This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
File: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft (raw, json)
Hash identifier: aHfpnSK1Sn32oLUhXolyQrqC2nzi+4pl/9AZiEHZQjM=
Subject key identifier: B5:14:15:C7:69:B2:3C:93:4B:91:CC:9D:2F:79:FD:A5:9E:C8:5E:C8
Authority key identifier: C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
Certificate issuer: /CN=A91A2946/serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Certificate serial: 11
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
Manifest number: 0B
Signing time: Fri 19 Dec 2025 07:03:19 +0000
Manifest this update: Fri 19 Dec 2025 07:03:19 +0000
Manifest next update: Fri 26 Dec 2025 07:03:19 +0000
Files and hashes: 1: yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl (hash: dNCbwB3qLramt/CdoSJ8ntqzLws3zfRAoGWJNzxKZ0o=)
2: 32A734F4DB3411F095EFF1788DD3641D.roa (hash: R8KX+/SyNsukJ5wZis8PnNKPy522TKB6VdISz0Pj3f8=)
3: 26CABD66DB4011F0B92C4C778FD3641D.roa (hash: qNSJ4pqRhXOzoVAHZQaycGg0ZmCHhSMerGrL2kuYbx8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 07:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2946, serialNumber=C8EBC245C04CF3E46CFEE7812387CC1D5AD38E5D
Validity
Not Before: Dec 19 07:03:19 2025 GMT
Not After : Dec 26 07:03:19 2025 GMT
Subject: CN=6944f8b7-efe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:7d:ab:79:79:fe:a3:b0:2e:39:07:b8:49:c2:
8d:2a:95:58:bb:a1:ad:42:1b:4b:73:cf:7f:78:04:
8b:5f:b9:ff:37:ab:6b:b7:60:f9:12:80:7c:22:ea:
e9:07:ab:51:65:65:f4:91:72:a0:e2:fb:5d:a6:e8:
36:6d:5d:38:6b:38:4d:e5:fb:b6:7c:cb:02:72:16:
f2:5d:a7:6e:9e:b6:60:1b:3c:0e:e8:16:54:45:91:
81:f0:21:31:af:19:fb:84:c9:36:0f:f8:ca:4d:ad:
6d:01:59:b8:b8:2a:df:d6:47:c5:2d:09:23:94:b3:
ad:7b:03:0d:29:17:63:5a:64:a2:8e:6e:a1:f5:1d:
ce:bb:c9:38:37:4a:cf:5d:a3:b4:b7:50:de:b4:e4:
1b:e5:50:7b:4f:7d:92:cc:6a:24:84:9f:a4:82:19:
ba:97:5e:79:e3:95:ba:e6:2c:d2:5c:75:e3:f9:e0:
29:3f:e1:bd:f2:59:17:ef:8d:27:1a:f8:ea:fe:56:
63:b6:e0:07:63:e7:e9:51:2d:e2:f7:0a:fe:cd:e9:
9e:71:39:f2:25:fb:b7:b7:55:bc:b8:da:8f:0e:1c:
8c:a2:91:c2:e3:27:7e:fd:7a:82:4c:97:e5:92:0e:
8f:fb:10:09:17:c7:4c:d3:fd:ec:af:fc:3f:fd:b5:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:14:15:C7:69:B2:3C:93:4B:91:CC:9D:2F:79:FD:A5:9E:C8:5E:C8
X509v3 Authority Key Identifier:
keyid:C8:EB:C2:45:C0:4C:F3:E4:6C:FE:E7:81:23:87:CC:1D:5A:D3:8E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2946/ACD4FB5EDB3311F0A2CE53688CD3641D/yOvCRcBM8-Rs_ueBI4fMHVrTjl0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d3:08:b1:cc:64:06:c9:94:65:24:5f:b9:40:68:3e:e9:02:
f6:d4:f7:7d:58:08:0d:88:bb:db:5d:46:7c:78:2a:8c:16:72:
b6:48:f6:9a:1a:57:ba:46:39:29:2e:1b:03:be:fb:5d:4d:e6:
34:98:cb:62:be:d3:4f:99:e6:4a:f5:8a:2d:4a:98:02:f0:c0:
99:00:70:ae:de:6e:3c:3c:4c:4f:10:de:87:d9:11:1e:5d:1f:
5b:cb:67:fd:c3:ef:71:2b:26:6d:f9:e4:d3:42:7e:fa:20:bd:
39:48:58:6d:88:c5:f4:ac:2f:e3:55:58:01:65:32:02:84:53:
2b:2e:1c:b2:5e:68:6a:b9:64:53:ae:aa:dc:65:88:9b:1e:81:
0f:9b:f8:82:b5:01:a1:ad:84:bc:58:07:a7:e8:93:f2:d6:da:
85:5d:66:db:57:21:33:3b:21:15:26:58:2b:7a:be:f9:07:21:
df:5c:72:6c:2d:8f:fa:28:cb:f3:21:00:49:3d:33:51:d4:b3:
00:f1:67:c7:97:1d:8a:59:ed:fe:4c:ad:37:f9:d9:c7:fd:8b:
cc:98:a9:4b:14:b2:62:76:58:a0:ac:4e:82:a3:fa:d2:2f:ce:
b8:48:94:e2:80:c7:4a:10:e9:33:ac:ef:39:ec:5e:6a:d2:63:
1a:e6:e1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:50:37 2025 by rpki-client