This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
File: yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft (raw, json)
Hash identifier: iVDbkYz1Qup2vtOrmLncjwWV6hHPq2o+lbz6NR5akmU=
Subject key identifier: E5:00:2C:3C:17:B0:B1:5D:40:B0:3A:EA:D7:1E:8F:0A:18:2E:63:2C
Authority key identifier: C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
Certificate issuer: /CN=A91B3558/serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Certificate serial: 10E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
Manifest number: 10CB
Signing time: Wed 31 Dec 2025 17:04:44 +0000
Manifest this update: Wed 31 Dec 2025 17:04:44 +0000
Manifest next update: Wed 07 Jan 2026 17:04:44 +0000
Files and hashes: 1: yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl (hash: zGWrJQrm1o38dUGo74zOJe0NG8ch0VVtuQKCVi307Ik=)
2: 9305EF46716511EFAA44E47BC4F9AE02.roa (hash: fEVsLbsqwk43zT4i9cB0QOn6Yu/KoGDrIvPTQDfkam8=)
3: B9E0D3EA716711EFBF91272AC4F9AE02.roa (hash: D2fBQ+WzSpKBrrM3Q6Z8cohOSpLekw4Ya8dTg5S7nEc=)
4: BAE1D7A8716711EFBF91272AC4F9AE02.roa (hash: y8nzjZGMQib7WT4yCqeNAgHbrhJTL2UqXsshegz4sgE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Jan 2026 17:04:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4320 (0x10e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B3558, serialNumber=C8909254F69666D585E310ACD8DFF2B1FB9A5F2A
Validity
Not Before: Dec 31 17:04:44 2025 GMT
Not After : Jan 7 17:04:44 2026 GMT
Subject: CN=695557ac-81ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:d1:1b:e5:c5:19:6a:7d:0c:e6:e7:fc:92:
3f:ea:af:c3:11:7f:12:f1:b5:a9:80:bb:5f:88:44:
56:ba:cf:55:b0:ac:5e:b4:65:66:c8:0c:76:1b:b2:
fc:09:bc:02:15:af:8f:b2:e5:8c:df:9b:45:9b:1f:
cb:8e:ce:8f:b5:2a:df:b2:be:18:42:d0:72:89:a0:
f6:c2:a7:34:13:b4:3c:a5:36:b8:9a:06:ad:68:9f:
70:2a:4a:93:ad:c0:88:1c:d5:b9:00:aa:50:f0:87:
c8:ea:79:01:2b:e1:97:cd:5c:b7:b5:f2:a6:15:50:
5f:d6:9f:ec:8b:db:ea:56:34:d5:30:cc:12:e1:cf:
9b:c5:5a:65:35:65:03:44:52:e8:12:a4:da:00:31:
2d:7b:7f:38:f1:ab:7d:04:0a:d2:56:3d:7f:82:19:
8c:be:b0:99:35:9c:aa:23:e9:3b:06:f6:39:83:e7:
5e:6a:4d:64:42:c5:af:6b:7a:18:e7:bf:d3:93:70:
f2:e6:c2:7e:ff:13:20:4e:e9:e5:0a:33:42:c2:28:
a7:d7:d4:b7:82:7e:d3:b1:37:eb:02:55:4f:de:9f:
56:85:25:23:19:54:38:be:2a:cd:26:b7:56:5e:a6:
7f:26:61:37:53:4c:84:49:a5:2e:02:35:5a:49:c4:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:00:2C:3C:17:B0:B1:5D:40:B0:3A:EA:D7:1E:8F:0A:18:2E:63:2C
X509v3 Authority Key Identifier:
keyid:C8:90:92:54:F6:96:66:D5:85:E3:10:AC:D8:DF:F2:B1:FB:9A:5F:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJCSVPaWZtWF4xCs2N_ysfuaXyo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3558/0F21214E390511E99A330233C4F9AE02/yJCSVPaWZtWF4xCs2N_ysfuaXyo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:b2:ce:8f:3b:7b:c1:e2:5b:60:23:57:08:50:80:de:34:7d:
0b:e7:2e:b0:77:5f:16:98:6e:79:f1:3a:30:58:bc:4c:4c:27:
ec:7e:77:da:80:2f:62:5c:e0:02:4b:73:88:1f:4e:d1:ec:63:
08:db:70:67:3a:97:a1:aa:21:be:3a:3c:86:71:ac:27:8e:b1:
79:53:74:b1:b5:c8:33:66:71:77:2b:68:6f:90:3e:f5:34:51:
17:ca:b2:1a:2d:4b:a1:f0:5f:5f:82:c0:27:9b:2d:8d:4a:47:
18:bf:41:a3:f5:3a:f6:ac:bc:ed:17:1a:77:f0:4b:ba:39:67:
52:bb:2b:21:c6:4f:b7:c4:0f:c8:a4:13:36:3e:9f:8d:7d:4c:
77:e7:31:fb:3b:bb:b0:53:79:d9:2d:2e:ea:09:1f:d8:d6:ed:
7c:8f:8a:ee:5d:2c:55:96:90:68:eb:9c:b4:ce:24:de:9e:ca:
5c:33:6c:b3:43:31:de:56:72:bb:e2:bd:cd:4b:88:06:28:01:
a4:3c:94:09:c6:d8:04:fa:cf:b8:2d:67:22:02:37:b7:e8:55:
e6:99:b3:78:44:ba:ec:a1:11:52:49:27:2c:e7:b4:c5:2b:97:
ab:e8:b2:14:42:25:ca:7a:dd:d9:85:ca:5a:35:c4:8b:fa:8e:
22:b7:ee:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM1NTgxMTAvBgNVBAUTKEM4OTA5MjU0RjY5NjY2RDU4NUUzMTBBQ0Q4REZGMkIx
RkI5QTVGMkEwHhcNMjUxMjMxMTcwNDQ0WhcNMjYwMTA3MTcwNDQ0WjAYMRYwFAYD
VQQDDA02OTU1NTdhYy04MWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxvfRG+XFGWp9DObn/JI/6q/DEX8S8bWpgLtfiERWus9VsKxetGVmyAx2G7L8
CbwCFa+PsuWM35tFmx/Ljs6PtSrfsr4YQtByiaD2wqc0E7Q8pTa4mgataJ9wKkqT
rcCIHNW5AKpQ8IfI6nkBK+GXzVy3tfKmFVBf1p/si9vqVjTVMMwS4c+bxVplNWUD
RFLoEqTaADEte3848at9BArSVj1/ghmMvrCZNZyqI+k7BvY5g+deak1kQsWva3oY
57/Tk3Dy5sJ+/xMgTunlCjNCwiin19S3gn7TsTfrAlVP3p9WhSUjGVQ4virNJrdW
XqZ/JmE3U0yESaUuAjVaScS9XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUALDwX
sLFdQLA66tcejwoYLmMsMB8GA1UdIwQYMBaAFMiQklT2lmbVheMQrNjf8rH7ml8q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzU1OC8wRjIxMjE0RTM5
MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0V0Y0eENzMk5feXNmdWFY
eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lKQ1NWUGFXWnRXRjR4Q3MyTl95c2Z1YVh5by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzU1OC8wRjIxMjE0RTM5MDUxMUU5OUEzMzAyMzNDNEY5QUUwMi95SkNTVlBhV1p0
V0Y0eENzMk5feXNmdWFYeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQss6PO3vB4ltgI1cIUIDeNH0L5y6wd18WmG558TowWLxMTCfsfnfa
gC9iXOACS3OIH07R7GMI23BnOpehqiG+OjyGcawnjrF5U3SxtcgzZnF3K2hvkD71
NFEXyrIaLUuh8F9fgsAnmy2NSkcYv0Gj9Tr2rLztFxp38Eu6OWdSuyshxk+3xA/I
pBM2Pp+NfUx35zH7O7uwU3nZLS7qCR/Y1u18j4ruXSxVlpBo65y0ziTenspcM2yz
QzHeVnK74r3NS4gGKAGkPJQJxtgE+s+4LWciAje36FXmmbN4RLrsoRFSSScs57TF
K5er6LIUQiXKet3ZhcpaNcSL+o4it+6Y
-----END CERTIFICATE-----
Generated at Fri Jan 2 11:21:11 2026 by rpki-client