This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json)
Hash identifier: yJmcdpXmkoUF8iNFiTVBqdpJhWT5R3OQ0Wz4E8zjwtw=
Subject key identifier: A7:F4:7A:78:5A:31:AD:17:D9:85:4F:EA:C0:60:18:73:E4:60:52:2A
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial: 0810
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
Manifest number: 0809
Signing time: Sat 06 Dec 2025 20:02:55 +0000
Manifest this update: Sat 06 Dec 2025 20:02:55 +0000
Manifest next update: Sat 13 Dec 2025 20:02:55 +0000
Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: 0qj3Fw+GYtMwR/4ymXCMJFgSPfeWaRJjkRx6xmQ5hb8=)
2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: FLJlO0/U5xnVZ/RuP3SLCUdb/l/zTCs0DDA6x0gKds8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Validity
Not Before: Dec 6 20:02:55 2025 GMT
Not After : Dec 13 20:02:55 2025 GMT
Subject: CN=69348bef-e9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:ae:70:e4:64:f6:46:4c:0c:f7:18:d8:13:
26:87:26:4d:35:e8:ec:05:4b:30:31:0e:d4:07:4a:
54:ef:df:8e:04:69:07:b1:09:70:50:d4:77:02:02:
44:5c:17:6f:2a:4a:c2:77:1a:33:c1:97:d8:f1:2c:
04:6a:85:f8:c2:bc:bf:ed:42:6e:ca:5d:a7:00:66:
3b:4f:6f:68:13:b4:e8:a0:9d:23:07:6a:63:ab:c6:
5c:49:02:82:ae:a5:8e:33:5d:95:d9:68:e8:7a:c8:
9c:20:ba:25:8d:4a:c7:af:f8:49:01:2b:18:63:4b:
3f:ff:45:2c:89:c7:46:aa:10:83:17:3d:16:b6:0b:
63:27:04:c4:c0:76:b6:2e:a6:4e:1d:31:ab:a1:d5:
e6:57:75:d6:32:b1:c6:bc:61:42:89:de:61:53:09:
35:64:be:e2:51:1d:d7:a2:a2:de:e0:ee:a2:cd:2f:
b4:27:ae:eb:d6:12:78:71:55:00:df:7e:fc:0f:56:
df:26:cf:b1:66:63:ff:35:ea:97:46:12:b1:5d:cb:
6f:76:b2:55:e7:1b:80:6e:07:f1:0b:3c:bf:6c:d9:
33:05:82:2b:68:98:27:fa:c7:9f:40:0c:cb:63:ef:
a0:dd:59:27:de:16:f8:e6:c0:ab:23:0f:79:c4:08:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F4:7A:78:5A:31:AD:17:D9:85:4F:EA:C0:60:18:73:E4:60:52:2A
X509v3 Authority Key Identifier:
keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:1b:67:3e:40:a0:f2:91:d0:57:2b:61:47:0c:cb:7a:12:9f:
ce:28:07:81:71:cb:33:87:8c:c3:5b:85:7e:b2:3e:1f:fc:be:
9b:07:c2:94:93:30:6f:50:7f:2b:23:1e:d2:3f:63:db:fa:f2:
cc:5a:39:1f:4b:bc:d3:5c:e1:9c:2e:b7:9c:80:cb:f5:b7:d8:
13:c0:a2:4e:9e:64:a2:6f:b8:ab:ed:9e:f4:72:54:f8:d4:8c:
1c:7b:a9:9a:c0:1f:09:57:dd:de:fd:ec:31:38:fd:08:a2:0d:
19:19:c8:66:21:bb:8a:ce:b8:52:fb:68:e8:3e:3a:95:61:f9:
84:88:24:86:9d:3a:92:bd:58:af:40:55:d6:fa:66:d5:26:52:
e9:b5:d0:ce:39:aa:d2:e3:e7:e3:37:6d:ee:4c:64:49:29:96:
76:bd:fe:be:8e:e0:4c:a4:0c:83:31:45:db:ea:66:e4:aa:e2:
b4:f4:55:9a:62:a2:b5:ef:c0:28:c2:2a:52:26:41:bf:36:86:
c5:7b:c7:33:49:d3:cd:8d:8c:d3:5a:52:7f:5c:30:c4:88:f5:
45:cd:9f:c7:5e:8a:4f:25:06:6c:46:51:89:36:f4:a9:99:b7:
fd:be:ea:33:05:11:7e:be:ab:b9:60:44:f2:b2:50:d1:7d:5c:
5b:e8:be:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:30:02 2025 by rpki-client