This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json)
Hash identifier: Y9Ha9QUtgV4avXWwDcbsLBBfZ3AsR+zBU4paYxOBUXk=
Subject key identifier: D7:58:CA:16:BE:07:94:3C:68:E8:24:10:B1:DC:75:C6:EF:C9:D9:B3
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial: 084C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
Manifest number: 083F
Signing time: Thu 18 Dec 2025 20:19:09 +0000
Manifest this update: Thu 18 Dec 2025 20:19:08 +0000
Manifest next update: Thu 25 Dec 2025 20:19:08 +0000
Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: uJaf2O/9+DjcMvpqDNUR5rKjJRGq3rLsXswFWeod3V8=)
2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: A+8vz2aU+wC552KBg2dFDTbTWJJd1ELKdd2raygWGUA=)
3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Vo3PCsdHmPC7RHzYgOW5sXRasLzQm3wjobK8wMgaD5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2124 (0x84c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Validity
Not Before: Dec 18 20:19:08 2025 GMT
Not After : Dec 25 20:19:08 2025 GMT
Subject: CN=694461bd-a9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:b2:56:d8:4e:95:7a:1f:9d:cc:2c:71:df:
88:7c:21:37:0c:00:ea:89:45:1a:3c:76:46:b8:bc:
6e:26:6b:4a:46:a8:ca:fd:f4:ee:b1:b3:03:85:8c:
4f:5d:4d:dc:9c:5b:2a:a3:64:b3:04:52:c5:a5:f2:
c4:43:eb:62:cb:db:75:a3:f0:50:a6:06:0f:18:49:
71:d4:ab:79:59:f9:07:ac:6d:e1:2f:1f:c2:6e:38:
62:83:ab:8c:f5:d1:d6:ee:13:b2:a6:de:34:11:7b:
5e:1d:58:0c:ab:f1:a6:84:86:f6:2d:1e:91:a9:e4:
8b:b7:7f:09:55:bb:14:bd:9f:30:64:0a:e0:bc:b4:
01:75:fa:c0:33:e0:97:4a:f1:4a:75:75:f3:1b:6f:
dd:22:6b:83:c1:70:ee:0c:af:9a:06:a8:b6:f2:b0:
33:1e:4a:7a:ea:64:a5:0c:41:04:84:13:0d:b1:25:
2f:63:e9:e4:cf:f7:93:56:7e:49:7c:a8:cc:bc:60:
5a:a0:90:d4:5b:35:bd:6c:7d:9e:58:d2:4a:c4:3a:
ae:fd:35:81:af:90:38:d4:ae:c2:f7:7a:b6:59:2d:
61:3a:fa:b5:2b:79:54:20:89:d2:4a:11:6d:94:20:
e7:3c:62:eb:fb:f6:6e:8f:55:f4:5c:0a:7b:7c:f8:
b6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:58:CA:16:BE:07:94:3C:68:E8:24:10:B1:DC:75:C6:EF:C9:D9:B3
X509v3 Authority Key Identifier:
keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:06:41:f1:d3:92:34:cf:d5:1b:40:25:22:99:5b:f7:1c:37:
89:d4:d7:db:d3:77:f7:01:a1:6c:ef:a5:b6:c1:49:b9:e0:b9:
7a:7e:d7:be:bf:75:3d:a9:f0:15:55:aa:eb:64:48:05:31:15:
0a:79:5e:c5:8b:39:08:c3:17:bc:b8:07:41:7c:85:69:fc:76:
d1:54:4b:4d:74:d3:0a:47:b2:35:51:e3:4c:88:a0:28:d2:d6:
0c:74:6a:ac:75:f8:e7:bb:d6:2f:11:91:26:1f:a8:62:ae:8e:
a0:eb:2c:79:41:d2:c4:22:c0:8d:2f:49:3c:5a:55:56:b1:34:
c2:2a:f9:0d:b0:76:84:bc:51:aa:e7:83:b9:86:b1:7e:c0:05:
1a:50:12:ab:a5:c1:9a:f6:21:0a:6c:14:2d:d7:64:36:db:f5:
73:4d:69:29:2c:d2:8c:df:bc:17:9c:44:2e:4e:bd:79:12:cf:
fd:85:a5:ed:17:4a:81:14:93:a7:fb:32:30:3f:11:bd:58:e6:
04:37:33:2a:95:f5:7f:f1:79:2c:31:25:5b:d0:c8:ee:2a:ec:
75:85:e2:9b:09:d4:9c:bc:db:8d:31:b1:3d:82:be:88:d4:c7:
be:11:3a:56:d2:cb:f4:16:8c:86:c8:1a:dd:25:06:26:53:36:
e4:8f:cd:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEzRTYxMTAvBgNVBAUTKEVEOENCQzU0Q0Q4NkYyQzFGOTJERUM2QkM5MDlEQkM2
RkE2MzRDODEwHhcNMjUxMjE4MjAxOTA4WhcNMjUxMjI1MjAxOTA4WjAYMRYwFAYD
VQQDDA02OTQ0NjFiZC1hOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl9eyVthOlXofncwscd+IfCE3DADqiUUaPHZGuLxuJmtKRqjK/fTusbMDhYxP
XU3cnFsqo2SzBFLFpfLEQ+tiy9t1o/BQpgYPGElx1Kt5WfkHrG3hLx/Cbjhig6uM
9dHW7hOypt40EXteHVgMq/GmhIb2LR6RqeSLt38JVbsUvZ8wZArgvLQBdfrAM+CX
SvFKdXXzG2/dImuDwXDuDK+aBqi28rAzHkp66mSlDEEEhBMNsSUvY+nkz/eTVn5J
fKjMvGBaoJDUWzW9bH2eWNJKxDqu/TWBr5A41K7C93q2WS1hOvq1K3lUIInSShFt
lCDnPGLr+/Zuj1X0XAp7fPi2QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNdYyha+
B5Q8aOgkELHcdcbvydmzMB8GA1UdIwQYMBaAFO2MvFTNhvLB+S3sa8kJ28b6Y0yB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTNFNi82NDBENjE4RUYy
QzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhzSDVMZXhyeVFuYnh2cGpU
SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdZeThWTTJHOHNINUxleHJ5UW5ieHZwalRJRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTNFNi82NDBENjE4RUYyQzkxMUVBODZGMTI3MTdDNEY5QUUwMi83WXk4Vk0yRzhz
SDVMZXhyeVFuYnh2cGpUSUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBSBkHx05I0z9UbQCUimVv3HDeJ1Nfb03f3AaFs76W2wUm54Ll6fte+
v3U9qfAVVarrZEgFMRUKeV7FizkIwxe8uAdBfIVp/HbRVEtNdNMKR7I1UeNMiKAo
0tYMdGqsdfjnu9YvEZEmH6hiro6g6yx5QdLEIsCNL0k8WlVWsTTCKvkNsHaEvFGq
54O5hrF+wAUaUBKrpcGa9iEKbBQt12Q22/VzTWkpLNKM37wXnEQuTr15Es/9haXt
F0qBFJOn+zIwPxG9WOYENzMqlfV/8XksMSVb0MjuKux1heKbCdScvNuNMbE9gr6I
1Me+ETpW0sv0FoyGyBrdJQYmUzbkj82m
-----END CERTIFICATE-----
Generated at Fri Dec 19 11:01:38 2025 by rpki-client