This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
File: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft (raw, json)
Hash identifier: g7DfscW0gURxsMfWPViWZIGU+1A4wy2hpJIcEJr3tcQ=
Subject key identifier: DE:B2:07:01:A9:AD:7E:3E:A0:1B:AA:47:68:17:9D:C3:4A:12:DD:A5
Authority key identifier: 60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
Certificate issuer: /CN=A917799C/serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Certificate serial: 54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
Manifest number: 53
Signing time: Sun 07 Dec 2025 05:15:38 +0000
Manifest this update: Sun 07 Dec 2025 05:15:38 +0000
Manifest next update: Sun 14 Dec 2025 05:15:38 +0000
Files and hashes: 1: YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl (hash: GZdO5dbanzGMOgj7I+AIL8cZS/5PY2JjzlAjtYTYuSY=)
2: 05939A1C554611F09F737331C4F9AE02.roa (hash: wHvbvusPDO6yRWHfYUtmsZklb3g0w6TjKvsCHWFb4uE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 05:15:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917799C, serialNumber=600250F63836FB4C2F23F487D714BF32F759A5B5
Validity
Not Before: Dec 7 05:15:38 2025 GMT
Not After : Dec 14 05:15:38 2025 GMT
Subject: CN=69350d7a-9ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:ac:a5:db:12:6e:7f:5e:4d:fd:d2:05:94:
6d:7f:a9:e8:13:4b:27:ea:3f:a4:c5:99:f7:b5:e7:
41:8e:64:e1:f3:ff:4a:03:d9:6d:60:a6:ff:fe:66:
f5:8b:33:56:7b:52:1c:82:f0:94:51:07:02:12:3a:
59:bb:55:5b:e6:77:9c:5b:16:e3:fa:ce:ab:4a:1b:
80:9a:f0:63:e2:fc:b2:b2:eb:fe:07:72:f6:fb:b7:
5b:26:17:82:ed:ac:f9:9a:79:62:b1:7f:f5:11:96:
0c:16:e2:72:66:97:c6:25:95:b6:35:f2:13:63:36:
30:1c:23:65:3e:66:6e:a0:d7:b3:9f:c1:0c:56:6a:
b3:f8:97:8b:29:ef:5d:07:b6:22:a7:e1:e4:b4:e8:
44:9a:ef:ef:67:0b:6d:d3:c9:a0:74:a0:d6:2a:d6:
0f:7f:13:51:2b:97:89:b1:f6:cc:b8:3a:18:62:37:
3f:f9:46:a3:9b:69:ab:65:d3:95:95:32:cf:c5:3a:
ec:41:7c:56:29:38:38:db:72:89:d9:40:d1:ec:4c:
fd:16:c5:ee:28:3c:01:3f:ea:f7:88:14:ea:9f:9d:
30:4d:6f:6b:9b:c2:8d:51:93:3d:3a:68:e4:f0:5c:
6f:f0:6f:84:6b:71:3f:cf:03:40:a6:a2:4c:0b:8d:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B2:07:01:A9:AD:7E:3E:A0:1B:AA:47:68:17:9D:C3:4A:12:DD:A5
X509v3 Authority Key Identifier:
keyid:60:02:50:F6:38:36:FB:4C:2F:23:F4:87:D7:14:BF:32:F7:59:A5:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917799C/35EBD8E8554411F09342AC0CC4F9AE02/YAJQ9jg2-0wvI_SH1xS_MvdZpbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3c:86:cf:8d:eb:47:e4:26:14:85:56:37:0d:84:e9:1e:89:
5d:6e:17:92:ce:72:b0:5b:b2:50:f7:e0:46:20:e6:f6:fc:a2:
9f:5d:14:b9:cb:d5:ae:53:71:3b:cf:ae:e3:dc:26:84:5b:22:
ef:b8:f0:45:a9:89:9b:e6:0d:3e:d0:6c:ea:64:75:30:84:d0:
73:2d:72:77:c4:de:52:99:85:96:b0:fb:33:59:a6:5a:c0:a5:
3a:cf:67:89:72:4e:57:3b:be:12:99:9a:c0:9a:f1:a2:e8:b1:
90:27:5c:96:04:98:05:c1:6a:97:df:10:fa:05:d2:b4:f4:0f:
e1:32:85:72:22:1a:04:37:70:18:aa:31:e3:f0:3b:8d:f0:6c:
c1:67:81:d3:ac:f9:02:eb:22:10:b8:56:7c:a3:75:71:95:e1:
e9:6e:ef:5d:09:e5:e3:70:70:6c:48:ff:7c:7b:96:a3:66:77:
02:5a:0c:e3:de:d3:3e:7d:6c:64:c4:5f:91:48:dc:3e:3d:e0:
df:d8:0d:62:d2:54:52:7a:fd:f7:3a:bc:3f:ef:69:61:2f:58:
81:98:1b:00:8c:f2:66:40:0e:b9:c3:0f:3f:be:52:e0:47:eb:
47:d0:55:82:cc:8f:8f:5c:59:7e:29:66:0c:87:fc:88:a0:34:
1c:89:c4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:11:52 2025 by rpki-client