This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
File: 03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json)
Hash identifier: sOTeZkhOr8XM6F/qf3b7WY2EjT/oDzVkcBB5vpq0r70=
Subject key identifier: 29:FE:E1:CD:E9:F8:FB:BB:5E:C4:71:26:7D:D8:12:22:6C:89:E4:81
Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
Certificate issuer: /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Certificate serial: 051E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
Manifest number: 0518
Signing time: Thu 04 Dec 2025 22:10:46 +0000
Manifest this update: Thu 04 Dec 2025 22:10:45 +0000
Manifest next update: Thu 11 Dec 2025 22:10:45 +0000
Files and hashes: 1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: 2lDIWlmkCCTgI5GGHmKpCKE0JjSGIFGSTCasaqTpVy4=)
2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ejQetAzLgqVtDolBJZWz4Zc5LEXRfg3VkvX111clMEY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1310 (0x51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Validity
Not Before: Dec 4 22:10:45 2025 GMT
Not After : Dec 11 22:10:45 2025 GMT
Subject: CN=693206e6-bb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:ec:8b:75:36:97:ba:cc:62:1a:4c:12:ff:
cc:5f:64:22:94:4c:56:7c:78:06:4e:e5:56:27:d4:
3f:56:98:e6:85:ff:f4:35:81:08:b4:2e:5f:30:37:
56:7b:55:d9:90:8b:9e:fa:ac:f9:11:89:8d:b7:26:
b2:cf:6b:1c:ed:a4:0c:cd:cc:ff:2c:92:bd:69:56:
86:aa:54:d4:19:da:52:44:72:43:65:07:77:22:77:
c1:33:fe:40:53:87:db:39:6f:bd:fd:b3:e7:a2:dd:
aa:27:e8:3e:a7:8b:e6:40:0c:66:c3:ce:15:40:59:
dd:c4:f2:6b:76:7e:62:07:b5:a3:ee:a1:24:5e:32:
f8:0e:8b:cb:52:30:b4:b3:dc:e8:a5:1d:19:6a:54:
8b:28:4f:4c:00:ac:08:a1:8e:97:b9:54:47:82:9f:
42:bb:b1:1b:02:9f:c9:29:a8:da:f4:a3:72:db:ec:
6e:56:b8:82:40:db:43:ad:3c:36:7e:b2:53:d0:9f:
ba:9e:20:a5:a4:91:ad:50:0b:4d:d0:e5:0d:3e:c8:
3b:96:a3:22:43:88:42:1d:e9:02:e8:55:c9:79:90:
80:49:72:3c:41:c2:4b:6d:90:91:7e:57:e9:e1:27:
bf:a7:63:7c:e7:31:22:90:e2:af:f6:f9:cb:8a:8f:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:E1:CD:E9:F8:FB:BB:5E:C4:71:26:7D:D8:12:22:6C:89:E4:81
X509v3 Authority Key Identifier:
keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:6d:3d:66:c6:59:63:af:ad:dc:b4:be:78:45:a4:b5:f8:4c:
f7:f9:b5:1c:ba:f1:ca:59:86:9d:84:07:bb:d8:14:ad:2a:63:
fe:3a:a8:97:0e:69:53:38:83:8a:a6:cc:8b:42:eb:33:f8:78:
85:c5:b3:8f:52:0c:3f:42:d9:7d:17:ab:a2:a4:21:be:49:64:
4b:0f:1e:3d:64:fc:21:a6:78:d4:12:92:17:20:9b:88:b8:ee:
66:da:84:c8:a1:3f:90:a1:5f:4e:fb:f8:5a:aa:82:91:c0:7d:
48:ef:d5:b3:fb:a7:da:b2:74:18:f9:a9:9f:39:46:64:b9:f0:
2c:af:e2:7e:8f:3b:d5:14:04:be:b7:63:65:ff:06:3c:03:db:
e2:3e:61:95:2e:d7:30:b1:5f:89:73:25:61:22:a4:55:ac:f0:
80:e5:67:c2:5c:53:24:e2:f3:8b:70:6b:78:6f:ae:40:c9:7d:
1c:88:17:47:d0:c1:2c:c4:5e:6e:b1:4c:b5:3f:96:85:31:5c:
ee:d0:c4:b1:91:56:4e:31:63:48:f2:20:43:7c:32:5a:22:05:
00:a8:d1:3d:84:22:8c:70:2d:12:c5:89:5b:2e:ca:ef:a3:13:
2a:47:fc:ef:cc:ab:a3:5e:c9:0d:73:8c:15:73:a5:64:b9:5a:
b8:7f:24:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:29:42 2025 by rpki-client