This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
File: yLK8O4qx665KdD-Q2Mih39HUzhc.mft (raw, json)
Hash identifier: TQDevJZn6kVj3a+M0kbMf88k89IyJTljhxVSFni5NPE=
Subject key identifier: 1E:56:FA:62:A1:7F:4C:60:9C:6A:20:33:8B:89:FD:D9:02:FF:79:0E
Authority key identifier: C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
Certificate issuer: /CN=A9113493/serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Certificate serial: 81
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
Manifest number: 7D
Signing time: Fri 19 Dec 2025 05:46:45 +0000
Manifest this update: Fri 19 Dec 2025 05:46:45 +0000
Manifest next update: Fri 26 Dec 2025 05:46:45 +0000
Files and hashes: 1: yLK8O4qx665KdD-Q2Mih39HUzhc.crl (hash: DHoVLnaSlDTjbc2semYbF/ZAsslT8SzscBQgoan+XQs=)
2: 758E8E941EFA11F0A6533A31C4F9AE02.roa (hash: hVkpqBz8Nr9HJbp7PiFoLwVsufH9j8FcqYll8CUZa9c=)
3: 8C19B3A21EFD11F0B822DF56C4F9AE02.roa (hash: qPzJ/oeyp8XIlVlZetvJbilZBw8geUbM+mpNnzYDNLQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:46:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113493, serialNumber=C8B2BC3B8AB1EBAE4A743F90D8C8A1DFD1D4CE17
Validity
Not Before: Dec 19 05:46:45 2025 GMT
Not After : Dec 26 05:46:45 2025 GMT
Subject: CN=6944e6c5-0f21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:d7:e0:ac:21:3b:03:4e:05:dd:23:7d:d6:
44:f8:68:dc:fd:9d:76:d2:2c:9b:0c:db:de:9a:d0:
91:04:7f:59:a0:2f:16:36:c0:72:69:1e:da:a2:cc:
85:42:92:55:d7:ff:fd:70:13:6f:0f:98:8f:8c:39:
4c:af:90:45:6a:bd:e7:7c:3b:1b:d2:67:b9:4d:15:
8c:a8:4d:38:b0:df:58:1e:86:28:13:0a:07:b4:0d:
d7:92:df:36:b2:99:68:0b:a5:e4:04:b1:ba:a2:38:
4e:1c:a3:94:9a:75:3e:e2:c1:84:9a:bf:e8:06:3d:
b1:a0:a8:76:b8:86:9a:f9:c9:1b:3e:eb:53:68:e8:
65:90:ac:ee:c8:ec:b3:e1:7e:1d:df:c2:b3:c2:b4:
c5:08:72:f4:28:34:48:0d:ce:f9:b2:67:3d:c7:b5:
d4:8d:42:65:68:52:66:79:8c:e5:51:6c:ae:37:2d:
fa:4a:da:68:9a:28:d1:a6:6c:be:19:44:98:a7:f6:
c8:c3:6a:2b:fe:d9:a5:e2:33:89:73:05:dd:b1:9e:
ea:53:a6:9f:4d:86:0b:f8:b1:07:75:f4:17:48:3f:
9b:9e:81:cf:77:73:94:77:38:c5:c9:82:78:8e:a4:
f0:34:72:08:79:c4:e1:33:a4:07:2a:fe:d7:29:7d:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:56:FA:62:A1:7F:4C:60:9C:6A:20:33:8B:89:FD:D9:02:FF:79:0E
X509v3 Authority Key Identifier:
keyid:C8:B2:BC:3B:8A:B1:EB:AE:4A:74:3F:90:D8:C8:A1:DF:D1:D4:CE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yLK8O4qx665KdD-Q2Mih39HUzhc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113493/05EC1D141EF911F0B411E32EC4F9AE02/yLK8O4qx665KdD-Q2Mih39HUzhc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:d4:39:22:f3:19:84:ec:aa:0e:11:66:3c:25:1b:79:91:26:
ed:40:81:c1:91:43:2f:90:19:6f:00:be:e8:27:1d:c1:36:f5:
6b:66:ec:30:1e:c1:cb:3b:f4:43:db:bf:35:46:fd:8f:72:21:
51:dc:4c:65:7e:8d:b1:73:86:89:73:5a:d3:47:8a:fb:2f:03:
6c:c3:19:60:33:6a:83:f2:65:61:14:20:71:bd:03:53:cf:3f:
6f:fd:f0:bc:20:73:e9:14:86:bd:3b:54:20:05:b6:eb:40:54:
5d:b3:5d:cf:4e:43:75:f7:76:f6:42:9e:02:86:2f:0f:1d:a4:
a3:ee:9e:4f:01:3c:6b:24:a9:ca:02:83:29:a8:11:21:94:16:
4c:8f:f4:8c:4c:5f:69:ae:e0:58:b4:cb:13:e6:92:0a:45:04:
01:25:d5:9a:0b:3c:1e:20:15:f0:32:9e:3c:a2:fb:bf:58:1d:
ec:88:29:24:5d:e7:c2:f9:64:9c:43:d0:f0:9b:03:4e:bc:44:
97:b2:02:e0:c6:9d:f1:02:ef:ce:81:1b:18:2b:da:91:ad:0a:
dc:ba:c3:47:d4:b8:88:ac:69:c1:65:71:1f:43:6a:2f:a9:ec:
2f:9d:28:fb:c2:7e:f9:51:2a:64:58:52:f8:81:c0:79:08:36:
f5:05:49:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM0OTMxMTAvBgNVBAUTKEM4QjJCQzNCOEFCMUVCQUU0QTc0M0Y5MEQ4QzhBMURG
RDFENENFMTcwHhcNMjUxMjE5MDU0NjQ1WhcNMjUxMjI2MDU0NjQ1WjAYMRYwFAYD
VQQDDA02OTQ0ZTZjNS0wZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn/XX4KwhOwNOBd0jfdZE+Gjc/Z120iybDNvemtCRBH9ZoC8WNsByaR7aosyF
QpJV1//9cBNvD5iPjDlMr5BFar3nfDsb0me5TRWMqE04sN9YHoYoEwoHtA3Xkt82
sploC6XkBLG6ojhOHKOUmnU+4sGEmr/oBj2xoKh2uIaa+ckbPutTaOhlkKzuyOyz
4X4d38KzwrTFCHL0KDRIDc75smc9x7XUjUJlaFJmeYzlUWyuNy36StpomijRpmy+
GUSYp/bIw2or/tml4jOJcwXdsZ7qU6afTYYL+LEHdfQXSD+bnoHPd3OUdzjFyYJ4
jqTwNHIIecThM6QHKv7XKX1IUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB5W+mKh
f0xgnGogM4uJ/dkC/3kOMB8GA1UdIwQYMBaAFMiyvDuKseuuSnQ/kNjIod/R1M4X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzQ5My8wNUVDMUQxNDFF
RjkxMUYwQjQxMUUzMkVDNEY5QUUwMi95TEs4TzRxeDY2NUtkRC1RMk1paDM5SFV6
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lMSzhPNHF4NjY1S2RELVEyTWloMzlIVXpoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzQ5My8wNUVDMUQxNDFFRjkxMUYwQjQxMUUzMkVDNEY5QUUwMi95TEs4TzRxeDY2
NUtkRC1RMk1paDM5SFV6aGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBi1Dki8xmE7KoOEWY8JRt5kSbtQIHBkUMvkBlvAL7oJx3BNvVrZuww
HsHLO/RD2781Rv2PciFR3Exlfo2xc4aJc1rTR4r7LwNswxlgM2qD8mVhFCBxvQNT
zz9v/fC8IHPpFIa9O1QgBbbrQFRds13PTkN193b2Qp4Chi8PHaSj7p5PATxrJKnK
AoMpqBEhlBZMj/SMTF9pruBYtMsT5pIKRQQBJdWaCzweIBXwMp48ovu/WB3siCkk
XefC+WScQ9DwmwNOvESXsgLgxp3xAu/OgRsYK9qRrQrcusNH1LiIrGnBZXEfQ2ov
qewvnSj7wn75USpkWFL4gcB5CDb1BUmA
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:26:23 2025 by rpki-client