This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
File: yC1GI7edxaBABywRKhur60QWBBw.mft (raw, json)
Hash identifier: 7nq0LLaJNKgchq8Tlhc7Z9RY4idd4QbzzAcrJzDOCY8=
Subject key identifier: 62:9F:98:3F:5F:EE:00:29:3E:33:8A:EE:3D:E9:82:C8:69:BD:A2:87
Authority key identifier: C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C
Certificate issuer: /CN=A91D008B/serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
Certificate serial: 05ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
Manifest number: 05E7
Signing time: Sat 06 Dec 2025 21:47:21 +0000
Manifest this update: Sat 06 Dec 2025 21:47:20 +0000
Manifest next update: Sat 13 Dec 2025 21:47:20 +0000
Files and hashes: 1: yC1GI7edxaBABywRKhur60QWBBw.crl (hash: o5fHgpK0bzWQ9bcV1o5we/sSAa/tNS4f3dWdRlKqoIM=)
2: 469C2676D76111EB97EB721DC4F9AE02.roa (hash: OTs+qw3AvV3H1ENDQyiXHEhtKPRt4PABgjp0FWH4nzU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl
rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1517 (0x5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D008B, serialNumber=C82D4623B79DC5A040072C112A1BABEB4416041C
Validity
Not Before: Dec 6 21:47:20 2025 GMT
Not After : Dec 13 21:47:20 2025 GMT
Subject: CN=6934a468-d49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:79:4f:88:78:c4:24:b7:ad:9c:31:5f:49:
ca:ea:94:2a:50:dd:5b:d3:f2:d6:49:0d:dc:f6:e2:
ad:9f:2f:b1:6e:1d:90:50:40:8e:4b:10:77:13:b0:
08:78:42:df:34:da:54:fd:ca:b0:ea:e6:3f:79:7a:
05:a6:d7:13:5e:87:ca:8e:b5:86:b7:70:6d:a8:e0:
6b:14:2c:37:51:42:6d:91:70:2f:9b:c7:37:d2:8b:
8a:9e:c1:9b:8e:73:bd:a5:4f:05:df:c9:19:b5:ef:
5f:97:0f:4d:71:6a:c6:9a:38:7c:28:b3:6d:0b:84:
de:aa:eb:9a:66:5c:b3:85:49:0e:30:f3:cb:0b:e6:
45:4f:8d:79:dd:8d:60:bf:83:d2:4f:be:91:78:39:
96:69:a9:25:0e:c9:97:67:19:dd:5f:ab:93:4c:c8:
2d:31:84:1a:25:1a:c2:07:94:ef:cf:00:5d:c9:5a:
dd:85:e2:07:75:89:4d:2f:e1:f4:d2:d3:ef:7f:9e:
74:2c:f5:d3:fd:29:65:fb:5d:ca:cd:f3:15:64:6b:
0b:d0:52:48:aa:75:79:59:d3:9e:7b:ac:7a:9f:b9:
89:f3:68:a5:2c:6e:e2:58:c3:c6:25:07:96:58:4d:
db:5e:48:ca:f9:a3:df:58:cd:ad:af:ba:3c:8d:2b:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9F:98:3F:5F:EE:00:29:3E:33:8A:EE:3D:E9:82:C8:69:BD:A2:87
X509v3 Authority Key Identifier:
keyid:C8:2D:46:23:B7:9D:C5:A0:40:07:2C:11:2A:1B:AB:EB:44:16:04:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yC1GI7edxaBABywRKhur60QWBBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D008B/49E62716D75F11EB9BD24B1DC4F9AE02/yC1GI7edxaBABywRKhur60QWBBw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:c3:44:14:7d:2b:64:38:e6:ce:e9:34:cb:9d:46:0b:ec:a9:
eb:96:27:18:41:d5:80:7f:d8:70:e6:c3:15:25:27:3a:4d:c6:
6a:94:09:a2:5f:c6:39:0d:8a:7e:6f:14:3b:8b:27:ab:13:73:
63:b3:8d:c9:e9:10:c9:c5:44:d3:75:5f:94:a5:f9:40:1c:e4:
b9:d1:51:18:82:d5:97:be:51:24:b2:e9:08:d2:21:ca:92:fe:
d7:9d:52:b3:74:81:0f:8a:fd:4d:bc:cf:05:e6:93:55:0a:28:
c0:17:59:94:a6:6c:3c:c1:41:d3:f6:df:8c:05:b0:ab:bd:bd:
fc:80:a7:df:27:93:55:ff:c1:1a:7d:e8:64:11:5b:1d:4a:fe:
98:aa:c7:97:29:e0:c4:c6:37:59:f0:50:e5:44:45:7b:68:4e:
30:70:13:5f:3f:74:04:e8:1a:40:df:6e:20:55:bc:d6:98:90:
3a:e2:d3:7c:d5:22:5b:87:51:14:de:c0:89:d6:bc:40:57:e7:
a5:23:5b:ee:f6:19:17:18:4d:16:2d:17:0d:1d:ae:32:9a:86:
0f:2e:ed:cf:bd:a7:e3:7f:c7:da:88:03:46:86:ed:35:b1:f7:
75:91:24:67:12:78:1e:55:44:56:6f:c8:49:ff:70:03:bb:d5:
c7:93:fc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:38:07 2025 by rpki-client