This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
File: ycx5T_y0zfLZ373rdjgJuH0tj1c.mft (raw, json)
Hash identifier: 1vuF7FR9+POQwR8Qvn0mqlPZp8ISsx4kj+83pJRffGA=
Subject key identifier: 1D:B7:16:48:FA:5E:80:66:42:54:F4:C4:45:9A:1B:95:96:DC:BA:32
Authority key identifier: C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
Certificate issuer: /CN=A9147456/serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Certificate serial: 2563
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
Manifest number: 2546
Signing time: Mon 22 Dec 2025 15:35:28 +0000
Manifest this update: Mon 22 Dec 2025 15:35:27 +0000
Manifest next update: Mon 29 Dec 2025 15:35:27 +0000
Files and hashes: 1: ycx5T_y0zfLZ373rdjgJuH0tj1c.crl (hash: 1RycecV1TcGE/nkosMKVsxDfzQjOGK6vqhAZKG67z/c=)
2: 297BC4140D4611E794585E2FC4F9AE02.roa (hash: 2tz7LMjITp7vanRGF3Qd5TIIIj7fKWHmsVgw8s6O7nY=)
3: 04CC562A444E11E88204061CC4F9AE02.roa (hash: W5nO0Dm01E1L0J0RrwxDTx9HsKlaz3AShpTaXk9sHks=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 15:35:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9571 (0x2563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147456, serialNumber=C9CC794FFCB4CDF2D9DFBDEB763809B87D2D8F57
Validity
Not Before: Dec 22 15:35:27 2025 GMT
Not After : Dec 29 15:35:27 2025 GMT
Subject: CN=6949653f-0070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:17:1b:64:f2:04:73:ea:b6:93:8e:bc:04:
51:5e:80:2e:e7:b0:aa:c0:44:48:42:20:2c:0f:53:
54:66:ac:da:f1:de:e7:29:aa:d4:25:44:8d:07:77:
d5:be:3a:11:c8:b5:bf:f6:c0:22:fa:ea:40:18:d8:
58:99:3c:1f:9f:08:8e:42:af:3f:ab:b0:80:11:09:
88:da:a2:1e:e7:19:0d:f2:90:4f:d7:b9:f0:95:71:
f9:d7:7f:fe:93:d8:eb:f6:73:41:e9:e9:86:40:72:
b6:2e:c2:68:22:ad:99:d8:89:a1:0d:91:0a:eb:e5:
87:45:4f:3a:3f:d6:34:e1:98:a2:9c:db:c0:77:94:
b4:b2:b0:07:b2:d4:d9:d4:30:b5:ac:e2:80:69:2b:
ac:91:80:54:6d:10:68:82:57:5a:b7:51:b9:e8:80:
bd:db:45:1f:b9:17:80:b1:10:a3:ba:a4:18:1a:40:
ca:92:bf:6a:aa:0f:54:f6:46:8b:cd:d9:ba:31:cc:
59:f9:f4:e6:d4:74:80:37:cc:a4:60:37:76:39:09:
6a:cf:b4:d0:15:b0:bd:89:eb:42:82:74:07:84:73:
a5:b9:f8:4f:cd:5d:bc:53:5b:8c:a1:71:f7:45:d4:
32:61:c9:e1:80:3c:c0:82:c4:eb:78:ad:45:54:2e:
4d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B7:16:48:FA:5E:80:66:42:54:F4:C4:45:9A:1B:95:96:DC:BA:32
X509v3 Authority Key Identifier:
keyid:C9:CC:79:4F:FC:B4:CD:F2:D9:DF:BD:EB:76:38:09:B8:7D:2D:8F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycx5T_y0zfLZ373rdjgJuH0tj1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147456/6154D168372E11E581F0FB39C4F9AE02/ycx5T_y0zfLZ373rdjgJuH0tj1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:38:35:7b:2d:05:8e:23:4e:fa:93:58:31:85:7a:d0:c1:6f:
71:10:3f:fa:ee:86:29:ee:19:82:07:8a:01:fc:8a:7d:dd:57:
5b:6e:c0:36:c0:70:f6:7d:0f:39:0b:76:f7:36:ec:71:d3:5c:
f2:5b:70:a0:1d:6d:d9:11:8d:17:76:99:6b:31:7c:47:5a:a7:
a2:ca:a3:06:3d:90:6f:e2:6b:fa:33:61:dc:02:e9:ca:dd:24:
38:ea:d8:52:bd:ae:2f:d9:b5:2a:ab:c4:ba:32:cf:2d:4b:b2:
7f:af:64:02:17:20:f8:4b:33:f4:cc:8c:f6:fd:d3:33:09:8a:
58:e5:09:dc:c8:19:6b:61:60:de:4d:54:aa:7c:f6:f2:93:58:
94:11:76:98:89:62:46:f9:8f:55:b0:ab:be:16:a1:09:51:61:
1c:26:07:2e:75:d7:a8:0f:6d:56:e0:dc:3c:ef:ca:88:01:af:
7e:5b:5e:0c:cf:02:20:a1:c7:2b:d2:ef:fc:7f:f7:d3:c5:cd:
fe:45:08:32:e0:a5:86:a2:95:ed:aa:70:7b:d0:67:74:1c:df:
8f:e0:03:5e:f7:20:41:6b:e4:93:1c:62:c0:ad:c8:d1:d4:53:
91:5b:7b:0c:d0:fe:c9:d8:46:d4:c7:93:6b:dd:aa:9a:fd:1d:
74:43:cd:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc0NTYxMTAvBgNVBAUTKEM5Q0M3OTRGRkNCNENERjJEOURGQkRFQjc2MzgwOUI4
N0QyRDhGNTcwHhcNMjUxMjIyMTUzNTI3WhcNMjUxMjI5MTUzNTI3WjAYMRYwFAYD
VQQDDA02OTQ5NjUzZi0wMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr94XG2TyBHPqtpOOvARRXoAu57CqwERIQiAsD1NUZqza8d7nKarUJUSNB3fV
vjoRyLW/9sAi+upAGNhYmTwfnwiOQq8/q7CAEQmI2qIe5xkN8pBP17nwlXH513/+
k9jr9nNB6emGQHK2LsJoIq2Z2ImhDZEK6+WHRU86P9Y04ZiinNvAd5S0srAHstTZ
1DC1rOKAaSuskYBUbRBogldat1G56IC920UfuReAsRCjuqQYGkDKkr9qqg9U9kaL
zdm6McxZ+fTm1HSAN8ykYDd2OQlqz7TQFbC9ietCgnQHhHOlufhPzV28U1uMoXH3
RdQyYcnhgDzAgsTreK1FVC5N4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB23Fkj6
XoBmQlT0xEWaG5WW3LoyMB8GA1UdIwQYMBaAFMnMeU/8tM3y2d+963Y4Cbh9LY9X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzQ1Ni82MTU0RDE2ODM3
MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpmTFozNzNyZGpnSnVIMHRq
MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ljeDVUX3kwemZMWjM3M3JkamdKdUgwdGoxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzQ1Ni82MTU0RDE2ODM3MkUxMUU1ODFGMEZCMzlDNEY5QUUwMi95Y3g1VF95MHpm
TFozNzNyZGpnSnVIMHRqMWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAOODV7LQWOI076k1gxhXrQwW9xED/67oYp7hmCB4oB/Ip93VdbbsA2
wHD2fQ85C3b3Nuxx01zyW3CgHW3ZEY0XdplrMXxHWqeiyqMGPZBv4mv6M2HcAunK
3SQ46thSva4v2bUqq8S6Ms8tS7J/r2QCFyD4SzP0zIz2/dMzCYpY5QncyBlrYWDe
TVSqfPbyk1iUEXaYiWJG+Y9VsKu+FqEJUWEcJgcuddeoD21W4Nw878qIAa9+W14M
zwIgoccr0u/8f/fTxc3+RQgy4KWGopXtqnB70Gd0HN+P4ANe9yBBa+STHGLArcjR
1FORW3sM0P7J2EbUx5Nr3aqa/R10Q826
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:12:18 2025 by rpki-client