This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
File: YmINYNuoUorqQhLM7bcpYTqZFVw.mft (raw, json)
Hash identifier: SPSK/kcQcsoDqMFbR23HFSQVW3VrZB9v3qlkbBm8Vqg=
Subject key identifier: 56:47:02:EB:92:FC:DF:2F:37:3C:9E:25:57:23:71:25:CD:D0:FD:3C
Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
Certificate issuer: /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Certificate serial: 03B9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
Manifest number: 03B3
Signing time: Sat 06 Dec 2025 21:05:08 +0000
Manifest this update: Sat 06 Dec 2025 21:05:08 +0000
Manifest next update: Sat 13 Dec 2025 21:05:08 +0000
Files and hashes: 1: YmINYNuoUorqQhLM7bcpYTqZFVw.crl (hash: ivOCFmOtsHFRWlLQ3SV6g5EEJdJ3RpHk0427mc0EBcY=)
2: C9E2B406804111EEA6703F81C4F9AE02.roa (hash: CbD0ENt2Pao5fOcZWp69VcMqe2Tlg3J0XG1C2H6cud0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:11:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953 (0x3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912CDC5, serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C
Validity
Not Before: Dec 6 21:05:08 2025 GMT
Not After : Dec 13 21:05:08 2025 GMT
Subject: CN=69349a84-7cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:25:c1:60:29:c7:b7:94:f8:7a:2d:aa:9b:
b7:16:fa:0b:9e:cb:fa:dc:18:0a:38:6a:93:84:61:
94:b5:1f:50:9f:5c:e0:8e:78:a1:ed:79:84:de:7d:
10:3f:53:3b:b7:51:4b:fd:58:86:00:11:f1:58:a1:
37:87:4b:61:e8:1d:6e:1a:ff:57:31:bf:b2:d0:b2:
35:1a:63:a9:3c:7f:7d:7c:8c:5f:a0:fd:3a:c9:39:
99:4c:bf:50:40:c2:2c:f6:55:80:f5:c1:dc:4d:14:
9a:6d:5f:b3:3e:80:e3:c2:c3:33:83:8a:2a:29:bc:
de:10:8d:dd:15:2d:d1:3d:d0:a3:d7:84:3c:10:ab:
1c:39:26:84:f5:c7:08:ca:d9:64:50:fa:aa:81:e7:
ba:45:c9:71:c1:15:ac:4a:20:b1:04:66:fc:27:ec:
9d:fa:5a:c2:e1:1e:a5:fc:18:0b:6c:3b:2b:c1:1c:
44:eb:57:54:d9:7d:35:cb:b7:7f:1f:12:c9:de:e1:
d5:50:7e:73:16:22:65:75:5a:bc:b8:05:e5:28:24:
13:ab:46:27:6a:34:be:19:39:4b:f1:c8:4c:c7:68:
a7:ba:0d:04:69:1a:22:d1:55:b8:f4:a7:82:ea:94:
62:f3:c3:d4:b7:f1:ba:ce:5d:e5:93:a8:e1:7d:3c:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:02:EB:92:FC:DF:2F:37:3C:9E:25:57:23:71:25:CD:D0:FD:3C
X509v3 Authority Key Identifier:
keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a4:cf:21:ea:f6:be:c8:d2:dd:fe:fd:b2:5b:01:0a:56:8b:
4e:6f:44:d7:05:ba:ba:22:bc:87:6a:36:e9:40:27:36:84:88:
a7:5f:bc:27:da:5a:03:6f:6e:a1:89:fd:06:95:9d:c6:04:31:
b0:7e:b3:2c:d8:d0:0c:09:da:0f:ed:82:dc:6d:cf:ef:3b:43:
dc:a5:b5:9a:08:0e:9e:53:cb:64:15:8c:cb:eb:cf:24:05:47:
2c:c5:25:4f:9b:9a:fb:58:3e:ac:dd:60:35:df:a7:ab:ab:c8:
23:c8:f0:45:ea:d2:f9:ff:99:b6:4f:ea:94:9d:16:44:e2:b6:
99:21:86:9b:e3:28:67:7f:0d:8d:91:21:3a:c1:61:1d:16:01:
90:a2:96:70:4c:6a:3b:28:c6:8e:8f:8f:0f:8b:35:70:13:ce:
e2:23:0d:ab:31:bd:18:ca:22:d9:31:47:7c:4e:2e:9e:fb:f4:
84:cb:ed:7b:2b:0c:a6:aa:ec:f5:f1:82:3e:8e:6e:b3:d3:05:
35:4c:07:7d:3d:d0:c2:a6:22:90:75:ca:c0:cd:93:55:c1:bb:
a4:47:51:6f:0e:e5:82:ee:cc:be:b0:9a:0a:4f:f5:ac:d0:ea:
51:ce:3e:c9:32:5f:93:c8:ca:c7:ec:a2:e9:d5:3c:73:94:6f:
b0:ee:27:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:02:18 2025 by rpki-client