This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json)
Hash identifier: BzoMWHvg1sIEszwnOBioW/SWmZCC1Cn+eoV4y9CsF04=
Subject key identifier: DA:EC:42:C6:DB:39:72:FA:37:17:5D:76:D4:15:4C:DC:9F:C6:E3:E8
Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
Manifest number: 04AB
Signing time: Mon 22 Dec 2025 23:21:44 +0000
Manifest this update: Mon 22 Dec 2025 23:21:43 +0000
Manifest next update: Mon 29 Dec 2025 23:21:43 +0000
Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: NMyad7oMQTUKuzvNJKbkfKN/HqoGW/pnkTP+cZtgcFs=)
2: F83346DA410211F097F43F85C4F9AE02.roa (hash: EnqZyVfj3TKzoAvrOL6tNqUILt/NgCo/Yq0hgyekdPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:21:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Validity
Not Before: Dec 22 23:21:43 2025 GMT
Not After : Dec 29 23:21:43 2025 GMT
Subject: CN=6949d288-f43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:d2:35:08:f3:27:97:df:2c:7a:94:4a:a1:
be:f2:61:22:55:46:3b:1f:a1:5c:25:70:5e:aa:0c:
43:7a:07:42:32:86:bc:39:1d:2d:c2:46:bf:f8:38:
55:15:e5:f8:d1:7a:35:00:00:9f:35:af:ca:00:12:
29:d9:17:e6:53:6c:2c:30:2b:b9:0f:44:e9:b7:3b:
91:b7:a6:a2:13:c1:6b:34:40:18:70:b5:b6:47:88:
c8:25:c9:60:10:9d:ea:a7:34:1c:6d:5d:11:99:2c:
44:c0:c7:88:88:13:2d:89:86:56:1b:55:04:da:9b:
6d:e3:a9:48:cf:48:3d:82:57:e3:5b:f0:20:ef:34:
d8:c8:01:74:2d:81:73:2f:58:cf:81:a2:fc:37:63:
f1:01:52:56:10:43:ce:e5:9b:a1:b7:07:eb:96:68:
20:3f:41:bc:e8:7f:e8:b2:06:c0:4f:57:10:5d:09:
12:e0:1b:12:6e:8a:4e:5e:57:0e:17:59:e3:79:3d:
33:73:eb:5a:00:d3:bd:f7:0b:cc:8d:0f:25:c4:f6:
6f:64:3d:de:4b:6c:63:1c:e4:bf:ab:50:dd:f2:1a:
f8:3b:b0:29:c9:b7:05:e0:c8:39:c8:d0:f6:0d:c0:
f1:c6:90:01:4c:35:14:61:61:e2:9b:3d:98:43:b9:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:EC:42:C6:DB:39:72:FA:37:17:5D:76:D4:15:4C:DC:9F:C6:E3:E8
X509v3 Authority Key Identifier:
keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:60:81:98:31:96:95:a5:0a:48:d7:08:a2:04:f3:f1:36:30:
ce:f0:8e:74:94:de:b4:83:0c:3c:08:b1:28:27:17:be:6e:e3:
bc:2e:6d:ad:9b:2c:45:07:d8:c0:66:b3:ed:42:3b:0e:72:ab:
a4:7e:6b:71:6b:12:57:1b:4c:67:8b:d1:04:db:89:a1:9e:2c:
93:10:6d:29:81:80:3c:c1:b9:de:39:b2:79:10:6f:3e:10:d1:
5c:1f:9f:b2:ba:de:09:e1:cf:d9:ac:c5:c3:9f:c1:e9:47:6a:
a4:23:5a:c9:fd:03:83:bb:46:f8:8e:32:a8:2d:b7:d5:13:06:
b8:df:83:1c:39:66:66:f7:47:83:dd:5b:db:45:85:77:55:3f:
ff:e9:d0:35:33:bd:4c:ff:e2:2d:77:12:c2:ae:4e:23:85:49:
c3:a5:ef:d7:75:06:fe:df:61:66:ec:da:99:d6:44:e1:68:6c:
40:6a:cf:14:24:5b:5b:20:04:a0:62:40:da:f7:3d:dc:fe:93:
fe:df:35:21:95:cf:52:44:59:e8:0b:4c:a3:e8:9b:98:69:49:
71:54:6e:6b:7a:96:f7:9c:47:88:06:78:4e:bc:46:fe:cb:69:
40:66:d5:1c:22:c0:1b:2e:1d:cf:cd:55:f9:ea:59:97:4f:ed:
eb:24:eb:2c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RDBBRjExMC8GA1UEBRMoNjNCNzAxQjcyNzA2RjMxOTBCRUY4QkZCRkEzNEZGQTMz
RjRGNkJENjAeFw0yNTEyMjIyMzIxNDNaFw0yNTEyMjkyMzIxNDNaMBgxFjAUBgNV
BAMMDTY5NDlkMjg4LWY0M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCM7NI1CPMnl98sepRKob7yYSJVRjsfoVwlcF6qDEN6B0Iyhrw5HS3CRr/4OFUV
5fjRejUAAJ81r8oAEinZF+ZTbCwwK7kPROm3O5G3pqITwWs0QBhwtbZHiMglyWAQ
neqnNBxtXRGZLETAx4iIEy2JhlYbVQTam23jqUjPSD2CV+Nb8CDvNNjIAXQtgXMv
WM+Bovw3Y/EBUlYQQ87lm6G3B+uWaCA/Qbzof+iyBsBPVxBdCRLgGxJuik5eVw4X
WeN5PTNz61oA0733C8yNDyXE9m9kPd5LbGMc5L+rUN3yGvg7sCnJtwXgyDnI0PYN
wPHGkAFMNRRhYeKbPZhDuZYpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2uxCxts5
cvo3F1121BVM3J/G4+gwHwYDVR0jBBgwFoAUY7cBtycG8xkL74v7+jT/oz9Pa9Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREMEFGLzFFMzM5QjM2ODhE
RTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhrTDc0djctalRfb3o5UGE5
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWTdjQnR5Y0c4eGtMNzR2Ny1qVF9vejlQYTlZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE
MEFGLzFFMzM5QjM2ODhERTExRUM4QThCMTYyOEM0RjlBRTAyL1k3Y0J0eWNHOHhr
TDc0djctalRfb3o5UGE5WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAH1ggZgxlpWlCkjXCKIE8/E2MM7wjnSU3rSDDDwIsSgnF75u47wuba2b
LEUH2MBms+1COw5yq6R+a3FrElcbTGeL0QTbiaGeLJMQbSmBgDzBud45snkQbz4Q
0Vwfn7K63gnhz9msxcOfwelHaqQjWsn9A4O7RviOMqgtt9UTBrjfgxw5Zmb3R4Pd
W9tFhXdVP//p0DUzvUz/4i13EsKuTiOFScOl79d1Bv7fYWbs2pnWROFobEBqzxQk
W1sgBKBiQNr3Pdz+k/7fNSGVz1JEWegLTKPom5hpSXFUbmt6lvecR4gGeE68Rv7L
aUBm1RwiwBsuHc/NVfnqWZdP7esk6yw=
-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:29 2025 by rpki-client