This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
File: YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft (raw, json)
Hash identifier: TRWuKolNB72nSWOCr+ZNH1uQykL1gpV5Yy90b0SYtn4=
Subject key identifier: 1C:80:C5:2A:87:49:A3:37:54:6F:5F:22:1B:90:50:3A:89:6C:48:FF
Authority key identifier: 63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
Certificate issuer: /CN=A9144C70/serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
Manifest number: 04D6
Signing time: Thu 04 Dec 2025 23:03:30 +0000
Manifest this update: Thu 04 Dec 2025 23:03:30 +0000
Manifest next update: Thu 11 Dec 2025 23:03:30 +0000
Files and hashes: 1: YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl (hash: sDXkMZFSMLSSwb3nqqM551c1O6/8wn0SslDWfBEZXq4=)
2: 2BE1E33A9C7D11F0BD6FFF71C4F9AE02.roa (hash: vft+eU4CpaMMVegJX2IoSc61ijnWeC2pmFFJGifleEc=)
3: B39CC5D0999C11F0B916112DC4F9AE02.roa (hash: 6q41hoRYSlGeQU/2jAswtSG8NBRB1otmd5Vb7tbOxSI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144C70, serialNumber=6323E56CD992AB8FCE3875315AE61AC5E471ACBD
Validity
Not Before: Dec 4 23:03:30 2025 GMT
Not After : Dec 11 23:03:30 2025 GMT
Subject: CN=69321342-1840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:37:fe:21:4f:89:b6:50:99:b9:4e:ff:69:bd:
39:f6:db:6c:1c:42:0a:70:29:54:f9:24:37:24:29:
d2:87:a0:c2:9b:f3:f5:5a:c6:2b:a9:9c:c9:23:34:
c2:a4:b4:a6:c5:14:7f:9c:7b:97:c3:6a:56:4c:e2:
f2:7e:96:cf:7c:b1:e6:d1:e4:a7:d9:3e:19:e3:1e:
94:f8:81:c5:84:69:21:d1:43:3b:64:70:3c:c8:8a:
e7:2c:1c:0c:18:0a:45:73:5c:35:f9:f6:f9:af:42:
22:e6:1a:8f:86:93:b2:5b:57:17:a7:ae:19:1f:a8:
a3:8b:25:7b:8b:51:09:68:43:99:ed:10:e9:a0:f6:
14:32:c7:b2:82:cf:2a:f6:c5:0c:90:32:3e:16:0d:
4b:40:92:f3:85:cc:78:27:fd:53:7c:43:3b:49:fb:
65:97:ac:81:4d:8b:d7:36:60:46:0d:47:04:06:90:
02:d8:f2:28:d9:b9:04:d3:1b:a1:ff:a0:21:d5:27:
4e:b4:a2:7d:3e:f8:54:e8:67:0b:61:2a:9b:4b:24:
65:7d:e8:c7:c7:3c:6f:7c:1a:a9:3d:44:bd:bd:24:
62:e4:03:5b:82:b5:c6:54:6a:bc:56:aa:a2:69:95:
59:77:6a:ed:a3:04:17:23:35:17:b0:97:b2:24:0c:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:C5:2A:87:49:A3:37:54:6F:5F:22:1B:90:50:3A:89:6C:48:FF
X509v3 Authority Key Identifier:
keyid:63:23:E5:6C:D9:92:AB:8F:CE:38:75:31:5A:E6:1A:C5:E4:71:AC:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YyPlbNmSq4_OOHUxWuYaxeRxrL0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/YyPlbNmSq4_OOHUxWuYaxeRxrL0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:cc:1b:ad:17:d1:a9:ae:87:b7:bc:8d:78:ea:bc:63:09:cd:
7b:40:d8:48:5d:8f:e5:a8:a7:5c:89:81:6f:cd:a9:dd:0e:18:
4a:e0:e2:95:6c:be:b6:e2:6a:fa:87:fd:2e:91:fb:0c:c3:d1:
5f:dd:b5:4d:bc:c6:ea:bd:4b:b6:8b:54:73:be:91:b3:19:d8:
97:04:b2:1f:1e:72:eb:09:ef:2d:af:98:4a:07:e9:99:f0:45:
90:4f:93:02:54:a7:0b:2b:a5:25:d9:fe:1f:8c:01:22:b8:d6:
48:34:90:e0:c9:91:8f:f5:1f:bc:fe:35:c0:3d:ba:99:1b:ea:
83:cf:4e:b7:21:4e:62:33:c6:0b:1b:95:63:99:2f:7f:7f:cd:
f1:73:ee:98:2c:32:fe:13:82:5e:d8:0f:e7:c6:a5:4c:94:6d:
3d:f2:91:95:1c:02:fc:c6:86:b2:7a:99:8d:89:5b:43:cf:3a:
79:0f:34:60:56:b1:85:b8:2f:6d:a4:1e:be:08:89:7b:ba:63:
23:18:24:e9:c0:c6:8e:59:3c:a9:b8:c8:05:5c:84:21:ea:aa:
8e:5d:00:3a:9c:55:62:85:17:6b:c1:01:3a:be:10:65:4d:7b:
71:3f:12:e6:f5:c2:e3:ef:54:60:cf:37:42:71:f3:7b:b1:75:
6b:f9:a1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:20:16 2025 by rpki-client