Hash identifier: O5xNBe54/OwRh2xn8G0GtK7KL0UdHDyu+6HQMG/w3K8=
Subject key identifier: 61:B9:A8:35:49:DA:57:4B:31:C3:6F:3E:33:EB:4C:B8:48:14:D8:48
Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
Certificate issuer: /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
Certificate serial: 14DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
Manifest number: 14D8
Signing time: Wed 10 Dec 2025 16:23:07 +0000
Manifest this update: Wed 10 Dec 2025 16:23:07 +0000
Manifest next update: Wed 17 Dec 2025 16:23:07 +0000
Files and hashes: 1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: I0eFZfWpPqF93GGM7qK9mMAcf94vGpxU1pvk0bccBmc=)
2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: 9CCdXAmyhsUIKZ6n8Wk1KKSvrNfp24roJJogpEjyBYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl
rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 16:23:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5338 (0x14da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
Validity
Not Before: Dec 10 16:23:07 2025 GMT
Not After : Dec 17 16:23:07 2025 GMT
Subject: CN=69399e6b-99a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:f2:83:4f:92:64:74:36:52:01:b2:4b:47:
37:10:22:87:b8:5c:96:c9:e8:7f:d5:7b:30:82:cd:
db:db:90:86:5e:1b:e7:6d:f6:70:b2:35:ca:bd:10:
c8:89:16:91:33:b3:92:91:03:4e:4b:e5:ea:51:9a:
f1:8f:fd:d4:1e:f7:6f:97:b2:65:f0:e7:5a:a7:4b:
ac:55:12:9d:df:66:e5:2a:86:c9:ff:c7:e5:02:45:
c0:e1:25:26:8e:4b:66:2a:ad:c2:31:d3:c3:24:09:
87:ea:3f:f6:b2:0b:dc:6d:74:04:36:d5:78:fb:c7:
5f:67:76:52:29:ae:b2:52:04:45:ef:2b:c6:7a:3e:
6b:f5:21:3d:02:c9:84:9d:ab:88:b8:da:4a:9f:fd:
c6:70:9f:ee:65:cf:e1:f3:82:53:f4:13:6f:c8:c5:
e4:6c:cc:40:61:af:55:ae:69:c9:be:91:df:a0:d9:
c6:76:8e:a2:fc:6a:75:ac:b1:49:da:bd:4d:d9:1f:
82:79:5b:ae:47:d9:87:5b:9e:44:71:c8:8f:16:a0:
b2:0d:97:8b:aa:32:12:8f:a9:f3:2a:1e:01:f1:00:
6d:53:cc:aa:b0:18:b9:b3:ec:67:71:f6:42:82:b2:
fe:c6:d7:2b:6a:fa:34:c9:6b:a4:97:8d:13:ff:cd:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B9:A8:35:49:DA:57:4B:31:C3:6F:3E:33:EB:4C:B8:48:14:D8:48
X509v3 Authority Key Identifier:
keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:76:ca:58:85:d8:c6:dc:0f:51:f9:17:fa:b1:b5:63:67:31:
ed:07:15:44:77:2a:0d:f6:76:4f:96:e6:5f:88:23:2e:ee:17:
85:83:ad:ef:e1:2c:82:24:34:d6:b2:37:3f:9a:04:91:41:2d:
db:83:f1:6b:06:ab:2d:4a:8b:f5:3c:73:e6:15:f9:4f:3f:24:
35:77:f9:75:59:c1:fd:43:32:86:7a:01:67:92:c9:d0:26:34:
6b:f7:6d:6a:54:75:53:d0:ba:50:74:4c:02:46:ce:9c:ec:e0:
93:05:d4:d7:4d:23:8d:40:56:4e:9c:b6:45:16:79:bd:b2:53:
13:ba:d2:9c:b6:7a:5d:5e:68:18:64:67:e1:69:09:47:67:85:
e8:c5:27:32:0a:90:0d:ad:e0:2a:fe:f7:19:fb:09:24:63:ff:
44:2a:25:37:45:36:13:32:27:51:13:d4:33:d0:3c:0c:07:e5:
d3:fe:97:34:a0:a2:39:22:75:bf:a4:dd:ae:7e:ec:a7:5e:2c:
94:78:7c:15:93:9b:ab:76:50:84:a1:58:88:0b:14:61:72:d4:
85:c9:79:32:d5:37:ca:8e:7e:d5:04:3a:61:67:0b:26:11:3d:
93:31:f4:47:30:9a:59:8a:23:59:f7:19:24:37:ca:89:66:9b:
17:6c:8e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 14:43:28 2025 by rpki-client