This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
File: YWPctdU7SHLhWVY-kPxeQa0ALC0.mft (raw, json)
Hash identifier: KVqr0jAoI84qAYQSXjjXS24k2bVkf4kHvAEOKoVVzoU=
Subject key identifier: 07:74:97:F7:BF:2D:1B:A4:A0:E1:0F:65:4D:BE:78:80:AA:84:D6:85
Authority key identifier: 61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
Certificate issuer: /CN=A9174282/serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Certificate serial: 04E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
Manifest number: 04DC
Signing time: Thu 18 Dec 2025 23:08:04 +0000
Manifest this update: Thu 18 Dec 2025 23:08:03 +0000
Manifest next update: Thu 25 Dec 2025 23:08:03 +0000
Files and hashes: 1: YWPctdU7SHLhWVY-kPxeQa0ALC0.crl (hash: x133CAe9AsVhA1TQP0cB4cK7ShMVJ5lSL2UdBJe7qUs=)
2: BDE72518479C11EC8861323FC4F9AE02.roa (hash: BWw+T22BkT4RWRTHKZZjPZLkInjp8GW8fJQ94reWXKk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250 (0x4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174282, serialNumber=6163DCB5D53B4872E159563E90FC5E41AD002C2D
Validity
Not Before: Dec 18 23:08:03 2025 GMT
Not After : Dec 25 23:08:03 2025 GMT
Subject: CN=69448954-1468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:9c:83:91:c4:83:bc:d6:99:9f:32:05:13:
c4:fd:16:b7:ce:e2:f9:ff:27:57:e2:bd:04:75:06:
59:44:0d:f7:df:9a:87:e9:fd:8e:4c:d7:5b:9d:8f:
b0:d1:ed:ec:8a:f0:3c:fb:6e:ec:0f:16:dd:94:7f:
b8:8d:2c:be:75:10:4e:24:b6:9d:03:32:29:25:ab:
3a:92:e9:b2:20:01:33:6f:af:1c:74:9e:b4:ed:7d:
71:b9:4f:41:a2:52:ad:bf:d2:e7:ee:db:49:b8:5d:
77:05:43:5f:cd:05:4f:2b:44:ba:f8:f0:cb:95:b1:
98:a4:14:13:ad:0a:9a:b0:0c:45:8b:29:7c:cc:e2:
f0:2c:86:35:90:d0:fa:d6:92:f9:12:eb:2b:ae:1b:
66:ab:76:44:44:ae:25:f9:4f:10:df:04:7d:63:8d:
fa:cd:13:30:b8:e6:41:07:23:63:e0:1b:46:eb:0f:
ec:ea:40:95:34:e1:53:65:3a:ee:66:e6:fc:56:55:
cc:9d:90:ac:b8:b2:79:b7:5e:69:47:8a:0c:0d:36:
09:c8:9c:b2:8f:0e:1b:e4:57:96:32:6b:cc:92:92:
18:5c:a1:a4:b7:d4:83:01:b6:dc:c0:04:2a:10:e5:
7d:04:da:f4:2f:69:21:63:07:79:2d:e8:13:93:27:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:74:97:F7:BF:2D:1B:A4:A0:E1:0F:65:4D:BE:78:80:AA:84:D6:85
X509v3 Authority Key Identifier:
keyid:61:63:DC:B5:D5:3B:48:72:E1:59:56:3E:90:FC:5E:41:AD:00:2C:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YWPctdU7SHLhWVY-kPxeQa0ALC0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174282/97143376479811ECB03D5538C4F9AE02/YWPctdU7SHLhWVY-kPxeQa0ALC0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:8c:bf:48:6e:a3:df:aa:0e:dd:5e:5b:33:d1:e7:d7:cb:1c:
e8:45:8f:75:80:19:65:be:b4:a9:4f:e0:15:1a:d0:94:44:b1:
8a:2a:b1:07:cf:2e:2f:59:d3:68:eb:1e:7a:7f:be:ef:9a:81:
17:56:c1:88:fd:bd:c4:7d:ad:25:3c:f4:27:86:a1:48:42:50:
a6:35:ba:ea:54:5c:5f:18:82:73:85:dc:6e:c1:3f:8a:25:59:
f3:15:fa:24:5a:8b:f9:90:de:9a:36:9e:34:29:28:75:9c:2c:
e7:df:d3:6a:26:46:f1:ce:c7:23:92:d1:09:a5:5d:07:53:5f:
86:e8:71:c9:2e:c2:05:fd:0f:ff:6f:15:e1:a1:c4:13:2f:fd:
38:e1:9b:a3:23:fd:c1:ec:e3:55:0c:c0:15:28:38:e6:33:a4:
7d:02:21:6c:57:83:75:f0:15:4c:c0:81:ea:5c:76:ad:fa:eb:
39:cf:e6:51:eb:90:37:a2:ff:31:f8:49:c0:e0:20:29:e3:af:
61:64:40:d7:fd:2c:da:c6:fc:7b:1d:47:96:68:f0:29:62:42:
82:1e:d6:fb:8f:cc:6b:d6:d3:0d:8a:8f:bd:44:91:13:70:6b:
3a:a2:ef:02:37:01:45:81:dc:dd:83:a1:11:0b:db:30:7a:c7:
82:4c:42:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:36 2025 by rpki-client