This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
File: ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json)
Hash identifier: yZHsgz4VdlhI9crmpRF5trL9HMrExBgXxiVVJLlPyOQ=
Subject key identifier: C0:BB:13:D8:35:6B:96:4A:6A:DC:9A:1A:5B:42:17:C4:F6:D7:8F:CE
Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80
Certificate issuer: /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
Certificate serial: 0624
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
Manifest number: 061E
Signing time: Thu 18 Dec 2025 22:10:38 +0000
Manifest this update: Thu 18 Dec 2025 22:10:38 +0000
Manifest next update: Thu 25 Dec 2025 22:10:38 +0000
Files and hashes: 1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: pjJC2d7h/3jU3Vwc5S7yB5JeSbZR1pFB75s4flOZdak=)
2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: NtEKqe9K8qVaWm1bTRQ0N6CeN9vSLJhLoVuJfNIm9AY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl
rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 22:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80
Validity
Not Before: Dec 18 22:10:38 2025 GMT
Not After : Dec 25 22:10:38 2025 GMT
Subject: CN=69447bde-e828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:a8:70:8f:f4:8d:19:e8:b8:43:21:e5:f0:
10:53:4d:b5:4b:6b:49:24:2b:2c:94:f9:ee:71:c9:
78:87:9a:fa:8d:a3:0f:db:a2:c5:69:36:15:6e:45:
7e:7a:4f:3c:27:e1:2a:34:3e:50:52:23:db:6f:e1:
76:c1:9c:bd:4c:c0:92:a0:34:63:54:4d:d6:83:de:
ae:61:f7:c2:b7:2a:d6:12:10:36:21:e1:32:cf:2b:
93:14:6c:2d:d7:21:85:b7:36:a4:f0:b1:af:15:60:
ad:a7:12:06:9b:a9:2c:f0:9e:d8:3a:cd:3b:41:f7:
d3:01:46:f3:43:70:18:bc:60:b1:47:67:d4:7b:76:
42:16:ea:f2:64:d7:7b:c7:ba:ca:64:ee:16:e7:cb:
41:ee:89:da:bc:a9:47:09:75:1f:23:e8:06:85:b8:
36:fe:57:d2:4e:66:5b:95:96:c9:2b:40:9e:6e:74:
b6:fc:ac:44:04:65:fe:92:0b:e2:7e:2a:cd:e8:40:
e9:67:15:a8:4a:0b:01:71:48:74:be:2e:0a:fa:c9:
8b:7f:7b:f9:39:4c:fc:e7:f4:46:00:71:73:7f:fd:
ce:aa:2b:54:21:c0:b1:e3:79:53:75:55:12:ce:b6:
3a:19:63:cd:17:8a:2c:c9:d9:9c:b4:3a:e9:90:92:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BB:13:D8:35:6B:96:4A:6A:DC:9A:1A:5B:42:17:C4:F6:D7:8F:CE
X509v3 Authority Key Identifier:
keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:15:29:6a:9e:1d:ec:90:51:62:4d:34:a9:5a:f7:7e:4f:7f:
c4:ef:34:89:6a:fa:ab:f7:1f:ee:50:a3:86:d1:1e:5f:01:bd:
7b:65:3e:0a:57:07:91:51:33:4d:cb:a3:3c:52:fe:39:e1:82:
e3:77:21:2f:41:fd:86:1e:32:d5:69:2f:1d:83:cd:65:6e:55:
85:77:b3:52:a7:51:ab:93:4b:b7:0a:d6:ab:32:f9:84:32:29:
fd:45:b1:35:b6:79:30:fd:58:a2:27:18:fa:1b:ca:67:ef:6f:
ee:6f:79:c9:92:d1:4a:61:3b:83:59:ac:d1:a4:18:64:13:3a:
01:52:a7:eb:d3:37:e1:f3:e5:a2:4f:ae:17:60:93:25:c5:d4:
3f:47:42:eb:dd:af:2f:25:03:1e:e4:62:aa:11:b6:af:0a:43:
15:d9:9f:29:d4:1a:dd:89:d5:2d:36:e3:e1:c2:5e:27:de:3f:
bb:e1:f4:48:79:d0:e9:6d:42:5b:f2:c7:75:84:2a:71:38:f6:
5d:00:c5:be:ae:c7:01:1b:70:f9:52:4b:33:da:eb:08:ce:d1:
ed:dc:fe:66:97:40:86:80:0e:98:be:06:bf:d9:ed:f2:78:ba:
1c:bd:32:bf:fa:73:bb:a3:0f:96:2a:c9:6a:85:9e:43:81:7f:
fc:71:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:43:30 2025 by rpki-client