This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
File: YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft (raw, json)
Hash identifier: pw7MnYFqkz8EQuqvcxZ3gW9Z2Xqc2NP/pVNOFDr0pzQ=
Subject key identifier: E0:87:2A:75:C8:4A:CF:2B:8A:A6:BA:CE:01:FF:74:DA:51:1D:7A:31
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Certificate issuer: /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial: 3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
Manifest number: 04F1
Signing time: Mon 22 Dec 2025 23:37:27 +0000
Manifest this update: Mon 22 Dec 2025 23:37:26 +0000
Manifest next update: Mon 29 Dec 2025 23:37:26 +0000
Files and hashes: 1: YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl (hash: bXh2E9lH+dM03tSeMEVUBpBTAJq1cOAcdKmfF7+c5ao=)
2: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (hash: vft+eU4CpaMMVegJX2IoSc61ijnWeC2pmFFJGifleEc=)
3: B39CC5D0999C11F0B916112DC4F9AE02.roa (hash: 6q41hoRYSlGeQU/2jAswtSG8NBRB1otmd5Vb7tbOxSI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:37:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Validity
Not Before: Dec 22 23:37:26 2025 GMT
Not After : Dec 29 23:37:26 2025 GMT
Subject: CN=6949d636-ca8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:fa:2f:9c:29:6b:55:a4:c3:b1:21:72:13:
ce:bc:a1:55:a0:06:27:f8:6b:52:4b:cd:96:e7:aa:
f4:30:78:5b:a9:d9:f6:c4:c1:45:98:ea:75:fc:75:
bf:d7:d4:db:84:6e:a4:c4:0d:57:31:ad:f5:30:a9:
ea:f0:29:e7:63:e8:c4:c5:e8:80:93:46:65:2f:27:
dc:6c:e6:8a:5a:af:18:0f:9e:75:2a:2c:b1:24:17:
0f:01:97:32:f6:bf:4e:64:ba:fb:74:72:66:cb:fa:
b4:bc:59:fb:c9:b5:f5:75:f7:c8:cf:97:7d:f7:16:
16:10:36:be:46:a2:22:c0:73:31:16:98:8a:3b:99:
e4:17:79:a0:45:0e:91:a6:24:46:ef:fc:88:bc:2e:
6e:f9:da:58:3c:81:0d:da:a3:c9:6a:f1:e0:0e:b7:
d9:cb:69:f2:59:9a:a9:9c:a9:67:ce:cd:e7:ea:4e:
7b:70:79:a2:88:9c:88:84:33:38:06:9c:74:1b:40:
96:69:00:77:10:e0:42:d0:24:de:47:2e:a9:c6:8a:
dd:b3:67:bb:2f:c8:ef:b4:be:29:ab:bc:af:d9:cf:
a3:21:e0:ea:77:e5:9a:f7:e4:e4:29:de:68:ee:c9:
66:0f:f2:45:34:d8:82:bb:80:9f:20:94:57:92:48:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:87:2A:75:C8:4A:CF:2B:8A:A6:BA:CE:01:FF:74:DA:51:1D:7A:31
X509v3 Authority Key Identifier:
keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:59:67:f6:1f:6f:07:29:e4:d3:bf:ee:f8:fe:fc:d8:26:b1:
c1:f4:60:a6:b1:73:10:68:d5:98:c1:e3:f7:36:56:4f:df:29:
8f:d7:49:24:f9:c0:ce:20:72:89:f5:51:a9:0e:8c:c1:b4:16:
4a:aa:e1:76:38:87:6c:f3:0c:73:00:18:d6:84:f2:34:db:1a:
f5:d1:7a:20:aa:32:ad:15:57:ae:37:c2:8f:c5:f6:be:4b:00:
66:82:59:4d:c4:00:85:4d:26:6b:2b:8a:22:e2:6c:8a:37:35:
04:5f:5e:da:b9:a4:89:33:9e:86:44:f8:20:9d:0e:42:87:3f:
42:18:2d:14:a2:38:aa:23:cc:44:34:3a:0a:78:75:cc:28:98:
94:8a:e4:ed:27:29:86:dc:11:f9:0b:0a:c5:d7:94:b3:d5:37:
d4:df:11:33:71:be:43:13:d5:80:61:ad:83:8c:4e:9b:e4:87:
34:40:7a:4c:53:f8:eb:5e:0e:4f:f6:46:69:bb:dd:70:a1:5a:
d5:ba:c5:b1:06:ee:2c:37:04:77:a3:53:3f:65:2a:16:41:9a:
2b:3e:bb:29:6f:c8:5b:70:61:2b:2e:ec:48:a8:18:f9:28:15:
e9:1c:c8:0d:17:49:b9:c4:0f:c4:24:7c:6c:41:46:41:7d:68:
93:1e:3a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 09:00:39 2025 by rpki-client