This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
File: YbChG9lEvNqGW7mx-_fuBtVzvXE.mft (raw, json)
Hash identifier: E433oHF9rk2WMH09NhsVcZ5UVwW2F40nEiuyhdfE2s8=
Subject key identifier: E9:D8:31:A4:15:F5:D9:BE:27:37:6B:85:B4:3F:77:E3:0D:3C:16:CE
Authority key identifier: 61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
Certificate issuer: /CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71
Certificate serial: 0631
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
Manifest number: 062C
Signing time: Sat 06 Dec 2025 21:38:07 +0000
Manifest this update: Sat 06 Dec 2025 21:38:07 +0000
Manifest next update: Sat 13 Dec 2025 21:38:07 +0000
Files and hashes: 1: YbChG9lEvNqGW7mx-_fuBtVzvXE.crl (hash: DC6DM+d5h7rvGi5JMkTuFRKB/ciA/XNkRtfSvqtG2S8=)
2: 6F706208BE0F11EB90239C1AC4F9AE02.roa (hash: aJNEKMighzJgRijL/uKI8yCdGKsKV/KJafHUF4cH4Rw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl
rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127656, serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71
Validity
Not Before: Dec 6 21:38:07 2025 GMT
Not After : Dec 13 21:38:07 2025 GMT
Subject: CN=6934a23f-6a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:76:b0:30:c0:14:ea:6a:cc:a4:0d:f6:a6:
28:f5:79:02:b7:35:98:63:1d:d5:71:0e:8f:7e:ee:
3a:98:e6:32:36:58:7c:a9:64:4a:e6:3d:71:8d:f3:
3b:1e:5c:74:4b:ae:e1:23:a3:9e:92:a3:b9:87:f5:
68:e7:1a:00:66:16:26:61:d0:ea:d4:47:55:b6:bf:
9b:1f:00:a7:1d:66:8c:3f:73:54:63:d5:40:5a:e8:
5b:25:99:28:0b:27:22:b1:96:d7:fa:6a:cf:70:d2:
30:8d:cb:52:26:04:31:9f:6f:09:76:1b:65:c4:16:
7f:1f:f1:03:d9:03:27:50:ff:dd:44:6f:4b:37:b7:
84:ae:2c:7a:37:98:14:a7:83:b9:48:59:e8:c5:36:
6d:81:7f:ec:7e:44:6c:32:1a:24:e7:11:c6:83:ad:
c4:78:ef:aa:56:e2:75:bf:c0:2c:26:3e:d6:87:d9:
35:40:c7:9a:98:97:44:f1:ef:51:81:3f:00:7b:56:
b0:6c:5c:b9:64:b8:b9:b3:a0:87:d2:a6:28:c0:92:
8a:4d:0f:7d:86:49:0a:60:54:36:b2:e4:eb:52:1c:
f6:38:89:78:f1:ed:57:fa:c8:fa:77:d0:b3:c9:c9:
7c:b4:6c:c4:f0:33:29:2d:dd:f0:62:f6:58:3e:88:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D8:31:A4:15:F5:D9:BE:27:37:6B:85:B4:3F:77:E3:0D:3C:16:CE
X509v3 Authority Key Identifier:
keyid:61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:41:08:2e:20:1c:af:a8:1c:d3:e4:66:a6:ac:7a:8a:5c:73:
df:17:ac:63:b2:47:0a:58:64:77:0b:be:5d:15:37:04:0e:f3:
9c:e5:1c:9c:e7:14:4b:e4:31:73:12:db:47:3d:cd:68:27:9d:
29:0d:5e:47:d6:da:df:bc:21:e1:cd:06:17:8f:b8:d3:f8:9a:
81:46:87:26:2b:a7:15:35:82:e5:67:81:d9:df:0e:eb:c5:b1:
3d:8e:24:df:d2:79:fb:3a:fc:3d:c0:29:b4:fa:17:87:35:8c:
01:4e:05:c9:77:2f:fb:4d:f3:53:21:3d:14:fb:16:e8:ec:59:
3b:79:a8:76:fe:e8:0d:f1:f5:fc:6f:48:5f:e6:6c:44:bb:3a:
c9:2d:0b:4b:cf:e4:ef:d4:af:e2:05:a2:6a:64:79:cc:bb:f7:
71:64:e6:37:46:6d:f4:33:37:0e:f8:da:55:ff:a0:aa:81:d0:
d4:2a:e7:e4:09:e7:2d:7d:ba:d3:e6:40:03:03:65:43:41:b5:
90:6a:69:c7:a5:45:6e:ad:8d:ca:90:85:be:a2:07:1b:09:cc:
5c:bf:94:e0:10:68:1f:75:92:b1:a0:f6:ff:ff:29:4f:06:3f:
0f:58:bc:ea:70:91:d4:89:28:51:7c:da:55:07:a1:72:c9:ac:
ab:04:33:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc2NTYxMTAvBgNVBAUTKDYxQjBBMTFCRDk0NEJDREE4NjVCQjlCMUZCRjdFRTA2
RDU3M0JENzEwHhcNMjUxMjA2MjEzODA3WhcNMjUxMjEzMjEzODA3WjAYMRYwFAYD
VQQDEw02OTM0YTIzZi02YTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1RJ2sDDAFOpqzKQN9qYo9XkCtzWYYx3VcQ6Pfu46mOYyNlh8qWRK5j1xjfM7
Hlx0S67hI6OekqO5h/Vo5xoAZhYmYdDq1EdVtr+bHwCnHWaMP3NUY9VAWuhbJZko
CycisZbX+mrPcNIwjctSJgQxn28JdhtlxBZ/H/ED2QMnUP/dRG9LN7eErix6N5gU
p4O5SFnoxTZtgX/sfkRsMhok5xHGg63EeO+qVuJ1v8AsJj7Wh9k1QMeamJdE8e9R
gT8Ae1awbFy5ZLi5s6CH0qYowJKKTQ99hkkKYFQ2suTrUhz2OIl48e1X+sj6d9Cz
ycl8tGzE8DMpLd3wYvZYPoiQAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnYMaQV
9dm+JzdrhbQ/d+MNPBbOMB8GA1UdIwQYMBaAFGGwoRvZRLzahlu5sfv37gbVc71x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY1Ni84OEU4RTQyRUJF
MEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZOcUdXN214LV9mdUJ0Vnp2
WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liQ2hHOWxFdk5xR1c3bXgtX2Z1QnRWenZYRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzY1Ni84OEU4RTQyRUJFMEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZO
cUdXN214LV9mdUJ0Vnp2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpQQguIByvqBzT5GamrHqKXHPfF6xjskcKWGR3C75dFTcEDvOc5Ryc
5xRL5DFzEttHPc1oJ50pDV5H1trfvCHhzQYXj7jT+JqBRocmK6cVNYLlZ4HZ3w7r
xbE9jiTf0nn7Ovw9wCm0+heHNYwBTgXJdy/7TfNTIT0U+xbo7Fk7eah2/ugN8fX8
b0hf5mxEuzrJLQtLz+Tv1K/iBaJqZHnMu/dxZOY3Rm30MzcO+NpV/6CqgdDUKufk
CectfbrT5kADA2VDQbWQamnHpUVurY3KkIW+ogcbCcxcv5TgEGgfdZKxoPb//ylP
Bj8PWLzqcJHUiShRfNpVB6FyyayrBDMJ
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:05:38 2025 by rpki-client