This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
File: YRQatT_Urx2yqGr-fsj-yX1eodU.mft (raw, json)
Hash identifier: 3JwKLBimuY3B66VrhBFVw1R7NK9nHZLDkjNB8OOdD9Q=
Subject key identifier: B8:71:57:D0:D2:E9:90:02:6D:BA:DD:58:F2:B2:56:CE:9D:89:E0:36
Authority key identifier: 61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5
Certificate issuer: /CN=A918DEF0/serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5
Certificate serial: 01E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
Manifest number: 01DB
Signing time: Tue 23 Dec 2025 01:47:40 +0000
Manifest this update: Tue 23 Dec 2025 01:47:40 +0000
Manifest next update: Tue 30 Dec 2025 01:47:40 +0000
Files and hashes: 1: YRQatT_Urx2yqGr-fsj-yX1eodU.crl (hash: ugduWBfF1T0Yg6E2bcetFqGkCHldVUcvLPFXQSw6bqs=)
2: 7F4ED0A0B83011EFA5108619C4F9AE02.roa (hash: fc1mmSSRqzCuGE7h3o2YcW/Wc0vCR2x5Y/Ca8guGROk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl
rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:47:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 481 (0x1e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DEF0, serialNumber=61141AB53FD4AF1DB2A86AFE7EC8FEC97D5EA1D5
Validity
Not Before: Dec 23 01:47:40 2025 GMT
Not After : Dec 30 01:47:40 2025 GMT
Subject: CN=6949f4bc-0830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3a:35:49:13:5a:1c:43:63:dd:59:4c:37:8c:
37:7d:41:dd:40:52:24:2a:74:65:c4:86:6b:f6:2e:
fb:5e:33:a1:6e:02:19:df:e3:04:f9:48:dd:8f:1d:
da:a7:77:e9:20:d6:14:e7:11:5c:81:a5:da:a4:15:
98:3c:de:d5:72:e3:0b:3b:ad:49:07:5d:63:4c:e7:
d3:42:70:b6:40:68:5a:84:07:ee:d9:d4:17:bf:2d:
57:6e:f5:cb:33:48:c3:27:b7:cf:03:ab:b6:88:15:
94:8d:25:d5:90:0e:3a:05:4a:83:fb:e3:02:60:ce:
f4:ea:c0:41:85:d6:da:ab:9e:a1:f6:c9:47:10:db:
8c:5b:fc:2e:a2:78:c4:e2:f5:1b:39:b2:03:ec:4b:
d2:35:3f:f8:0f:78:26:7a:5d:ac:c0:f9:22:45:40:
6b:2e:b8:e7:62:67:c3:a0:b3:0c:86:c1:78:13:66:
08:b4:48:c1:0f:01:08:09:c0:13:4b:c5:40:d3:dc:
7e:fb:db:b9:62:7e:e3:c6:7d:34:a2:1b:e8:01:c9:
4b:0b:12:08:fd:ef:19:a7:17:3c:65:5e:45:8b:63:
c1:6c:53:9b:6e:e0:20:8b:4f:9b:c3:b4:53:bf:28:
17:35:a0:da:f3:eb:99:d5:9f:46:31:23:02:b7:17:
02:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:71:57:D0:D2:E9:90:02:6D:BA:DD:58:F2:B2:56:CE:9D:89:E0:36
X509v3 Authority Key Identifier:
keyid:61:14:1A:B5:3F:D4:AF:1D:B2:A8:6A:FE:7E:C8:FE:C9:7D:5E:A1:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRQatT_Urx2yqGr-fsj-yX1eodU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DEF0/820309C20A5F11EEB4FED265C4F9AE02/YRQatT_Urx2yqGr-fsj-yX1eodU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b4:24:f9:a8:b2:b3:20:99:74:2c:a0:8d:bf:57:b2:9e:b6:
ae:d9:72:c2:29:4e:63:a3:f1:bc:c4:a7:ad:d4:40:5f:c0:b8:
82:43:c1:9e:d6:f0:e6:95:5b:75:2a:dc:76:6b:87:25:0c:42:
04:31:31:71:40:c5:66:85:2c:96:8c:fb:04:d5:5f:5b:2a:7d:
a4:b6:8f:3d:96:e3:26:01:f5:9f:6e:5f:8f:e2:7a:1b:88:bd:
9c:f6:c4:9c:10:e7:2d:e7:70:40:a2:96:d8:e5:04:b5:4c:d5:
ff:54:e8:d0:98:3b:89:15:96:13:db:4a:2c:30:1b:8f:db:f3:
91:8d:6f:57:03:0d:2f:f6:43:b9:dc:63:00:cc:25:ed:c2:ad:
d7:bc:ea:a2:18:c2:50:cb:6f:79:57:cf:99:97:68:be:c1:b0:
4a:a3:f9:61:c2:3e:97:87:0c:96:50:aa:4a:f4:5d:67:34:4c:
98:0f:4b:0b:16:46:61:5d:22:d1:c3:9b:39:8b:aa:a4:86:17:
5c:c4:17:1e:f6:fc:94:ff:fe:96:d9:ed:50:83:9a:13:57:3e:
87:bf:07:19:8d:33:0b:4b:4e:c3:70:38:1f:90:47:82:32:fa:
2b:f0:33:cc:71:21:b3:86:4c:79:ca:6d:a6:67:61:e5:1b:73:
1d:7c:cd:c9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OERFRjAxMTAvBgNVBAUTKDYxMTQxQUI1M0ZENEFGMURCMkE4NkFGRTdFQzhGRUM5
N0Q1RUExRDUwHhcNMjUxMjIzMDE0NzQwWhcNMjUxMjMwMDE0NzQwWjAYMRYwFAYD
VQQDDA02OTQ5ZjRiYy0wODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4jo1SRNaHENj3VlMN4w3fUHdQFIkKnRlxIZr9i77XjOhbgIZ3+ME+Ujdjx3a
p3fpINYU5xFcgaXapBWYPN7VcuMLO61JB11jTOfTQnC2QGhahAfu2dQXvy1XbvXL
M0jDJ7fPA6u2iBWUjSXVkA46BUqD++MCYM706sBBhdbaq56h9slHENuMW/wuonjE
4vUbObID7EvSNT/4D3gmel2swPkiRUBrLrjnYmfDoLMMhsF4E2YItEjBDwEICcAT
S8VA09x++9u5Yn7jxn00ohvoAclLCxII/e8Zpxc8ZV5Fi2PBbFObbuAgi0+bw7RT
vygXNaDa8+uZ1Z9GMSMCtxcCWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhxV9DS
6ZACbbrdWPKyVs6dieA2MB8GA1UdIwQYMBaAFGEUGrU/1K8dsqhq/n7I/sl9XqHV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REVGMC84MjAzMDlDMjBB
NUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4MnlxR3ItZnNqLXlYMWVv
ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lSUWF0VF9VcngyeXFHci1mc2oteVgxZW9kVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
REVGMC84MjAzMDlDMjBBNUYxMUVFQjRGRUQyNjVDNEY5QUUwMi9ZUlFhdFRfVXJ4
MnlxR3ItZnNqLXlYMWVvZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqtCT5qLKzIJl0LKCNv1eynrau2XLCKU5jo/G8xKet1EBfwLiCQ8Ge
1vDmlVt1Ktx2a4clDEIEMTFxQMVmhSyWjPsE1V9bKn2kto89luMmAfWfbl+P4nob
iL2c9sScEOct53BAopbY5QS1TNX/VOjQmDuJFZYT20osMBuP2/ORjW9XAw0v9kO5
3GMAzCXtwq3XvOqiGMJQy295V8+Zl2i+wbBKo/lhwj6XhwyWUKpK9F1nNEyYD0sL
FkZhXSLRw5s5i6qkhhdcxBce9vyU//6W2e1Qg5oTVz6HvwcZjTMLS07DcDgfkEeC
Mvor8DPMcSGzhkx5ym2mZ2HlG3MdfM3J
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:14:43 2025 by rpki-client