This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
File: yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json)
Hash identifier: QYRwNWKk96ei+hZblhLeRxjRBQ8yY1CUAjR94sq2kfQ=
Subject key identifier: 19:2B:67:6A:02:8E:76:99:94:25:49:F4:2B:14:C7:48:6F:A0:B1:BA
Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9
Certificate issuer: /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
Manifest number: EE
Signing time: Sat 27 Dec 2025 04:15:15 +0000
Manifest this update: Sat 27 Dec 2025 04:15:15 +0000
Manifest next update: Sat 03 Jan 2026 04:15:15 +0000
Files and hashes: 1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: 5TJ3qJKCsG9CXW5vcltLNRyyAb0p3O5eX0y1EVEdQyE=)
2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl
rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 04:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180DA5, serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
Validity
Not Before: Dec 27 04:15:15 2025 GMT
Not After : Jan 3 04:15:15 2026 GMT
Subject: CN=694f5d53-7881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:9a:74:e5:d4:84:40:7a:8e:10:c5:4e:19:
d8:a6:34:3d:f8:86:18:bb:24:ef:47:12:10:2f:9d:
3a:30:30:e4:2f:73:fd:b8:4b:28:c5:bc:3a:4f:c3:
d2:54:8e:af:06:b4:9e:4e:d7:ac:d3:f5:59:ff:e2:
d8:19:80:79:dd:5b:2b:fb:35:a9:1f:aa:81:64:39:
d8:a2:23:78:c8:b6:ab:71:47:6a:dc:88:0e:a8:65:
fd:1c:15:59:e0:18:21:b6:4e:78:25:86:7c:1d:d8:
b2:af:63:50:ea:22:00:65:ab:47:84:42:2c:46:c2:
58:e4:c6:de:b3:89:ec:09:aa:90:8a:a2:91:75:c4:
49:f3:c2:2e:d9:66:cb:f9:fc:3c:12:d9:df:f4:6e:
2c:0b:d4:d3:d9:93:9a:70:a7:bb:de:ee:fe:53:19:
c3:1b:1d:eb:47:61:10:87:e0:c6:b0:3c:db:36:fe:
ed:81:93:a4:1e:e9:91:5d:07:cf:43:c0:71:e7:48:
c6:d5:73:c0:9c:5f:0d:5e:1e:5e:ba:80:74:65:44:
7c:f0:7d:45:cc:f0:81:6c:1b:ab:49:23:09:3f:f4:
33:20:43:93:37:82:2e:b9:a5:a7:28:84:cb:a3:d9:
73:6c:db:98:38:32:24:92:da:6d:92:2f:78:e1:17:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2B:67:6A:02:8E:76:99:94:25:49:F4:2B:14:C7:48:6F:A0:B1:BA
X509v3 Authority Key Identifier:
keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:2b:ea:06:5c:4d:a0:81:d7:68:c2:5a:c4:01:dc:e6:8e:0e:
e1:40:8d:81:7b:57:5f:9d:ea:77:95:7b:41:6e:55:80:00:5f:
85:69:ac:e3:65:46:1e:c8:90:0a:e9:b4:99:2c:7a:91:5a:70:
b4:a2:b8:24:a2:45:0b:c9:62:70:49:de:d9:67:6e:b6:1b:36:
b1:e7:25:89:4c:95:9f:d2:b0:24:35:df:83:f0:29:d2:3e:da:
29:6e:e5:90:7f:fe:ca:a7:4a:ea:8d:39:08:af:e7:01:9d:0e:
49:fa:d2:a3:68:6d:a7:c1:fa:25:32:8b:df:93:87:5c:60:83:
9c:98:c7:6f:7c:49:99:95:a9:34:80:62:7f:c2:f3:56:d5:28:
f5:d5:51:c2:7a:dd:4f:88:73:7d:95:bc:d7:5f:c4:20:8e:cd:
5b:64:21:85:12:60:7e:6e:dd:53:ce:cd:14:fd:37:0f:cf:1a:
26:3f:54:60:ac:1d:ab:c4:72:7f:ee:bc:4f:e7:53:d4:f6:87:
b3:c7:bc:53:ab:dc:90:ba:07:8f:7c:a1:ba:a1:e5:73:b3:fd:
f4:62:55:8c:31:b1:fa:93:3d:55:05:d3:7e:db:9c:05:aa:fa:
7a:8a:54:60:8c:a9:d5:d5:c7:d3:dc:61:4b:46:3f:2c:07:e0:
81:04:35:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 28 09:07:03 2025 by rpki-client