This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json)
Hash identifier: XY2Hl9OumCtPCTxZQGfXKTA2FvQH6vq2iaFLxQbYFwE=
Subject key identifier: B7:DE:78:F8:D1:E0:81:2A:33:2E:42:0D:90:57:A2:14:2D:36:1A:7D
Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9
Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
Manifest number: E3
Signing time: Fri 05 Dec 2025 03:27:47 +0000
Manifest this update: Fri 05 Dec 2025 03:27:47 +0000
Manifest next update: Fri 12 Dec 2025 03:27:47 +0000
Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: A7LW+wbeuXiGuIVSzqaHEH9v//qmcxaZWy5C8cqmvzY=)
2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl
rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:27:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
Validity
Not Before: Dec 5 03:27:47 2025 GMT
Not After : Dec 12 03:27:47 2025 GMT
Subject: CN=69325133-fab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:b2:c3:e1:b6:2d:5f:8f:bc:57:c9:74:f8:
60:60:b9:1f:49:5f:3c:8b:c4:33:77:4a:62:3b:f2:
e6:b7:0f:59:8a:16:cf:ef:01:90:1b:53:00:2a:58:
f1:bb:73:27:ff:d5:39:b7:1a:47:a1:5d:9b:e7:84:
ce:a4:f8:8e:a9:c4:de:36:b7:d7:ce:99:27:c0:09:
fd:8f:3c:68:64:0b:77:3d:b3:f4:0a:7b:72:69:5c:
db:b8:c5:51:84:89:41:80:5b:63:b0:f3:f7:1f:b9:
f9:08:ad:2a:92:e0:4c:97:89:17:2f:3e:22:1a:2e:
83:fc:8b:80:d6:29:d9:9e:5c:4b:cd:7b:cc:57:46:
72:d4:9e:6a:95:80:21:7c:e0:1a:c8:87:0f:fb:f9:
49:d7:82:6b:f1:b7:27:6b:b1:f3:7f:63:26:30:80:
bc:91:cd:34:80:c7:12:9e:ac:db:79:10:9f:40:93:
8d:89:38:e8:d3:a8:c4:d7:8c:19:06:60:80:59:39:
44:86:8e:33:9a:96:6d:45:73:2d:a9:62:21:a8:b4:
96:eb:e6:f0:70:3f:32:d1:69:bc:eb:bf:87:f2:b9:
2c:42:6a:2e:50:22:66:e8:a2:75:5a:11:7a:9c:33:
e2:4a:6c:95:35:a6:b0:72:34:b6:b3:60:39:bd:6b:
b8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DE:78:F8:D1:E0:81:2A:33:2E:42:0D:90:57:A2:14:2D:36:1A:7D
X509v3 Authority Key Identifier:
keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:b1:68:b3:2a:43:b0:f7:61:a9:4d:6e:20:ec:90:15:cc:b3:
9f:95:10:a3:d0:ad:cb:b1:8f:2a:c6:47:67:26:5b:d0:1e:ec:
05:fa:f5:ed:9b:87:52:f4:4b:5d:86:9d:cc:d5:6a:8e:77:2e:
93:f5:df:a6:09:22:75:38:6a:bb:4c:73:8f:29:d6:68:4e:1e:
3d:4a:61:8e:e2:1e:99:c8:03:16:5e:8e:24:67:62:e3:78:2d:
ef:b7:61:c2:3f:fe:7f:44:cd:b5:fd:ab:d4:e0:8e:d2:72:7d:
f5:f0:d5:86:71:cd:72:98:f6:61:53:c0:1c:b5:bf:d7:11:66:
31:85:fd:0b:79:a6:79:ec:a6:7b:11:1b:6a:0e:9d:f7:51:2c:
18:9f:8d:12:9b:5f:78:58:ae:e1:fc:e1:bf:57:7f:65:97:f3:
9a:35:6f:99:ab:bd:d2:14:6f:7a:1e:38:36:83:17:09:78:a3:
2e:7b:d6:04:3a:e9:dd:47:ea:52:9d:53:49:96:74:a9:fd:8a:
89:ee:1d:9a:4b:fd:7e:13:a0:3d:00:c5:f9:63:a7:11:15:26:
89:3a:07:59:33:03:f5:b2:52:3e:44:d5:0e:4f:93:7b:9c:b8:
91:b1:9e:0c:93:eb:a8:2d:c6:4e:62:98:c9:d9:7c:d9:3e:bd:
6c:3a:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:34:07 2025 by rpki-client