This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json)
Hash identifier: /giNHnhYVqa5XHO4EdKId+PZHGK1GmjW0zdujQNdWjs=
Subject key identifier: 1A:01:17:05:73:91:C5:D1:05:04:CD:49:2B:A4:4C:8C:76:77:26:AF
Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
Manifest number: 0110
Signing time: Wed 03 Dec 2025 03:17:49 +0000
Manifest this update: Wed 03 Dec 2025 03:17:49 +0000
Manifest next update: Wed 10 Dec 2025 03:17:49 +0000
Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: HfdZ0+LilUYIBXQmmOt02CJCyaWlNBuNLSTWeHWc9pM=)
2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: //CtK2APwvuKqYfNGso7I/JYlqJyjoNEWh980lWprcA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 03:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA
Validity
Not Before: Dec 3 03:17:49 2025 GMT
Not After : Dec 10 03:17:49 2025 GMT
Subject: CN=692fabdd-e4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:a1:55:61:8c:1b:c7:f7:d5:c5:ed:77:c9:
92:e2:85:0d:d3:40:d5:ef:22:79:01:cb:9b:b7:f5:
f5:77:91:42:58:86:5e:67:c0:e3:d5:2f:3b:40:d4:
e2:9e:45:f8:fc:5d:a2:ca:7e:7e:53:bd:92:e9:3c:
ea:bc:3f:a4:a8:ce:05:28:44:d2:77:7a:82:3c:4d:
ca:b7:aa:25:98:c1:1d:e1:99:59:7a:64:16:44:25:
1a:fc:14:53:98:63:fe:27:a2:51:43:f2:87:1d:ee:
7c:4f:ef:68:0f:6b:ab:aa:77:47:6b:f4:96:6c:86:
7a:0a:0a:57:2a:36:05:e4:30:98:00:28:af:2b:d6:
eb:ee:9e:57:11:d9:eb:9c:f4:d1:3c:15:48:58:83:
37:10:7c:6e:26:82:30:bd:f6:04:3a:11:b5:41:90:
63:54:8e:10:e9:8c:6b:d4:cf:f4:da:ea:a1:13:87:
d6:65:fd:ca:c6:4e:17:bd:cf:d5:23:0f:de:b3:93:
59:12:92:25:44:ea:a0:49:ca:55:2a:59:2e:cd:5f:
9c:18:d0:70:25:5b:f4:f7:0f:8c:68:b0:7b:49:b1:
53:20:b7:f7:95:ca:d4:d0:ff:c1:92:18:07:5f:cd:
60:21:99:d0:57:53:99:13:d9:73:c5:7e:27:8e:49:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:01:17:05:73:91:C5:D1:05:04:CD:49:2B:A4:4C:8C:76:77:26:AF
X509v3 Authority Key Identifier:
keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9c:b9:08:3c:37:5f:98:bf:ac:69:2c:3f:d9:ca:78:64:d8:
38:25:1e:2b:f7:df:08:81:55:dc:ec:9d:22:a9:1f:dd:ad:8f:
c9:57:d5:3f:0b:14:c7:dd:0e:bf:3b:ad:09:6c:41:d6:9e:d5:
89:f9:1e:87:f1:48:e7:73:90:6e:bd:77:0e:ab:1e:58:f8:3a:
99:f1:a5:0b:df:c9:4a:bd:b1:de:17:9c:eb:8f:12:24:f0:e6:
84:9b:c0:cc:36:be:a0:4f:57:a7:f8:54:88:18:a0:3b:52:2a:
b2:17:26:86:6a:3e:08:fe:5d:15:fe:bd:bc:1f:bf:be:f8:49:
4d:de:c4:67:29:ce:8c:d2:09:8c:64:5c:1d:a2:60:fd:4a:8a:
a4:76:93:d8:16:ed:25:e8:d4:bc:c1:72:f1:b3:7a:c8:61:0b:
e3:a0:fb:42:1b:b5:c4:e2:a6:b9:d3:d4:07:66:6f:05:80:96:
02:07:37:02:1a:7c:d3:a1:c4:f6:aa:cb:d0:51:43:4d:19:17:
7b:c1:ad:88:ed:8b:c6:a5:1f:4e:87:3e:f0:ab:7b:29:a2:fe:
2e:f2:fd:af:dc:9a:b9:d3:a6:a2:65:2a:31:af:38:c9:4a:38:
d6:a6:b0:b8:83:66:38:12:42:1f:58:bf:52:f9:e1:6d:4c:e1:
14:a1:b2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 16:22:51 2025 by rpki-client