This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
File: YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft (raw, json)
Hash identifier: /sFVPIfpMC3xCENCMMWS8uCdWPKK/S6pwuyTbTEIMew=
Subject key identifier: 88:CF:0C:DA:2B:EC:B5:C4:B0:13:8A:88:4A:C2:6C:29:C3:BE:57:B8
Authority key identifier: 61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
Certificate issuer: /CN=A91E5832/serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
Manifest number: A9
Signing time: Fri 05 Dec 2025 04:11:53 +0000
Manifest this update: Fri 05 Dec 2025 04:11:52 +0000
Manifest next update: Fri 12 Dec 2025 04:11:52 +0000
Files and hashes: 1: YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl (hash: I9VB3EX478ew1vNUvnZTyc0vUmjcyA9wDbn+9Stnjjs=)
2: A947EC6ED0BA11EFB7A6B027C4F9AE02.roa (hash: gdJaViuBwvdpPTeyFSaMX4mD+CpzF4bPGx3ZYKFPeLA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5832, serialNumber=6147A2A6F106DC56013DC3BCFBA0B4B753ECD1BC
Validity
Not Before: Dec 5 04:11:52 2025 GMT
Not After : Dec 12 04:11:52 2025 GMT
Subject: CN=69325b88-17cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:e5:62:22:b8:4a:3a:2e:a6:d3:7d:c1:ff:
1c:72:82:03:4d:30:b7:5c:80:f0:fe:84:c7:1c:cc:
4d:45:c8:03:33:94:5b:76:be:57:fc:7d:4b:15:8a:
e1:e3:97:36:cb:72:94:4b:9a:6a:2a:4f:7e:63:8a:
06:9a:15:04:da:c7:d8:a7:7d:5a:15:57:8a:e3:79:
3c:64:b4:22:39:df:0f:fb:8e:aa:78:2a:d7:de:03:
23:d8:fc:18:fb:70:ed:cf:e6:e2:37:d1:f4:b0:f6:
5c:fc:09:f6:e4:f8:44:5c:f4:c7:02:79:0f:2c:48:
f6:cb:30:65:33:ff:bb:52:c6:1f:af:da:83:5f:63:
47:10:a0:22:2d:e4:3c:33:5c:e2:40:6d:a8:d5:05:
9b:b9:1d:f7:ee:74:78:af:25:49:60:c7:7c:a3:52:
34:b0:f2:e8:54:e5:55:6f:45:ec:98:00:2a:86:07:
f2:f8:47:4d:49:b2:a6:ba:96:a8:52:cb:02:fb:6a:
b9:c7:4f:db:ac:d8:61:91:78:cf:bb:53:1d:a4:d4:
26:e2:6e:13:76:e4:92:b4:43:3b:c1:b5:06:af:c6:
89:0b:b3:54:1f:75:56:a4:45:2e:ed:e9:bb:28:2f:
b9:3d:1a:35:16:ab:54:36:16:ff:94:42:2c:8c:73:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CF:0C:DA:2B:EC:B5:C4:B0:13:8A:88:4A:C2:6C:29:C3:BE:57:B8
X509v3 Authority Key Identifier:
keyid:61:47:A2:A6:F1:06:DC:56:01:3D:C3:BC:FB:A0:B4:B7:53:EC:D1:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YUeipvEG3FYBPcO8-6C0t1Ps0bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/1ED452ACD0BA11EF896CD026C4F9AE02/YUeipvEG3FYBPcO8-6C0t1Ps0bw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:73:18:e9:86:f4:4a:24:f3:ab:ce:51:81:44:39:0f:27:b1:
7f:d2:3e:b4:8d:f1:f2:bd:f8:22:dc:96:d0:bc:9c:e9:fd:29:
ba:14:e4:ea:1c:d6:8f:09:ac:0d:8a:8c:05:48:ee:fd:e5:70:
eb:b1:69:26:e7:84:f4:00:fb:97:80:6b:f2:54:e1:c7:4f:11:
d9:39:d7:f1:bd:9f:8b:0c:02:fa:00:d6:fa:67:2d:85:67:26:
b8:aa:0a:fb:1f:68:9c:3b:18:85:40:4e:56:af:c4:87:4d:0a:
11:bc:fb:cc:4e:fd:ed:c3:e3:cc:ca:00:67:e8:b3:4a:9b:d1:
e9:85:51:ff:38:1b:f1:64:e2:4a:9c:51:9c:51:09:54:7a:94:
aa:24:5f:76:f3:52:82:42:f3:55:b8:39:d3:d9:92:f1:6c:9a:
94:97:92:d2:98:77:20:07:de:ea:2b:a6:77:e9:d6:87:ad:9c:
96:10:49:62:e4:b2:df:ec:00:4b:39:03:56:c6:50:cc:30:d1:
86:54:da:1f:8d:a3:66:8b:02:c5:ad:04:75:bb:6f:60:d2:e9:
06:16:a5:5d:fb:9e:b0:01:0e:5e:9d:70:97:75:0e:90:c0:6e:
9d:0f:1a:1c:5b:81:f4:26:b4:2b:9d:cc:4c:4a:e3:7a:96:da:
e2:11:9f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:09:58 2025 by rpki-client