This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
File: yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft (raw, json)
Hash identifier: Vw6C+spqmfaXe8GsdSM2KJgh/JdPxBD1oW8UpZxAoVk=
Subject key identifier: 32:BF:3D:A9:C4:FB:36:46:C8:65:AD:65:E8:5D:89:30:93:CE:C8:AC
Authority key identifier: C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A
Certificate issuer: /CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
Manifest number: 014B
Signing time: Fri 05 Dec 2025 02:27:57 +0000
Manifest this update: Fri 05 Dec 2025 02:27:57 +0000
Manifest next update: Fri 12 Dec 2025 02:27:57 +0000
Files and hashes: 1: yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl (hash: peoqC5Wjs5FrF7m0dfTVVXVSUSYvvGZSAch/u/s6FRs=)
2: F16DD2B0E0FB11EE8552F941C4F9AE02.roa (hash: kMQ7gbSHaFXFpsfqJqpqWdRVLvMmMimNITBNMHfZtwY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl
rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915B1BE, serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A
Validity
Not Before: Dec 5 02:27:57 2025 GMT
Not After : Dec 12 02:27:57 2025 GMT
Subject: CN=6932432d-3846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:74:d8:c4:0f:1f:22:85:ba:e4:2f:f5:af:
e8:5a:63:9c:29:e1:14:03:b0:8d:54:d0:cd:e0:fd:
5a:82:b2:da:1e:4c:48:33:ba:e2:d0:62:c6:fb:7c:
56:22:09:d2:db:ee:74:ad:75:07:20:d5:e1:9e:89:
38:56:f4:cf:05:40:4b:c8:d7:79:fc:32:32:bc:ad:
d7:63:6b:70:fd:b2:f5:5c:86:bf:71:21:76:ef:78:
36:a7:75:5b:e2:07:fe:3f:1e:6b:27:8b:52:61:f4:
ff:9a:e2:fc:fd:ea:ba:1f:c7:d6:2a:30:fe:b9:20:
50:04:7e:39:1f:1f:22:c5:91:e5:1f:8f:65:7e:a0:
0a:4c:7f:1c:75:ab:7d:38:ca:ed:9c:d6:e8:9d:6d:
aa:2d:a9:92:a6:fb:20:18:99:17:03:f5:6b:89:07:
12:cf:91:23:bb:c0:4a:98:b3:7e:7d:7c:8a:e2:6e:
e7:fa:3f:db:be:1c:3c:5d:00:df:68:da:7c:84:f1:
80:d2:e5:78:0b:26:31:70:99:c7:6f:05:c5:f0:00:
06:e1:3e:ad:a2:79:24:4b:e0:23:48:c7:16:71:f2:
9e:d6:26:31:66:2a:54:f2:b1:b0:47:8b:01:c5:56:
f6:1d:f2:3f:7b:2c:c3:4b:9b:e1:06:8e:12:bf:3f:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BF:3D:A9:C4:FB:36:46:C8:65:AD:65:E8:5D:89:30:93:CE:C8:AC
X509v3 Authority Key Identifier:
keyid:C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a6:5c:1f:66:57:e9:f0:56:6c:e4:2a:ae:17:99:59:db:38:
c8:6c:ec:6a:9f:bc:02:3d:63:9f:52:fa:4c:38:64:a6:36:d6:
1d:14:93:50:5d:3d:f8:0a:73:18:95:21:ca:e5:5f:a0:cf:b0:
23:7f:f4:38:25:6f:f7:b2:df:d5:a8:44:4c:14:9c:4e:c2:0a:
1f:a3:ac:1c:12:88:ac:c3:c1:66:46:af:e3:65:bb:5e:f1:11:
f6:73:62:c6:da:a7:48:83:01:a4:01:6f:db:38:01:fb:f8:2d:
53:8a:6e:f9:c9:99:f8:1b:d6:b5:b5:7b:b4:95:dc:ed:60:a4:
30:b3:92:2d:cb:1d:e1:49:71:4b:57:0a:48:9d:69:f1:be:78:
53:15:94:8d:d4:56:4a:09:16:24:35:ca:a2:05:27:c5:27:59:
21:61:53:53:64:de:2f:25:92:d8:ed:85:a0:96:aa:46:5a:93:
da:b0:4c:43:30:0b:4f:ff:82:d8:eb:da:d3:e2:fc:20:c5:d5:
35:fd:3f:4c:1e:ea:01:83:72:d1:0a:67:cf:9d:15:20:44:d1:
2a:66:aa:8e:e8:85:c3:77:ce:01:7a:79:65:41:76:c1:66:04:
1b:ea:2f:ce:48:0e:54:3a:b4:a3:86:6d:a3:19:41:06:d1:41:
ba:7f:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:04:28 2025 by rpki-client