This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
File: ySRgFCV-7__-gM0-q_7WeomNb1c.mft (raw, json)
Hash identifier: CINxFqnKq59QEW5xbd5NULEpsa1EmBgWcEC9m+9+mXY=
Subject key identifier: 72:CB:DD:AF:78:EF:51:63:C0:A9:BA:47:D2:AA:BB:CA:E0:59:48:98
Authority key identifier: C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
Certificate issuer: /CN=A91F9766/serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Certificate serial: 9C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
Manifest number: 9A
Signing time: Fri 05 Dec 2025 04:23:01 +0000
Manifest this update: Fri 05 Dec 2025 04:23:01 +0000
Manifest next update: Fri 12 Dec 2025 04:23:00 +0000
Files and hashes: 1: ySRgFCV-7__-gM0-q_7WeomNb1c.crl (hash: aAYTmID4p9hc07gT5pT14ky/oTDBZMiZ98xCLk4xQcM=)
2: 28CED806EA5811EF90C1D323C4F9AE02.roa (hash: b2BcNMesZ27DQqzlZd7MPdoju4HvYEGHIF6wjO+48TQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl
rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156 (0x9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9766, serialNumber=C9246014257EEFFFFE80CD3EABFED67A898D6F57
Validity
Not Before: Dec 5 04:23:01 2025 GMT
Not After : Dec 12 04:23:00 2025 GMT
Subject: CN=69325e25-6ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:56:5d:36:55:5f:8a:f4:55:7e:cb:5f:05:
d6:f5:8e:ad:29:6f:a9:48:dc:68:65:6d:21:cc:35:
92:e0:bc:8d:98:3f:f2:39:f4:b4:01:5f:f7:84:af:
e7:24:5d:bf:5b:d5:a2:71:5c:d9:f6:de:4f:cf:90:
1f:4e:e0:91:60:86:6f:16:5d:de:ec:ce:b9:4a:11:
d8:54:9e:71:19:90:68:c1:1e:b6:cc:e5:fc:f3:b8:
79:4b:9f:ed:80:d3:07:58:c4:f3:78:1b:02:13:65:
0c:72:da:1c:3a:67:a1:7a:47:e1:d8:da:92:f3:70:
2b:fd:e9:5b:3c:2e:4d:e4:a0:05:3b:fe:4f:ae:ea:
cd:a8:ef:4c:e9:40:7b:1d:03:0c:c5:4a:9f:11:4d:
86:22:3b:06:b3:8f:65:e1:2b:1a:37:53:1f:ec:8d:
53:2a:f9:7a:ed:73:6d:1a:28:c6:34:4a:77:22:20:
08:a4:b6:ad:bd:33:7f:6d:c1:3d:81:90:28:25:17:
1a:d1:8f:5b:f8:51:fa:33:5b:ca:8b:e2:74:dd:c6:
95:15:f4:b2:80:a9:b2:86:ab:7c:31:df:57:8b:32:
2a:9c:01:53:5f:99:19:27:7a:21:c7:42:4b:20:c5:
47:77:1f:bc:c5:1b:66:37:10:8f:94:05:f3:00:18:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CB:DD:AF:78:EF:51:63:C0:A9:BA:47:D2:AA:BB:CA:E0:59:48:98
X509v3 Authority Key Identifier:
keyid:C9:24:60:14:25:7E:EF:FF:FE:80:CD:3E:AB:FE:D6:7A:89:8D:6F:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ySRgFCV-7__-gM0-q_7WeomNb1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9766/80F59E94EA5711EFB42CB285C4F9AE02/ySRgFCV-7__-gM0-q_7WeomNb1c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:86:1a:8d:e1:31:fc:6c:26:32:84:76:10:b8:25:82:1e:81:
14:5c:fd:26:32:a8:e7:97:08:7a:75:01:6f:c3:62:6f:aa:07:
59:2f:b5:c7:18:aa:42:c3:de:4e:21:05:f9:da:b1:ea:22:85:
9f:e5:a3:82:df:f2:70:c2:94:35:74:db:09:d9:32:25:61:8e:
ea:a9:68:16:ac:e4:79:1a:a5:31:e2:44:cb:c7:f4:f7:4e:32:
bc:83:26:7a:f1:d0:a4:e9:99:f5:3e:89:44:18:6f:e0:3a:b2:
2c:b5:81:3c:eb:b9:51:bf:10:16:29:49:6a:9f:b7:3b:65:b5:
ad:4f:97:1f:30:c8:bb:fa:d0:20:0a:8c:6e:3b:0e:45:0e:9a:
34:95:34:72:8a:f0:77:71:6f:9e:47:88:50:83:de:e1:98:6f:
3b:b2:e9:04:97:82:d5:c2:7c:b1:83:dd:5f:f1:7e:a7:e4:c6:
ab:92:f1:5d:14:45:73:7d:3e:9b:39:18:09:1b:fb:6b:2c:b3:
3f:60:33:8d:33:7d:50:61:83:5d:21:a6:c0:94:3d:75:90:79:
53:d8:94:e9:c8:37:e6:36:8a:2a:2c:6d:b1:df:18:44:af:18:
2d:d8:b6:c8:af:89:40:d2:f8:ec:88:15:5f:f0:7a:bc:38:c6:
20:0f:24:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:25:28 2025 by rpki-client