This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
File: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft (raw, json)
Hash identifier: 55Ma7xZV4L2lZd6NrfRlvbV7FGtmeM5S6mUwAvvliB4=
Subject key identifier: DB:09:7D:30:18:A2:BE:57:00:9A:90:B7:D5:89:57:9F:25:FC:27:37
Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
Certificate issuer: /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Certificate serial: 0480
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
Manifest number: 0472
Signing time: Thu 18 Dec 2025 23:29:28 +0000
Manifest this update: Thu 18 Dec 2025 23:29:27 +0000
Manifest next update: Thu 25 Dec 2025 23:29:27 +0000
Files and hashes: 1: yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl (hash: d2M6NJZYL0jGlowYB0UvbV3y/WQWvLlVQlGvXuV758w=)
2: 204CB89672C011EC809A5933C4F9AE02.roa (hash: FSPwgNEhxgo+ZEvd+XrJX3+bZfKJ3dVoRc7zxS/PsyU=)
3: E4804004737211EC866EAC24C4F9AE02.roa (hash: TWpB8SYlmQe0Oub87LDVUVN1OX3Mn3l0w0LHkQpg6/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Validity
Not Before: Dec 18 23:29:27 2025 GMT
Not After : Dec 25 23:29:27 2025 GMT
Subject: CN=69448e58-f8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:b0:60:7a:2f:9a:fa:5a:48:cd:85:cf:e4:
23:8e:a0:19:90:ef:ff:07:da:ab:fe:bf:fd:25:0c:
84:d2:05:68:bf:2b:7a:d2:84:9c:43:d4:e5:5d:a8:
dc:9b:f3:67:a6:67:7c:25:61:4b:8f:95:c3:2c:69:
d8:3f:34:89:fe:a1:71:25:22:fe:2d:98:95:36:7e:
96:91:03:42:dc:b4:ed:b8:72:dd:20:59:b0:ad:10:
3c:40:39:6f:f5:ff:41:67:ac:ae:b3:36:58:22:1e:
42:f9:bd:61:4f:6f:44:89:70:b5:9c:b5:d7:9c:7d:
87:b3:67:bc:06:b4:c2:03:f3:45:a4:1e:b9:cc:f0:
9c:35:63:e5:41:03:bf:a7:4d:d1:86:ff:68:3f:d6:
8d:f6:07:db:c4:4a:f7:bd:72:19:f9:1d:c8:08:fc:
98:6f:c2:75:c4:24:b0:f8:8d:35:fd:1d:b8:3e:1e:
3f:5d:08:ee:e1:27:05:e7:6a:4f:da:79:c6:04:d1:
b3:68:f3:0b:14:34:2e:0e:5e:50:e9:a3:09:c5:40:
0a:3d:6b:2a:2a:d4:2d:83:e8:3b:53:53:62:a0:9c:
60:77:68:9d:a1:ba:73:bc:f0:1b:de:0e:bf:87:34:
cd:79:a6:bd:93:94:52:ba:59:e4:4b:2a:e4:1c:c2:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:09:7D:30:18:A2:BE:57:00:9A:90:B7:D5:89:57:9F:25:FC:27:37
X509v3 Authority Key Identifier:
keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:41:a6:53:fc:c3:9e:81:d8:e8:84:68:c9:e7:1b:a8:fb:05:
cb:18:44:38:f0:a0:18:a2:b9:01:26:b7:78:96:1b:e9:5c:75:
dd:ef:6c:76:e5:7c:e6:22:42:b1:21:be:84:c5:d0:de:cf:f3:
82:55:95:67:15:bd:07:e3:dd:82:7b:e8:2a:8a:b1:1c:14:77:
a7:95:53:84:fd:69:16:26:f6:03:1e:5b:d7:fa:54:16:2e:5e:
0a:6d:c8:8d:53:d8:01:2c:39:a2:56:92:e6:c1:a8:a3:1b:37:
84:a2:a0:25:bf:60:b0:65:2e:6f:ff:65:fd:f2:18:ff:3b:c6:
5b:db:96:26:a8:3f:33:54:29:35:a3:78:50:62:f5:2d:25:dc:
b9:59:fc:b9:76:bd:f5:c4:58:3d:61:cd:59:37:24:3e:dd:1f:
1b:2b:8b:76:2b:3b:b6:3e:cb:3c:27:09:4b:17:84:d1:ce:1d:
c5:6d:3c:70:c0:d1:5d:b6:a8:20:82:c1:25:fc:93:69:d4:b7:
d6:14:ee:9c:4e:c5:86:e6:3d:a6:54:b8:09:67:f4:9b:ba:1e:
44:c9:65:4e:2e:a2:e7:a4:02:e2:36:ef:30:72:18:c1:a4:49:
e3:1a:4d:33:43:78:53:8a:60:20:45:5f:d7:87:b8:fa:20:cb:
40:8e:bb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:29 2025 by rpki-client