This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json)
Hash identifier: D/plSmoGWm96m0qC6vyWdIbcpC0khxKMta64RmgHf1Y=
Subject key identifier: 95:22:97:A5:49:5F:B3:D9:DA:0A:C8:E4:BC:C3:6F:18:58:C9:D5:10
Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Certificate serial: 01A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
Manifest number: 01A0
Signing time: Tue 09 Dec 2025 01:31:52 +0000
Manifest this update: Tue 09 Dec 2025 01:31:52 +0000
Manifest next update: Tue 16 Dec 2025 01:31:52 +0000
Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: Vhq019EHa6ncENZQlKovxVZh2pPWRL/tQvO2BGyvpzc=)
2: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: 9h3davUQ9pNDA3U7SYojAK+YEhrIBkhT56ukToleizY=)
3: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: DgTHE1vd+LuLJ/6bYp2I4wVbGI057+J0uGiHNmi5Ok4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Dec 2025 01:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Validity
Not Before: Dec 9 01:31:52 2025 GMT
Not After : Dec 16 01:31:52 2025 GMT
Subject: CN=69377c08-834c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:b0:00:63:6f:87:03:dc:45:35:9a:6a:f7:
2f:69:01:b2:bd:06:50:ea:75:73:7c:9a:40:a1:60:
e7:d1:88:04:d6:03:31:33:c0:40:dc:14:5f:0b:55:
55:ce:4c:27:24:38:e5:c2:84:58:66:7e:19:54:c8:
f9:ef:45:a3:aa:87:81:58:1d:ff:2a:b9:b0:ef:eb:
38:38:4b:b1:e3:89:bf:1e:5c:42:38:26:53:40:4d:
ed:6d:79:95:69:59:fa:92:1d:2f:4c:2f:d9:5c:1c:
2a:1d:5c:0f:63:af:a7:6d:a9:27:43:ef:30:83:5c:
8c:50:83:7d:e3:12:26:62:05:0c:3c:e3:32:be:e6:
d7:c7:90:10:60:50:09:3b:97:67:70:36:8b:f6:8d:
58:6b:0d:43:7e:b4:5e:6e:e8:bb:8d:5c:84:cf:ac:
fb:ef:9d:3e:a0:cf:e0:d4:13:ed:c1:2a:13:a3:ca:
6f:8d:23:42:4b:03:0f:9c:26:83:ef:6b:9a:a3:b3:
4c:59:51:1c:30:93:5c:ec:11:d9:90:02:44:8d:a5:
9e:c0:24:e7:a6:37:02:d7:85:2b:25:10:6b:69:34:
ca:99:c2:19:ae:f5:6c:9a:e7:47:15:89:60:84:e7:
a7:2d:ca:b1:3e:58:6e:f8:9d:6a:85:a2:de:ab:a5:
6d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:22:97:A5:49:5F:B3:D9:DA:0A:C8:E4:BC:C3:6F:18:58:C9:D5:10
X509v3 Authority Key Identifier:
keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d6:74:55:47:b8:3e:3e:51:68:6e:93:fc:c3:3c:44:51:5a:fc:
7e:a8:94:e2:f6:a0:ca:b8:96:6e:be:3e:89:15:f1:a0:eb:e5:
8a:44:df:b6:6b:93:88:76:7a:37:27:36:57:88:19:e5:f1:65:
52:05:0d:d2:ce:7a:dc:bc:a7:a9:ec:5d:5e:c7:fa:77:d4:0a:
76:a3:47:a4:12:6d:ea:28:94:2e:d9:e1:93:75:a0:97:34:9a:
57:c8:3f:d3:04:dc:e5:a1:5d:a1:60:62:cd:3f:0c:98:37:bd:
10:82:00:4d:42:87:d0:30:dd:13:21:2c:bb:8b:97:01:12:53:
e7:e3:24:92:59:7b:c6:c0:6c:98:d7:41:ac:aa:85:f8:25:19:
73:15:bd:37:7b:84:85:6d:72:b3:b8:2a:49:3d:9f:1b:55:07:
0b:99:36:d0:bd:7a:be:10:84:d1:92:5f:71:fa:fa:9e:96:ce:
fd:c4:37:a2:10:29:ba:82:f8:b3:58:6e:49:d5:82:03:ba:85:
ad:c0:2c:79:ba:a9:e4:bb:ca:37:ab:d8:83:6b:ee:77:c1:43:
40:cb:c8:be:b7:22:53:f1:d2:de:20:87:0d:0e:72:10:a9:d8:
25:d6:d4:f2:9b:f5:38:8b:93:e3:92:13:35:fc:13:9c:cc:94:
05:29:cc:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0U1QTYxMTAvBgNVBAUTKDYyRERDMjg1REE4QjNFMjA5RUIwMEVBQTM2NzE4NDVE
QUE2Q0YyODYwHhcNMjUxMjA5MDEzMTUyWhcNMjUxMjE2MDEzMTUyWjAYMRYwFAYD
VQQDEw02OTM3N2MwOC04MzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz8CwAGNvhwPcRTWaavcvaQGyvQZQ6nVzfJpAoWDn0YgE1gMxM8BA3BRfC1VV
zkwnJDjlwoRYZn4ZVMj570WjqoeBWB3/Krmw7+s4OEux44m/HlxCOCZTQE3tbXmV
aVn6kh0vTC/ZXBwqHVwPY6+nbaknQ+8wg1yMUIN94xImYgUMPOMyvubXx5AQYFAJ
O5dncDaL9o1Yaw1DfrRebui7jVyEz6z7750+oM/g1BPtwSoTo8pvjSNCSwMPnCaD
72uao7NMWVEcMJNc7BHZkAJEjaWewCTnpjcC14UrJRBraTTKmcIZrvVsmudHFYlg
hOenLcqxPlhu+J1qhaLeq6VtrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUil6VJ
X7PZ2grI5LzDbxhYydUQMB8GA1UdIwQYMBaAFGLdwoXaiz4gnrAOqjZxhF2qbPKG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTVBNi9BQUIzM0U0QzVC
M0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBpQ2VzQTZxTm5HRVhhcHM4
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1l0M0NoZHFMUGlDZXNBNnFObkdFWGFwczhvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTVBNi9BQUIzM0U0QzVCM0YxMUVFOEYxRDNENkVDNEY5QUUwMi9ZdDNDaGRxTFBp
Q2VzQTZxTm5HRVhhcHM4b1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDWdFVHuD4+UWhuk/zDPERRWvx+qJTi9qDKuJZuvj6JFfGg6+WKRN+2
a5OIdno3JzZXiBnl8WVSBQ3SznrcvKep7F1ex/p31Ap2o0ekEm3qKJQu2eGTdaCX
NJpXyD/TBNzloV2hYGLNPwyYN70QggBNQofQMN0TISy7i5cBElPn4ySSWXvGwGyY
10GsqoX4JRlzFb03e4SFbXKzuCpJPZ8bVQcLmTbQvXq+EITRkl9x+vqels79xDei
ECm6gvizWG5J1YIDuoWtwCx5uqnku8o3q9iDa+53wUNAy8i+tyJT8dLeIIcNDnIQ
qdgl1tTym/U4i5PjkhM1/BOczJQFKcwh
-----END CERTIFICATE-----
Generated at Thu Dec 11 20:01:51 2025 by rpki-client