This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
File: yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft (raw, json)
Hash identifier: 1sDwBOxBhXiMWkVLXyecndTOCXzNgjloBNmSnzz8zEE=
Subject key identifier: A5:62:7B:B7:45:87:BE:F1:D0:DD:BB:D1:15:48:AB:62:80:F6:96:A8
Authority key identifier: CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
Certificate issuer: /CN=A91DE352/serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Certificate serial: 0585
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
Manifest number: 057F
Signing time: Thu 04 Dec 2025 21:55:35 +0000
Manifest this update: Thu 04 Dec 2025 21:55:34 +0000
Manifest next update: Thu 11 Dec 2025 21:55:34 +0000
Files and hashes: 1: yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl (hash: KafoPiCoWfQmSD2Dej10lx2R0r8XDOywqEr8MDnruT4=)
2: F1C77A3C73E711ECA415F87FC4F9AE02.roa (hash: azq2/w0vOg+2swjHdLzDRr5hvzTCb3H9CNSdtAvO6hc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1413 (0x585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE352, serialNumber=CAA6EB99B3FE0EFB65D38F15B2AAE4DC39DAB31D
Validity
Not Before: Dec 4 21:55:34 2025 GMT
Not After : Dec 11 21:55:34 2025 GMT
Subject: CN=69320357-1126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:b6:a4:3d:e6:17:33:3a:d0:7f:01:bb:b8:
d8:cd:5c:58:24:ec:57:31:23:c6:d2:b9:8f:aa:7e:
34:e6:59:90:d4:14:77:01:d0:3e:39:3b:9a:a9:f7:
27:af:e7:70:32:fa:a0:e6:e6:73:8e:b9:7c:3c:66:
c3:7c:60:c1:f8:bf:5f:70:6a:03:c1:85:5e:fe:d6:
89:d8:28:c0:b5:b7:74:9e:7c:0c:55:fc:16:85:20:
5d:62:ce:93:e6:10:55:9a:2c:32:71:90:a0:8c:84:
b5:ce:dd:c1:2a:5c:10:21:78:e3:3e:2c:ab:c1:33:
30:f0:9e:21:40:1d:bc:6a:93:fc:69:b0:ad:15:e6:
6f:5c:93:43:c6:46:91:22:04:9d:b8:1f:c6:cf:03:
7f:a9:d5:3e:24:88:d1:71:11:65:90:a5:8e:30:ca:
95:1a:5f:67:5a:b9:c1:10:65:aa:47:ad:b0:d7:75:
7a:e4:8c:5a:74:23:98:50:9c:e4:18:4e:db:ba:1d:
6f:63:4d:26:74:da:91:a9:e6:8d:0b:4c:ab:da:8d:
f9:d4:2f:ef:37:12:b0:55:28:30:a6:d8:6b:fd:5a:
3d:f5:ec:c9:a3:c4:47:1c:a4:2b:f7:3f:2e:26:cb:
04:36:ec:a6:1a:ca:b6:a9:e7:26:49:4d:ca:96:69:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:62:7B:B7:45:87:BE:F1:D0:DD:BB:D1:15:48:AB:62:80:F6:96:A8
X509v3 Authority Key Identifier:
keyid:CA:A6:EB:99:B3:FE:0E:FB:65:D3:8F:15:B2:AA:E4:DC:39:DA:B3:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqbrmbP-Dvtl048Vsqrk3Dnasx0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE352/C8E22E8A011611EC9CCDE722C4F9AE02/yqbrmbP-Dvtl048Vsqrk3Dnasx0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c7:ce:a1:0b:1f:73:52:43:b5:59:84:78:04:bd:17:69:6c:
db:fb:6c:ec:83:98:ee:4b:c8:a4:b0:dc:ba:43:59:59:65:1d:
d2:8f:80:0a:48:52:3d:39:75:52:6e:c5:af:9e:4c:07:15:2e:
e0:d8:70:e0:df:20:89:6e:a3:ea:a3:9f:d4:a1:c9:a3:d1:bd:
7b:d2:6c:0a:89:cc:8c:1d:e4:a8:25:57:7f:9e:a5:85:36:5c:
a2:20:ce:a5:1a:f9:72:5e:4e:f5:80:46:2d:77:b3:bd:d8:a2:
16:1e:02:13:b4:cb:27:6b:e4:c2:56:68:0f:76:37:7a:52:a1:
24:96:50:ae:19:76:8a:47:43:b5:5d:b4:5a:7a:c5:10:07:a7:
09:be:99:77:64:89:1a:78:c6:2c:72:a7:84:68:99:5a:d7:7f:
18:14:11:61:3c:35:91:c3:5c:66:df:00:ae:e0:ec:f8:6a:f8:
af:fa:dc:db:a8:58:dc:06:98:35:db:89:bb:77:e7:b4:13:f2:
ef:cf:7e:59:dd:ca:66:fc:17:78:e6:36:3b:4c:2c:10:05:8b:
c2:cd:93:e6:d6:ac:f2:4d:cc:b4:08:fa:7f:c7:33:53:c4:16:
05:52:48:6c:da:6c:e3:04:9b:e6:46:a6:4a:45:9c:c1:6d:b1:
19:c7:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:14:25 2025 by rpki-client