This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json)
Hash identifier: mGwJhrjk0Rgq7ngi0huiOWXj3351dD4MT6fhmCWTtrs=
Subject key identifier: 04:CA:49:A8:88:52:20:24:60:AB:80:4C:25:4C:49:11:2B:BE:45:D1
Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
Manifest number: 019E
Signing time: Fri 05 Dec 2025 01:35:48 +0000
Manifest this update: Fri 05 Dec 2025 01:35:47 +0000
Manifest next update: Fri 12 Dec 2025 01:35:47 +0000
Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: n5lGT+Ai0IqC2VdaZ38i2kS+wP6EgXIbnAJYHpPxJFY=)
2: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: 9h3davUQ9pNDA3U7SYojAK+YEhrIBkhT56ukToleizY=)
3: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: DgTHE1vd+LuLJ/6bYp2I4wVbGI057+J0uGiHNmi5Ok4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Validity
Not Before: Dec 5 01:35:47 2025 GMT
Not After : Dec 12 01:35:47 2025 GMT
Subject: CN=693236f3-1507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:34:58:f5:6e:44:d7:79:59:69:fd:1a:23:
d6:44:46:5f:e6:82:78:bf:66:1d:63:57:af:b0:b2:
8e:aa:39:2e:8b:a8:cf:f2:b0:01:71:c7:1f:7f:bc:
42:35:cc:2b:18:78:22:7c:8f:a3:be:4d:23:5b:18:
fc:d5:18:9c:89:85:4b:ad:fb:84:a6:0b:fd:9d:64:
03:72:c6:58:f6:e5:59:df:40:da:aa:49:a8:64:76:
ab:67:1c:4a:0e:19:7f:f0:b2:e1:d1:01:ae:9d:bc:
55:bf:27:e8:a9:f2:df:3f:9b:ec:3f:cd:40:61:90:
67:ca:0e:19:ed:8d:56:37:d4:ee:23:cf:ed:51:81:
af:08:0e:b0:3a:cd:15:38:68:7e:3d:aa:76:c0:04:
bd:9e:46:1b:21:e3:a3:b2:a4:41:34:fa:35:21:da:
5c:05:d8:89:e6:71:af:f6:6d:8d:ce:8c:32:e0:b7:
99:80:f7:e3:ff:fd:2e:0a:f4:51:35:52:e7:6c:21:
53:59:7f:4c:44:8d:d4:d3:6f:82:61:aa:d1:08:56:
be:91:bb:f8:72:9c:2f:bb:b4:83:f6:0c:46:92:29:
05:1c:97:51:e5:dd:d6:e6:0c:43:3b:64:af:9a:ee:
b8:00:23:d0:b8:7e:b7:5b:db:55:65:dc:e5:06:48:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CA:49:A8:88:52:20:24:60:AB:80:4C:25:4C:49:11:2B:BE:45:D1
X509v3 Authority Key Identifier:
keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:c9:17:92:39:9d:34:bf:d8:7b:4e:61:1a:2d:6f:07:c7:93:
52:e4:90:b3:66:cb:46:a2:fc:cf:3f:c8:16:c7:bd:18:0b:03:
f3:ef:77:b5:d9:11:17:61:83:01:b4:23:7e:1b:45:93:4d:c5:
f1:52:43:ea:56:17:83:bb:ec:37:70:5d:b3:5e:9a:cc:74:94:
35:5c:d7:4b:3b:bf:b0:59:d1:ea:cb:34:1d:cc:4a:07:c7:ca:
f0:36:cc:04:c9:63:03:56:d4:85:17:83:ae:d7:7d:0f:4d:4d:
a5:f5:b6:f6:ff:e4:ea:a5:4d:04:26:53:8c:00:88:87:07:62:
79:ee:45:7c:6e:9f:e0:19:45:3a:c7:31:a1:3b:5b:67:06:20:
aa:c1:9b:bb:34:2b:b6:78:95:83:38:cf:40:f5:07:a5:c9:d8:
0c:6c:fd:c2:65:82:cf:5b:51:ec:90:43:d8:97:1a:24:71:82:
03:1c:c2:22:7d:93:a3:8e:4d:bd:0b:e4:f8:24:6a:b7:7e:d1:
d2:c7:03:0b:64:ae:00:9e:3e:82:53:43:d6:0d:42:a3:ed:53:
90:b6:bb:7b:07:2f:7d:01:45:b3:51:42:ba:1c:17:e4:4c:96:
c2:fc:0a:16:8f:c8:5c:e5:c5:c0:17:78:7b:08:66:56:1a:00:
b3:99:cb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:28:54 2025 by rpki-client