This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier: 7EZaCbvomBsaUpDxed/z/htn3gm22+FzBQn2HsyFEhA=
Subject key identifier: BD:F5:DD:94:01:A0:2A:D5:E4:A3:6B:49:93:B0:CA:39:47:E0:AA:14
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number: C6
Signing time: Tue 09 Dec 2025 04:09:10 +0000
Manifest this update: Tue 09 Dec 2025 04:09:10 +0000
Manifest next update: Tue 16 Dec 2025 04:09:10 +0000
Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: LQI3EP+ddlhB/5ptBBMdrJ7wopmzMclKHcuBtrSgfmM=)
2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: eDrkrHM6e7G8MkefF8uO0ebeRL2ZiilrSCVyjl1v/78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 04:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Validity
Not Before: Dec 9 04:09:10 2025 GMT
Not After : Dec 16 04:09:10 2025 GMT
Subject: CN=6937a0e6-b65e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:27:33:af:70:6e:31:e1:35:50:49:ba:c0:bd:
e3:19:de:5c:59:23:a0:21:09:c9:b0:d4:09:1e:3d:
88:f3:c1:ec:70:25:17:c6:79:95:63:6f:3f:17:6e:
53:d7:e5:b4:62:4c:21:70:7d:3a:23:2e:41:7a:a2:
97:54:78:5e:b3:38:3d:81:0e:bc:2c:1f:8a:5c:3f:
19:41:d0:ad:73:5e:32:da:eb:8e:ce:eb:ac:5b:ae:
79:e8:62:a0:b0:66:45:04:3d:b5:87:66:87:cc:27:
03:42:8e:fe:f5:ee:46:09:d7:36:6f:2f:7b:05:2c:
2d:8a:4e:36:6e:49:e8:43:12:70:f9:a2:52:da:4b:
61:78:32:7f:66:f0:5d:3f:7d:a0:59:e0:6c:a5:f8:
3f:fa:b3:49:03:ab:48:17:c4:0e:7e:5a:7d:b1:17:
32:cd:da:59:ae:e7:56:a6:84:39:2d:8a:15:43:59:
b3:73:fb:dc:b4:5b:fe:8c:9e:88:33:62:8c:0a:27:
7e:ac:13:a4:31:22:67:4d:32:e4:39:26:92:3b:8a:
7b:cc:98:cb:14:06:ae:87:0f:de:d7:38:4c:71:47:
4f:21:c0:12:e2:75:d7:9d:5a:4c:15:41:64:0b:ef:
f1:a9:37:38:bb:e3:2a:8e:8d:29:8f:67:3f:c7:08:
c2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F5:DD:94:01:A0:2A:D5:E4:A3:6B:49:93:B0:CA:39:47:E0:AA:14
X509v3 Authority Key Identifier:
keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cd:f7:d1:4e:b5:b7:2a:ca:12:42:87:c2:75:b5:22:1b:36:
37:35:87:39:fb:42:11:4c:cd:71:3f:14:78:a7:65:a6:ea:09:
33:e5:ad:18:d8:be:46:0a:3f:40:51:86:07:00:e0:94:bb:8a:
4b:d8:e0:9f:e3:b0:f7:87:be:2b:9e:d3:76:20:11:0e:15:da:
9d:15:a5:dc:ec:11:35:58:2a:66:3f:4b:36:c0:8b:88:60:cc:
82:9f:28:2d:55:e9:e0:6a:ea:29:6c:68:a8:26:8a:22:3d:d7:
97:0f:f2:59:6a:39:5b:72:d6:4a:ca:0e:fe:f5:e8:85:2f:f0:
9b:6c:cf:50:e9:30:01:48:9e:e7:24:06:4a:d5:90:ce:e3:0a:
72:66:14:9c:bd:b0:56:19:f3:77:40:40:34:52:d5:d6:ec:62:
c6:eb:9a:9a:b8:80:ac:78:00:31:2b:7a:91:f4:dc:eb:9a:05:
64:d9:46:5e:99:f7:51:e7:4e:61:49:b6:64:d3:f0:d2:48:93:
72:3b:e8:7c:a8:02:be:09:49:d8:b6:5b:2e:8e:fa:dc:6b:8e:
4d:47:99:af:69:0d:25:26:39:9a:85:d8:40:59:36:34:d9:c5:
b8:a2:36:fb:f7:8e:48:7e:df:67:bc:da:3a:ff:5f:88:20:77:
62:12:d3:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg1RTkxMTAvBgNVBAUTKDYyNEI5NkUxRDY2NUVENzhFNzhERkFGNkMyMjAxOTEw
NzNEQjY2Q0MwHhcNMjUxMjA5MDQwOTEwWhcNMjUxMjE2MDQwOTEwWjAYMRYwFAYD
VQQDEw02OTM3YTBlNi1iNjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsSczr3BuMeE1UEm6wL3jGd5cWSOgIQnJsNQJHj2I88HscCUXxnmVY28/F25T
1+W0YkwhcH06Iy5BeqKXVHheszg9gQ68LB+KXD8ZQdCtc14y2uuOzuusW6556GKg
sGZFBD21h2aHzCcDQo7+9e5GCdc2by97BSwtik42bknoQxJw+aJS2ktheDJ/ZvBd
P32gWeBspfg/+rNJA6tIF8QOflp9sRcyzdpZrudWpoQ5LYoVQ1mzc/vctFv+jJ6I
M2KMCid+rBOkMSJnTTLkOSaSO4p7zJjLFAauhw/e1zhMcUdPIcAS4nXXnVpMFUFk
C+/xqTc4u+Mqjo0pj2c/xwjCtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL313ZQB
oCrV5KNrSZOwyjlH4KoUMB8GA1UdIwQYMBaAFGJLluHWZe1454369sIgGRBz22bM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODVFOS9DMTEyRjU1Q0Qx
NzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdYam5qZnIyd2lBWkVIUGJa
c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1lrdVc0ZFpsN1hqbmpmcjJ3aUFaRUhQYlpzdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODVFOS9DMTEyRjU1Q0QxNzYxMUVGOTVDNURFNUFDNEY5QUUwMi9Za3VXNGRabDdY
am5qZnIyd2lBWkVIUGJac3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfzffRTrW3KsoSQofCdbUiGzY3NYc5+0IRTM1xPxR4p2Wm6gkz5a0Y
2L5GCj9AUYYHAOCUu4pL2OCf47D3h74rntN2IBEOFdqdFaXc7BE1WCpmP0s2wIuI
YMyCnygtVengauopbGioJooiPdeXD/JZajlbctZKyg7+9eiFL/CbbM9Q6TABSJ7n
JAZK1ZDO4wpyZhScvbBWGfN3QEA0UtXW7GLG65qauICseAAxK3qR9NzrmgVk2UZe
mfdR505hSbZk0/DSSJNyO+h8qAK+CUnYtlsujvrca45NR5mvaQ0lJjmahdhAWTY0
2cW4ojb7945Ift9nvNo6/1+IIHdiEtMP
-----END CERTIFICATE-----
Generated at Wed Dec 10 18:49:44 2025 by rpki-client