This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
File: Yja2yVcFRCapTOamlDI45v5tH1Y.mft (raw, json)
Hash identifier: Nr2/kM3b1IVUGVO+tw64RVqqm58ybWjmMuBW3jt2hHc=
Subject key identifier: DD:CF:C7:EE:37:D0:20:14:90:A0:75:94:44:54:D3:10:54:98:70:54
Authority key identifier: 62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
Certificate issuer: /CN=A915D655/serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Certificate serial: 043B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
Manifest number: 0436
Signing time: Mon 22 Dec 2025 23:20:43 +0000
Manifest this update: Mon 22 Dec 2025 23:20:43 +0000
Manifest next update: Mon 29 Dec 2025 23:20:43 +0000
Files and hashes: 1: Yja2yVcFRCapTOamlDI45v5tH1Y.crl (hash: 8kwIbvqgZaBXKYHlyKUqYaNbiWtIyWfbmod4r+TwFZ4=)
2: 8B626F5487C911EC908CE327C4F9AE02.roa (hash: 4ePFqqTPP+4ZfS7bacR18941px2N5kQ0emROx+NaWmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1083 (0x43b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D655, serialNumber=6236B6C957054426A94CE6A6943238E6FE6D1F56
Validity
Not Before: Dec 22 23:20:43 2025 GMT
Not After : Dec 29 23:20:43 2025 GMT
Subject: CN=6949d24b-5f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:2b:c4:49:fc:01:55:80:23:95:2c:6b:00:
9b:70:6a:c1:7f:ac:54:3c:00:bf:2d:05:81:1c:49:
7a:f0:e1:40:d1:b8:a3:a1:51:4f:cd:1b:e2:29:30:
95:8a:87:bf:e9:42:e5:28:45:3b:78:87:96:74:23:
45:52:28:7c:46:b3:9b:96:69:d7:f3:b9:ba:5c:4a:
1f:5c:0d:eb:ce:0c:92:9a:17:96:9e:c0:c5:0f:56:
d6:29:dc:f7:28:25:b0:7a:a9:a4:5a:c4:e2:76:79:
79:4f:a9:2e:db:14:09:80:be:7a:de:ed:44:8d:21:
02:71:7b:b6:95:2a:0e:e9:2f:8f:1b:f7:95:44:75:
84:5c:e0:79:b1:92:ad:79:88:57:3c:d2:f5:6d:33:
b0:1c:f8:4c:34:c0:a6:63:00:fb:e1:a3:d2:80:0e:
cb:c0:9a:db:fa:34:05:56:17:3c:d1:3e:c7:e2:b4:
0f:ba:4a:73:c1:3d:a6:06:34:df:d6:e2:fb:16:af:
6e:f0:94:ec:3c:9d:0f:5e:89:fd:d6:0d:8f:fd:e1:
0c:b8:bc:13:f4:e0:a0:e2:10:bc:e7:85:f3:1f:e8:
37:6b:74:7c:fb:e3:96:55:b7:6e:75:9c:10:43:23:
c4:22:b4:4a:f4:a7:fa:09:c5:09:7d:90:c5:39:97:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CF:C7:EE:37:D0:20:14:90:A0:75:94:44:54:D3:10:54:98:70:54
X509v3 Authority Key Identifier:
keyid:62:36:B6:C9:57:05:44:26:A9:4C:E6:A6:94:32:38:E6:FE:6D:1F:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yja2yVcFRCapTOamlDI45v5tH1Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D655/E7BAA0BE87C411EC9692811CC4F9AE02/Yja2yVcFRCapTOamlDI45v5tH1Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:dc:69:9f:76:b0:8a:96:29:6f:b0:50:20:b7:3c:67:29:68:
4c:76:46:2f:c9:8c:0a:ec:38:80:0d:b4:c8:28:36:5a:33:10:
6f:6d:1c:03:b5:87:79:51:70:88:f8:6c:7a:18:08:6e:63:a6:
44:08:8b:3b:7f:e5:77:9a:37:61:d4:54:a7:68:3c:88:fb:7e:
7b:d6:ae:dd:59:eb:ce:04:89:77:78:7d:db:24:9e:bd:ae:3c:
2c:4d:84:5a:b9:b4:a0:09:48:e9:78:4b:a1:2f:a0:cd:54:71:
25:17:3b:f2:b8:41:9f:35:04:15:01:40:02:a4:89:be:7e:1b:
e6:99:d5:be:d6:48:e5:75:e9:93:16:c3:8a:53:d2:97:9e:5e:
e9:48:4f:a4:ca:ed:0a:b2:29:0f:e2:53:75:02:6a:3d:52:44:
9f:a0:e1:4b:a9:78:cb:01:5e:58:31:58:ef:09:9b:e4:87:09:
79:cc:0a:c3:c1:72:02:c7:90:65:98:91:82:b5:9c:aa:b5:27:
66:b1:3d:3e:75:19:e3:25:0d:d8:f0:c4:ed:d5:e3:2c:6d:2b:
ab:0e:49:ab:37:23:66:aa:df:36:57:f5:37:fd:dc:13:a6:d9:
43:e5:10:27:e1:02:a6:30:c8:df:4d:66:c8:0a:b3:70:35:c0:
7a:5d:11:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ2NTUxMTAvBgNVBAUTKDYyMzZCNkM5NTcwNTQ0MjZBOTRDRTZBNjk0MzIzOEU2
RkU2RDFGNTYwHhcNMjUxMjIyMjMyMDQzWhcNMjUxMjI5MjMyMDQzWjAYMRYwFAYD
VQQDDA02OTQ5ZDI0Yi01ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwoArxEn8AVWAI5UsawCbcGrBf6xUPAC/LQWBHEl68OFA0bijoVFPzRviKTCV
ioe/6ULlKEU7eIeWdCNFUih8RrOblmnX87m6XEofXA3rzgySmheWnsDFD1bWKdz3
KCWweqmkWsTidnl5T6ku2xQJgL563u1EjSECcXu2lSoO6S+PG/eVRHWEXOB5sZKt
eYhXPNL1bTOwHPhMNMCmYwD74aPSgA7LwJrb+jQFVhc80T7H4rQPukpzwT2mBjTf
1uL7Fq9u8JTsPJ0PXon91g2P/eEMuLwT9OCg4hC854XzH+g3a3R8++OWVbdudZwQ
QyPEIrRK9Kf6CcUJfZDFOZfktwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3Px+43
0CAUkKB1lERU0xBUmHBUMB8GA1UdIwQYMBaAFGI2tslXBUQmqUzmppQyOOb+bR9W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY1NS9FN0JBQTBCRTg3
QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJDYXBUT2FtbERJNDV2NXRI
MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lqYTJ5VmNGUkNhcFRPYW1sREk0NXY1dEgxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDY1NS9FN0JBQTBCRTg3QzQxMUVDOTY5MjgxMUNDNEY5QUUwMi9ZamEyeVZjRlJD
YXBUT2FtbERJNDV2NXRIMVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBS3GmfdrCKlilvsFAgtzxnKWhMdkYvyYwK7DiADbTIKDZaMxBvbRwD
tYd5UXCI+Gx6GAhuY6ZECIs7f+V3mjdh1FSnaDyI+3571q7dWevOBIl3eH3bJJ69
rjwsTYRaubSgCUjpeEuhL6DNVHElFzvyuEGfNQQVAUACpIm+fhvmmdW+1kjldemT
FsOKU9KXnl7pSE+kyu0KsikP4lN1Amo9UkSfoOFLqXjLAV5YMVjvCZvkhwl5zArD
wXICx5BlmJGCtZyqtSdmsT0+dRnjJQ3Y8MTt1eMsbSurDkmrNyNmqt82V/U3/dwT
ptlD5RAn4QKmMMjfTWbICrNwNcB6XRHs
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:03 2025 by rpki-client