This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
File: YRGAfoKKxPmEJpPThhGVLfA9ckc.mft (raw, json)
Hash identifier: wgOpgNSn2Y9afcDnrsxDgGbk3+8QRGE8SvSU0Qfy1ls=
Subject key identifier: B1:7A:0E:A5:92:33:4E:58:5F:C9:5A:55:37:30:BE:14:A0:6C:34:57
Authority key identifier: 61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
Certificate issuer: /CN=A91B5D92/serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
Manifest number: 01BD
Signing time: Wed 17 Dec 2025 02:37:37 +0000
Manifest this update: Wed 17 Dec 2025 02:37:37 +0000
Manifest next update: Wed 24 Dec 2025 02:37:37 +0000
Files and hashes: 1: YRGAfoKKxPmEJpPThhGVLfA9ckc.crl (hash: /vDGoVlY+xZaAGS0sdAEJqz0uUigJhDoca1WdXAIuHA=)
2: 3AFA35E04B2E11EEA07FEE34C4F9AE02.roa (hash: N6Bn0tjkAYOIirhCnX+L9qAa4FcrjkrvnPohqveujZw=)
3: C778D8FA402A11EEAC7DEF72C4F9AE02.roa (hash: V8EYXGGM5ehfMXNVHQoJfhAKwYo57AeE/3ynyZdkMrY=)
4: FBE34DB8538011EFB6264579C4F9AE02.roa (hash: TcFb5btGGuGcCTENXu84bKs3B+lnqciAGdu0W4Z7mP0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 02:37:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D92, serialNumber=6111807E828AC4F9842693D38611952DF03D7247
Validity
Not Before: Dec 17 02:37:37 2025 GMT
Not After : Dec 24 02:37:37 2025 GMT
Subject: CN=69421771-c751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:bb:0c:9b:54:6a:ea:0d:d2:26:53:c5:d6:
1a:5e:a0:a9:3c:7a:1a:f1:0b:8e:03:50:db:e9:f8:
ee:40:18:0d:67:44:a1:30:49:1d:71:6b:35:c6:35:
1b:6b:54:92:cc:87:49:e3:b8:29:88:e4:cf:8a:6a:
23:b7:d6:18:66:59:0e:b5:15:1b:06:db:cb:c6:13:
f7:99:1e:0d:a1:ad:f3:7a:98:82:cf:e7:90:33:db:
23:56:ca:85:20:9b:ec:27:14:af:56:73:d0:c3:30:
a1:1e:a8:4c:08:9c:62:4e:63:6d:20:a2:fd:c2:0b:
04:22:ce:ce:e4:17:0a:23:46:e2:a1:e9:f5:f5:31:
0e:67:d4:dc:cb:8b:90:1e:3a:28:35:a2:a3:bc:5c:
3f:3c:af:15:7d:01:64:32:28:ac:2f:d5:9e:f6:ff:
88:79:37:a3:b7:cf:60:52:4a:e1:57:87:61:15:00:
19:e3:4a:75:60:59:76:e7:8a:4c:aa:53:d9:48:66:
9e:5a:3e:8d:94:46:a4:4c:15:32:90:2b:74:e4:c7:
fd:ea:a5:ba:e0:34:97:05:cc:f6:17:ed:79:eb:78:
0f:fd:bd:97:34:8a:67:b8:fe:e4:35:d3:5d:38:7d:
89:8c:a6:fb:fc:98:fe:12:6d:5b:3d:41:b5:0d:47:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7A:0E:A5:92:33:4E:58:5F:C9:5A:55:37:30:BE:14:A0:6C:34:57
X509v3 Authority Key Identifier:
keyid:61:11:80:7E:82:8A:C4:F9:84:26:93:D3:86:11:95:2D:F0:3D:72:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRGAfoKKxPmEJpPThhGVLfA9ckc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D92/357798B0402A11EEA7161872C4F9AE02/YRGAfoKKxPmEJpPThhGVLfA9ckc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:21:cf:0f:30:1d:ec:0c:37:59:1a:1c:d3:44:17:67:88:bf:
04:89:43:9e:06:87:12:e5:a3:bf:1c:a0:f9:19:25:6f:34:7a:
20:cf:cf:3c:36:91:79:54:02:da:8c:53:ba:bb:a8:2c:28:54:
bd:df:e1:19:a8:c8:a4:b9:89:38:c9:46:b9:69:09:db:dd:1a:
55:31:2d:ed:7e:c4:c3:e5:95:6b:2a:39:d9:3b:fc:0a:49:c8:
1d:ad:67:20:f9:3e:26:ef:cc:52:a7:fd:58:ac:66:14:70:aa:
b7:1e:4f:1e:81:b3:08:4e:d0:9e:ac:c8:58:2b:79:1e:5a:f0:
d2:24:8b:04:83:41:6c:ec:79:2f:2d:c9:b2:57:88:6d:e6:e7:
d1:41:bb:02:f1:5f:1d:27:a1:79:ce:94:ea:1b:7f:35:5b:1e:
f9:97:4d:2d:e3:5c:db:26:ea:9e:46:92:4f:10:20:87:41:2b:
69:ff:64:a5:d6:5d:ff:9f:9b:a1:fd:96:54:75:b7:2a:c6:af:
d6:6a:16:f9:42:36:7f:7e:c9:dc:65:a1:c4:6a:5a:ce:30:de:
4f:cb:0f:b9:54:64:28:bd:ad:9e:d5:af:e3:42:3e:25:10:1e:
0b:68:8b:e6:33:7d:5f:8a:2c:57:44:61:55:40:fc:2c:11:0b:
22:d1:fd:db
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEOTIxMTAvBgNVBAUTKDYxMTE4MDdFODI4QUM0Rjk4NDI2OTNEMzg2MTE5NTJE
RjAzRDcyNDcwHhcNMjUxMjE3MDIzNzM3WhcNMjUxMjI0MDIzNzM3WjAYMRYwFAYD
VQQDDA02OTQyMTc3MS1jNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApRa7DJtUauoN0iZTxdYaXqCpPHoa8QuOA1Db6fjuQBgNZ0ShMEkdcWs1xjUb
a1SSzIdJ47gpiOTPimojt9YYZlkOtRUbBtvLxhP3mR4Noa3zepiCz+eQM9sjVsqF
IJvsJxSvVnPQwzChHqhMCJxiTmNtIKL9wgsEIs7O5BcKI0bioen19TEOZ9Tcy4uQ
HjooNaKjvFw/PK8VfQFkMiisL9We9v+IeTejt89gUkrhV4dhFQAZ40p1YFl254pM
qlPZSGaeWj6NlEakTBUykCt05Mf96qW64DSXBcz2F+1563gP/b2XNIpnuP7kNdNd
OH2JjKb7/Jj+Em1bPUG1DUfGoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLF6DqWS
M05YX8laVTcwvhSgbDRXMB8GA1UdIwQYMBaAFGERgH6CisT5hCaT04YRlS3wPXJH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ5Mi8zNTc3OThCMDQw
MkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQbUVKcFBUaGhHVkxmQTlj
a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lSR0Fmb0tLeFBtRUpwUFRoaEdWTGZBOWNrYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NUQ5Mi8zNTc3OThCMDQwMkExMUVFQTcxNjE4NzJDNEY5QUUwMi9ZUkdBZm9LS3hQ
bUVKcFBUaGhHVkxmQTlja2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBtIc8PMB3sDDdZGhzTRBdniL8EiUOeBocS5aO/HKD5GSVvNHogz888
NpF5VALajFO6u6gsKFS93+EZqMikuYk4yUa5aQnb3RpVMS3tfsTD5ZVrKjnZO/wK
ScgdrWcg+T4m78xSp/1YrGYUcKq3Hk8egbMITtCerMhYK3keWvDSJIsEg0Fs7Hkv
LcmyV4ht5ufRQbsC8V8dJ6F5zpTqG381Wx75l00t41zbJuqeRpJPECCHQStp/2Sl
1l3/n5uh/ZZUdbcqxq/Wahb5QjZ/fsncZaHEalrOMN5Pyw+5VGQova2e1a/jQj4l
EB4LaIvmM31fiixXRGFVQPwsEQsi0f3b
-----END CERTIFICATE-----
Generated at Wed Dec 17 06:15:09 2025 by rpki-client