This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
File: yVDnh1o97uCC2cxQNQC_3ndwhuE.mft (raw, json)
Hash identifier: bHdSgWJAWWlHq75HpQRXTouNvYwb3nZdwt1mGfx60v8=
Subject key identifier: 5D:2C:E3:A3:21:EF:A1:CB:62:D6:03:16:F3:BD:9E:53:2E:A8:20:65
Authority key identifier: C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1
Certificate issuer: /CN=A9153766/serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1
Certificate serial: 01CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
Manifest number: 01CC
Signing time: Fri 19 Dec 2025 02:03:15 +0000
Manifest this update: Fri 19 Dec 2025 02:03:14 +0000
Manifest next update: Fri 26 Dec 2025 02:03:14 +0000
Files and hashes: 1: yVDnh1o97uCC2cxQNQC_3ndwhuE.crl (hash: pII862W1lpVJZtmcfEv58Q75xIFLecZhzuKkd1pK2e0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl
rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 460 (0x1cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153766, serialNumber=C950E7875A3DEEE082D9CC503500BFDE777086E1
Validity
Not Before: Dec 19 02:03:14 2025 GMT
Not After : Dec 26 02:03:14 2025 GMT
Subject: CN=6944b263-e026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:01:48:a7:dd:ec:1f:d7:33:60:3d:a0:6e:
c4:80:83:cd:99:88:5f:30:43:58:ed:ee:2b:2f:3a:
e9:11:d3:fe:3c:11:16:ee:15:3b:0a:3e:0c:1e:29:
b4:21:ba:90:a7:a3:c3:7f:7c:74:52:a2:97:9d:78:
4a:0b:60:c6:c3:cd:36:9e:72:af:99:54:f8:a8:59:
95:17:a3:0a:df:aa:7d:92:6a:f6:b9:36:50:f5:0d:
3f:82:75:0f:06:21:97:a6:3c:65:02:08:3a:77:a7:
46:b5:01:7c:db:f9:73:49:b4:55:20:46:2d:f5:ad:
c3:89:47:5a:fd:6f:a5:59:d0:3a:f1:99:f4:09:54:
68:7a:b1:62:a8:3a:fe:0c:01:b8:8d:ef:02:3b:30:
aa:76:8e:6e:c2:bb:b7:58:84:25:7d:07:2a:87:37:
f6:17:39:ed:2a:b6:92:5b:b0:48:53:a8:c0:fc:57:
c5:7d:dd:ce:92:bf:ef:62:4f:3d:8f:b8:f6:07:1a:
fd:13:b2:4b:63:02:e0:45:90:f0:55:af:bc:d2:8b:
93:77:05:f0:e9:48:d0:91:b2:d1:9e:bb:48:75:2b:
1a:89:a5:c7:42:e2:3b:f4:00:06:5f:6c:bb:b6:94:
26:97:01:43:04:61:42:08:2a:a2:45:64:2b:02:e3:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2C:E3:A3:21:EF:A1:CB:62:D6:03:16:F3:BD:9E:53:2E:A8:20:65
X509v3 Authority Key Identifier:
keyid:C9:50:E7:87:5A:3D:EE:E0:82:D9:CC:50:35:00:BF:DE:77:70:86:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVDnh1o97uCC2cxQNQC_3ndwhuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153766/DB7CD884167111EE81196247C4F9AE02/yVDnh1o97uCC2cxQNQC_3ndwhuE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:14:60:51:21:18:31:18:3a:7a:8b:8c:9f:b4:b2:03:da:55:
7d:75:9c:19:7f:91:e9:e7:b8:78:96:e9:72:73:8b:3a:44:fe:
76:4b:61:ff:ef:b4:71:11:5c:ed:a9:7f:a6:68:97:36:74:34:
d6:9b:f3:f3:c9:f8:7e:b8:1d:38:3b:e8:e2:06:76:db:61:52:
cd:f9:f5:ba:3d:a5:53:b0:d2:98:10:2d:79:5d:62:d2:a0:91:
b6:b0:13:85:3b:eb:88:2a:6b:d5:b3:94:37:49:08:70:c5:0c:
6d:3d:7b:4b:f6:78:22:47:1a:f3:dc:31:13:91:31:97:31:5e:
84:cc:94:0b:77:3d:6f:ec:a6:d3:50:57:64:7a:48:59:e4:ae:
18:80:14:8c:41:6f:79:cd:4c:23:49:0c:76:23:50:ca:2b:db:
0f:e7:c9:6d:1a:62:3e:d6:a9:ab:67:a0:d2:4a:77:85:8d:d1:
3d:c6:21:27:32:18:f2:b5:92:b7:c0:fd:94:ca:94:52:3a:cb:
ef:2a:a4:af:79:c1:33:f0:ff:11:c7:cb:f4:97:55:76:1b:e5:
29:23:5a:0a:95:fb:ae:59:c1:2b:5e:4d:1d:83:1f:67:84:97:
5b:5f:dd:21:47:3f:38:fd:28:41:f7:00:b6:b5:18:24:95:e3:
b8:59:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:57:29 2025 by rpki-client