This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft
File: Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft (raw, json)
Hash identifier: 8n2ub8wE1y8MBQlrIzEdw0YlB2WRFVrkQb7wVB4plkI=
Subject key identifier: 32:71:D5:EA:F9:E2:49:C7:CB:B6:E7:A9:71:08:A7:A1:74:A7:D0:18
Authority key identifier: 63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1
Certificate issuer: /CN=A9178F62/serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft
Manifest number: 51
Signing time: Fri 05 Dec 2025 05:09:43 +0000
Manifest this update: Fri 05 Dec 2025 05:09:42 +0000
Manifest next update: Fri 12 Dec 2025 05:09:42 +0000
Files and hashes: 1: Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl (hash: iwIyy3k+6HVBr1gZvezj+X/VHz03nktLVkJgS71aPc4=)
2: 8EA5A6E28C7D11F0B0706F1EC4F9AE02.roa (hash: EVLtvEiDogBu3QcVhxjleJTDGMs7gXBmi6TLdVrRV/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl
rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178F62, serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1
Validity
Not Before: Dec 5 05:09:42 2025 GMT
Not After : Dec 12 05:09:42 2025 GMT
Subject: CN=69326917-ec58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:73:29:b5:62:fa:57:bd:59:88:6a:f7:a6:
67:de:ef:a5:bd:05:0b:0e:32:23:e4:4a:5b:74:21:
0e:d0:ba:81:1d:29:a1:d6:90:05:10:50:c6:e6:41:
ee:ec:00:42:c0:f6:29:38:87:8b:79:9c:f2:51:6c:
22:11:7a:a0:c7:b6:8c:1d:79:bb:89:35:c9:77:b0:
44:35:67:a2:88:15:21:0c:74:86:22:3c:ad:72:f5:
6b:9c:8a:c9:7b:9a:04:28:4e:04:3f:29:04:18:ed:
38:fe:2f:7f:9c:d9:0f:c6:11:25:f9:50:90:3a:68:
1a:f2:75:7d:84:79:6c:10:45:30:d0:51:a0:ff:0f:
59:99:b3:9a:11:2b:7b:7b:93:27:7f:8f:04:17:1a:
5a:b2:17:23:c9:ed:0f:2f:34:fe:45:7a:ea:c1:80:
ca:a8:26:38:c2:5c:56:17:83:3f:62:86:d1:32:c3:
23:24:e8:cf:09:32:f1:6f:4c:78:26:b4:e9:9f:98:
1a:42:c2:d8:bf:e4:6c:78:55:38:09:bf:40:16:17:
5e:2e:83:a3:36:f9:24:57:b7:0d:46:09:67:30:34:
8c:5a:8e:76:6c:79:74:46:53:04:10:d4:6a:0b:dd:
d7:6f:31:88:a4:a7:b2:e7:27:b5:55:6d:f9:36:86:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:71:D5:EA:F9:E2:49:C7:CB:B6:E7:A9:71:08:A7:A1:74:A7:D0:18
X509v3 Authority Key Identifier:
keyid:63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:2f:0a:d6:e2:33:26:64:6b:e6:62:0d:4c:65:a9:ae:ac:18:
74:84:f8:26:e7:0f:14:6b:d0:37:c7:c3:5b:c3:4d:e0:cd:eb:
b2:1e:2e:02:13:f7:18:5e:91:cd:6d:88:fd:c6:20:f3:a5:78:
f2:d8:85:2f:4b:7e:81:9a:89:87:ab:b0:9d:6e:a7:ca:a6:2f:
7f:09:d0:89:46:42:57:a1:87:d4:c2:d0:b2:ca:06:79:84:e6:
35:d3:79:76:95:e2:8c:d0:9f:60:a0:d7:19:14:9e:52:e8:96:
f0:26:72:b2:16:4e:21:6d:06:72:c9:9c:ee:f5:2b:c4:7d:a0:
c0:17:6d:bb:2a:90:f9:75:fb:b4:a9:3d:99:9f:20:f8:d7:54:
c3:f2:1a:e8:50:a0:33:e5:f8:a8:ff:79:78:16:82:6b:09:f0:
b2:ad:3a:14:72:0d:ee:fa:d5:1f:f5:3a:e4:b0:a9:3e:4d:b5:
d7:82:1e:2d:6d:37:5a:86:6d:62:42:f9:8c:f8:de:e7:07:83:
b0:2a:38:06:35:fb:60:d7:00:6a:ac:2b:21:39:13:95:38:dd:
03:9d:57:6c:47:d2:3c:17:78:b4:14:b4:21:d5:19:f8:dd:7e:
eb:1c:6c:18:57:2c:23:ab:16:c4:ff:24:a7:ad:da:8f:23:d0:
55:1e:23:71
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
OEY2MjExMC8GA1UEBRMoNjNGQTAwMDYyNjFEOUU0Q0Q0OTA1OTA2RTU0Mzk2OTRC
RTYyN0JCMTAeFw0yNTEyMDUwNTA5NDJaFw0yNTEyMTIwNTA5NDJaMBgxFjAUBgNV
BAMTDTY5MzI2OTE3LWVjNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCu5XMptWL6V71ZiGr3pmfe76W9BQsOMiPkSlt0IQ7QuoEdKaHWkAUQUMbmQe7s
AELA9ik4h4t5nPJRbCIReqDHtowdebuJNcl3sEQ1Z6KIFSEMdIYiPK1y9Wucisl7
mgQoTgQ/KQQY7Tj+L3+c2Q/GESX5UJA6aBrydX2EeWwQRTDQUaD/D1mZs5oRK3t7
kyd/jwQXGlqyFyPJ7Q8vNP5FeurBgMqoJjjCXFYXgz9ihtEywyMk6M8JMvFvTHgm
tOmfmBpCwti/5Gx4VTgJv0AWF14ug6M2+SRXtw1GCWcwNIxajnZseXRGUwQQ1GoL
3ddvMYikp7LnJ7VVbfk2hu8xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMnHV6vni
ScfLtuepcQinoXSn0BgwHwYDVR0jBBgwFoAUY/oABiYdnkzUkFkG5UOWlL5ie7Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4RjYyL0I4NzhDMkM4NURG
RDExRjBCNUMwN0I0QkM0RjlBRTAyL1lfb0FCaVlkbmt6VWtGa0c1VU9XbEw1aWU3
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWV9vQUJpWWRua3pVa0ZrRzVVT1dsTDVpZTdFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4
RjYyL0I4NzhDMkM4NURGRDExRjBCNUMwN0I0QkM0RjlBRTAyL1lfb0FCaVlkbmt6
VWtGa0c1VU9XbEw1aWU3RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJEvCtbiMyZka+ZiDUxlqa6sGHSE+CbnDxRr0DfHw1vDTeDN67IeLgIT
9xhekc1tiP3GIPOlePLYhS9LfoGaiYersJ1up8qmL38J0IlGQlehh9TC0LLKBnmE
5jXTeXaV4ozQn2Cg1xkUnlLolvAmcrIWTiFtBnLJnO71K8R9oMAXbbsqkPl1+7Sp
PZmfIPjXVMPyGuhQoDPl+Kj/eXgWgmsJ8LKtOhRyDe761R/1OuSwqT5NtdeCHi1t
N1qGbWJC+Yz43ucHg7AqOAY1+2DXAGqsKyE5E5U43QOdV2xH0jwXeLQUtCHVGfjd
fuscbBhXLCOrFsT/JKet2o8j0FUeI3E=
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:56:59 2025 by rpki-client