This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
File: _Yje-aa92-pZOJ7cYXGq3KEGtQk.mft (raw, json)
Hash identifier: /RpSwCvtkyS2yb3nfVMc9EfN1sj760YBS4qghKq6/d4=
Subject key identifier: 24:F9:22:D8:DB:4C:F8:D3:8C:D7:C7:69:48:8B:65:FC:86:7F:E6:27
Authority key identifier: FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09
Certificate issuer: /CN=A9172FC5/serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509
Certificate serial: C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
Manifest number: C1
Signing time: Fri 05 Dec 2025 03:54:24 +0000
Manifest this update: Fri 05 Dec 2025 03:54:23 +0000
Manifest next update: Fri 12 Dec 2025 03:54:23 +0000
Files and hashes: 1: _Yje-aa92-pZOJ7cYXGq3KEGtQk.crl (hash: 7a7m7bJ6G+7S/DAQFb9W3s74Hjg5rkHW6y9n9K+DKCU=)
2: 2D810A88AB4011EF849D9515C4F9AE02.roa (hash: Rc9brTS9qhrwUI4y6KFA7OXRuq+HA76Zn61TGx8tdAs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl
rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 195 (0xc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172FC5, serialNumber=FD88DEF9A6BDDBEA59389EDC6171AADCA106B509
Validity
Not Before: Dec 5 03:54:23 2025 GMT
Not After : Dec 12 03:54:23 2025 GMT
Subject: CN=69325770-bad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:ab:43:2a:a7:af:9d:86:02:20:35:15:81:
e1:95:ad:e3:ae:91:72:e8:ff:63:13:bb:d8:db:b9:
82:4f:70:27:97:63:3c:44:20:89:cf:6d:50:71:b0:
1c:40:27:9d:bf:b7:75:fa:59:ff:4d:e7:34:92:ba:
62:c3:85:74:83:e6:b9:56:b1:e0:92:f0:af:f3:5c:
3c:7c:d6:01:a0:d5:68:61:67:8d:d0:ef:ad:c7:5f:
c3:da:85:2b:fc:6b:95:7e:06:75:23:be:aa:7f:8f:
f9:98:b1:fb:d1:a3:e8:98:41:af:55:ef:db:81:50:
60:ec:87:15:92:b3:2f:b4:5b:8e:37:c3:92:0c:8a:
c3:8e:4d:17:91:24:68:12:44:d5:17:87:26:b9:c8:
b8:0c:43:3b:8a:d4:ce:5a:cb:9a:6e:58:26:fc:db:
59:3b:3d:8c:d7:60:c2:f8:fa:86:d4:d4:af:51:2a:
b9:df:d0:fd:34:4c:05:45:0f:68:e7:e7:b3:41:e6:
9f:f2:b8:67:b9:e8:1b:16:04:04:34:0d:33:b7:e6:
2f:e6:cc:ad:6a:4b:9f:ea:8f:6f:da:15:79:73:64:
3d:60:e5:a1:97:72:72:9f:78:ae:bb:90:bc:38:8b:
0b:e2:c8:96:16:de:18:02:d8:09:5d:d6:74:5e:01:
69:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F9:22:D8:DB:4C:F8:D3:8C:D7:C7:69:48:8B:65:FC:86:7F:E6:27
X509v3 Authority Key Identifier:
keyid:FD:88:DE:F9:A6:BD:DB:EA:59:38:9E:DC:61:71:AA:DC:A1:06:B5:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Yje-aa92-pZOJ7cYXGq3KEGtQk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/EDABD230AB3F11EFBE02CF14C4F9AE02/_Yje-aa92-pZOJ7cYXGq3KEGtQk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:c0:54:7c:d8:ce:1c:12:ca:6d:6e:97:db:2c:13:40:4a:c3:
4b:7f:11:34:df:cb:77:26:81:52:58:96:a7:fe:f4:6e:7f:c5:
d9:22:ae:78:d2:48:3e:67:30:63:0f:84:d8:c2:e0:b8:8b:9e:
91:e9:01:2a:12:aa:90:19:3d:f7:f8:e6:1c:81:66:69:9a:d6:
ec:af:92:e3:36:66:2e:24:04:8d:58:3a:44:75:86:68:03:02:
d6:27:3d:c5:d7:df:aa:d4:68:2f:f8:3f:5d:18:9b:56:70:f8:
fa:26:e0:47:38:c6:be:d8:f0:13:bd:c9:04:76:08:a7:5f:e5:
a6:22:29:33:51:4f:88:de:7c:57:5a:fe:a6:ea:7d:9c:70:60:
dd:9c:ed:2c:5e:14:17:00:03:93:59:88:a1:ba:36:66:29:a3:
05:e1:c7:37:8f:14:e4:31:57:0c:6f:e0:d3:1c:99:06:cc:a5:
30:50:76:a0:d6:8b:05:27:6c:1c:ba:74:82:92:7b:20:7a:5a:
5c:27:79:06:41:f8:29:3f:8f:20:50:ff:07:30:a5:a0:d3:bc:
2b:83:a3:97:30:8b:1b:2a:21:f5:70:59:17:58:a1:ea:d8:a4:
94:08:1c:04:60:ba:1f:43:c2:cf:bd:d4:e4:b2:31:9a:53:6e:
40:0c:70:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:58:59 2025 by rpki-client