This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
File: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft (raw, json)
Hash identifier: temdVYtHGm+rXC4mG0q8AsJ/9BvRx5kLflsen5v2/o0=
Subject key identifier: 79:88:A7:E6:70:EE:EB:E6:06:85:9E:D3:98:A3:97:D0:4E:F3:EB:09
Authority key identifier: 63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
Certificate issuer: /CN=A914D0AF/serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Certificate serial: 6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
Manifest number: 04A7
Signing time: Thu 18 Dec 2025 23:38:44 +0000
Manifest this update: Thu 18 Dec 2025 23:38:43 +0000
Manifest next update: Thu 25 Dec 2025 23:38:43 +0000
Files and hashes: 1: Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl (hash: s5l7o7aKYGZQ5YPFYODXoOma4Q764ySp6Zt8fRyxxVM=)
2: F83346DA410211F097F43F85C4F9AE02.roa (hash: EnqZyVfj3TKzoAvrOL6tNqUILt/NgCo/Yq0hgyekdPE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D0AF, serialNumber=63B701B72706F3190BEF8BFBFA34FFA33F4F6BD6
Validity
Not Before: Dec 18 23:38:43 2025 GMT
Not After : Dec 25 23:38:43 2025 GMT
Subject: CN=69449083-9b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:07:87:26:9f:0a:e4:18:79:a0:5a:c2:b1:
33:97:05:61:b4:37:57:63:95:fb:19:19:45:bc:bf:
4f:5d:d6:2b:82:3c:29:c2:39:fa:a2:c3:e6:21:0f:
a7:9f:9f:e9:e7:79:be:bf:c9:e0:6b:5f:84:df:fe:
97:58:97:17:4d:dd:86:d6:2b:aa:be:16:81:a3:06:
7d:7b:ff:0e:a0:f7:d6:58:ee:d3:e9:d2:79:b6:4e:
a8:6e:2c:a6:c6:66:cb:8d:c2:5c:8f:a1:94:5d:36:
5a:db:e4:8a:3b:a6:d2:97:00:89:29:4f:7e:ca:2e:
b3:dc:b6:55:13:e2:25:ab:4a:d1:b6:69:00:91:1a:
53:52:24:e1:69:49:65:f8:94:a0:b9:0f:07:2d:a4:
3b:f1:4d:28:2c:05:ea:e3:0d:cf:00:dc:75:20:7b:
79:34:82:8b:b2:a6:b2:29:da:af:1a:0e:c5:e4:af:
aa:40:32:1b:29:d9:84:ac:ec:b5:c2:4a:b2:5a:57:
90:12:a3:e9:43:1e:57:d4:2c:6d:7e:7d:9e:71:60:
7b:ed:a3:d8:73:62:18:ae:eb:ea:87:06:56:ba:20:
87:99:5a:cc:a4:45:37:5d:e0:7d:e9:6b:bc:86:6a:
cf:59:3c:38:bf:7f:d3:4f:cd:97:b7:43:4a:c6:96:
00:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:88:A7:E6:70:EE:EB:E6:06:85:9E:D3:98:A3:97:D0:4E:F3:EB:09
X509v3 Authority Key Identifier:
keyid:63:B7:01:B7:27:06:F3:19:0B:EF:8B:FB:FA:34:FF:A3:3F:4F:6B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/Y7cBtycG8xkL74v7-jT_oz9Pa9Y.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:04:22:cd:01:6b:ac:3c:d3:59:dd:63:6a:da:95:73:fb:96:
12:72:b4:4c:d7:fe:2f:2d:5d:87:fa:0a:10:99:e5:dc:74:64:
83:0f:78:f1:2e:74:9c:a5:b8:b5:c8:f9:f6:bb:88:6b:d9:28:
56:7c:f0:e7:d1:6c:e6:e6:13:1e:b3:0f:df:e8:8e:47:55:9b:
35:98:65:ac:bb:a8:81:7a:d0:1a:be:ec:df:fa:6b:6e:70:b1:
5a:1a:9e:bc:b9:b5:16:82:3d:6b:93:c2:2f:1b:5a:c9:ea:d4:
29:89:bc:60:17:80:9c:50:95:0b:a4:8c:c8:e9:46:5c:e2:e1:
14:ed:7c:50:80:31:a4:b2:8b:2d:4c:3f:c2:41:09:a3:6f:91:
7d:db:70:05:7f:94:bf:b2:9f:4f:d0:d6:c9:c6:d7:d2:10:b6:
a5:7c:dd:12:c7:86:67:9c:cc:da:ba:56:93:1d:7a:a1:cd:49:
83:76:5d:e6:7f:eb:be:70:fd:c8:60:53:96:92:97:99:72:56:
01:ca:1f:fa:3a:46:4f:03:5e:45:05:d0:f1:91:c9:a1:c1:6e:
23:ba:24:61:90:30:c2:a5:7b:4e:9b:67:44:90:d8:04:f4:51:
ec:23:1f:89:25:1c:bd:13:a0:e2:b5:c0:37:df:08:b1:54:eb:
db:01:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:49 2025 by rpki-client