This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
File: yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json)
Hash identifier: NV1knAFnuZNw5xvHAXEfIMqVqeIf91Usx8zqs3n7M/U=
Subject key identifier: F5:3D:9D:64:A4:8A:7F:E9:55:36:BF:D6:E9:9B:FC:CF:DF:9A:D7:29
Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
Certificate issuer: /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
Certificate serial: 14E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
Manifest number: 14DF
Signing time: Sat 20 Dec 2025 16:36:35 +0000
Manifest this update: Sat 20 Dec 2025 16:36:34 +0000
Manifest next update: Sat 27 Dec 2025 16:36:34 +0000
Files and hashes: 1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: 6tmnwAYEQknONDj5gZCqb9E85ojPnjzkRuIU3f0YkbI=)
2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: qMSCkly2yZL3CFa4gyeyJcHfUwBPGsoJ5cdg2NmD+/U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl
rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5346 (0x14e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
Validity
Not Before: Dec 20 16:36:34 2025 GMT
Not After : Dec 27 16:36:34 2025 GMT
Subject: CN=6946d092-385a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:8d:88:c5:89:f5:83:86:1c:60:d0:b7:46:
63:a3:1b:c8:8f:a5:1b:89:61:b4:68:c0:16:f2:23:
b8:fc:92:ad:69:57:3b:20:f1:3a:87:3f:87:b4:eb:
2b:1e:18:cd:b8:ec:1f:76:2c:04:bd:0a:1f:bb:b4:
70:36:8e:d9:14:d2:11:43:25:f1:c2:21:a9:fe:4c:
88:54:86:6d:3f:93:19:43:93:55:ef:d3:cd:c4:0c:
7d:4b:8d:ec:eb:ef:f1:2c:47:d8:64:f5:ac:fa:7b:
1f:69:fd:9c:66:76:b7:e7:ae:3e:75:46:ae:75:1c:
b3:8d:26:c7:2f:51:f1:b3:e7:f5:09:95:1e:88:f4:
d6:e4:4a:04:86:8c:d0:4f:dc:4a:b6:b2:9d:c4:f4:
30:a3:6c:eb:78:20:2b:2f:41:e5:8f:24:ef:d0:c3:
25:0b:07:4d:80:0b:ac:b6:76:a0:56:1f:7e:c0:3e:
40:5c:0e:cc:20:49:8a:da:64:d2:7a:72:71:ea:bf:
8d:18:83:ea:5d:7b:34:4d:fe:bd:82:58:0a:8f:4a:
0e:ab:4e:38:0c:d2:d8:13:00:88:93:48:66:cc:7a:
28:58:46:ce:b7:c7:e8:e7:03:86:88:d8:91:f5:4f:
93:01:6a:01:20:4b:24:4f:ac:12:31:5a:0d:43:53:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3D:9D:64:A4:8A:7F:E9:55:36:BF:D6:E9:9B:FC:CF:DF:9A:D7:29
X509v3 Authority Key Identifier:
keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:61:3d:b1:d7:24:38:1c:bd:59:8e:39:3b:fe:de:15:7e:d3:
9f:37:c6:2d:84:71:6a:b9:16:61:b7:dd:c1:96:da:90:4d:bd:
04:22:e1:3c:33:ee:78:32:89:c2:ec:ce:72:00:a1:c1:03:5f:
33:2a:a6:20:aa:7d:8f:13:d0:ad:ea:01:88:28:e5:ab:be:39:
51:36:1e:fd:d1:1e:2f:1b:de:a2:4d:7a:4d:cb:51:3d:08:73:
45:a6:e7:4a:c5:56:80:2d:e8:5a:ce:a5:d5:09:a4:29:96:62:
6c:14:2b:f5:5b:9a:30:fc:cc:9b:af:a0:77:84:c4:d6:9d:00:
1e:95:bb:65:db:d7:60:39:b1:a2:1c:88:64:25:07:67:e2:46:
7c:3c:3b:11:4d:80:35:90:ef:ee:23:40:cb:02:a2:d7:1f:99:
04:9b:45:43:dd:34:0d:f0:8f:85:2f:50:53:51:02:a2:2f:4c:
70:c4:cc:14:dc:ee:d8:77:46:37:29:1e:61:fc:3a:70:25:75:
c7:a3:d1:97:a4:d6:14:2d:f5:d4:e8:f6:fd:80:3b:da:50:34:
f8:92:b0:c3:5c:15:fb:97:54:71:c5:08:42:52:e9:49:05:39:
1e:7e:95:14:05:ed:38:a3:d4:9f:79:d3:e7:78:91:a3:ea:d5:
ac:03:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 13:12:46 2025 by rpki-client