This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
File: iYrzg32E84lHqDXAY8hI1wGI7IY.mft (raw, json)
Hash identifier: Db9B7tLc5yhiDSdfJNClWfYnAAbl/n+uhxHUlb0Jxhw=
Subject key identifier: 8B:37:6F:C5:71:50:41:76:C4:49:24:D0:6D:D0:B1:74:96:89:5F:73
Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
Certificate issuer: /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Certificate serial: 083E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
Manifest number: 097D
Signing time: Thu 18 Dec 2025 20:20:54 +0000
Manifest this update: Thu 18 Dec 2025 20:20:53 +0000
Manifest next update: Thu 25 Dec 2025 20:20:53 +0000
Files and hashes: 1: iYrzg32E84lHqDXAY8hI1wGI7IY.crl (hash: PEuhocIDGdomspdMND3Nxooyh2mAK5Zi6hs8Ry9MRYw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 20:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2110 (0x83e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916E9F4, serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Validity
Not Before: Dec 18 20:20:53 2025 GMT
Not After : Dec 25 20:20:53 2025 GMT
Subject: CN=69446225-a8ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:05:be:18:16:67:e0:b3:fd:81:9a:13:1f:
00:41:d7:dc:4a:52:e1:79:da:9c:a3:34:aa:1f:ce:
68:c6:4b:0f:71:17:da:52:37:6a:0c:b0:0a:bd:0d:
4e:37:54:95:2a:49:50:da:05:b4:7f:03:8c:e1:fc:
4a:ae:7c:2f:13:41:d8:13:02:2f:70:2d:37:31:ec:
10:31:e8:a3:7e:9f:bb:5a:e6:05:11:71:dc:66:4a:
79:9f:d8:18:78:20:4b:bb:91:5c:36:a7:19:59:8e:
5b:1a:09:63:7a:bb:e9:74:c4:a6:45:41:2a:b4:d2:
cb:57:2d:9a:61:b9:38:81:3f:4a:da:6d:cd:aa:b1:
08:a4:b6:51:34:14:e7:ac:04:d7:43:c4:3a:d8:da:
60:90:96:d7:b0:a8:c4:3e:a9:0e:2a:7b:b1:c6:a9:
01:ca:fe:ba:9c:60:76:19:b9:7e:54:b9:37:38:ca:
e6:a4:80:5b:10:01:6b:82:ce:52:18:ea:7e:34:ab:
92:45:d9:6f:91:2d:6a:d7:2f:e1:59:eb:cc:e3:1c:
1d:73:52:06:eb:64:d0:d1:25:44:ae:e1:fc:95:81:
f9:16:9c:73:6f:37:3b:7d:41:43:02:2e:a2:d3:84:
e7:0e:17:be:4d:22:87:22:e6:3d:12:5a:3d:4b:9c:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:37:6F:C5:71:50:41:76:C4:49:24:D0:6D:D0:B1:74:96:89:5F:73
X509v3 Authority Key Identifier:
keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:76:14:eb:26:b9:86:bf:fb:73:dd:83:08:27:74:37:eb:97:
43:b9:51:ae:4f:47:03:c4:9b:cf:d8:74:f6:16:90:45:f5:97:
51:98:e0:18:3d:0f:d7:8a:3a:8e:18:08:2a:33:c6:63:0f:ce:
69:3f:42:4f:fb:76:95:15:5b:c1:8e:32:29:69:0a:0e:26:37:
ea:0e:2b:35:5e:c6:ac:1b:e0:03:0d:a2:03:5a:1c:e9:1a:c2:
33:78:d8:95:4a:1e:e3:91:34:41:99:55:56:75:ee:90:39:1f:
b5:0e:72:dd:7f:54:3b:09:e3:58:8b:05:5e:b1:58:fa:28:68:
08:51:2a:a3:92:1e:ee:ff:ee:2a:66:3b:60:49:80:c5:82:57:
22:5c:62:dc:f7:2c:38:94:82:92:db:36:d2:bd:00:1f:a7:32:
2a:92:cb:57:b3:98:cb:5a:48:44:d3:dc:19:03:f2:c7:b0:b4:
3b:77:c9:83:ca:16:26:77:42:88:03:bc:14:23:e2:09:aa:ff:
da:40:9b:a7:9b:fe:0f:b6:28:0e:24:5d:58:64:05:bb:8d:fb:
bd:4b:a7:d5:7f:d4:e0:10:e9:46:74:07:b8:e5:49:5e:06:ca:
b7:ff:00:8d:a9:ea:a1:df:0d:13:68:3b:59:48:19:38:f3:83:
d7:2a:f4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:44:50 2025 by rpki-client