This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
File: Yt3ChdqLPiCesA6qNnGEXaps8oY.mft (raw, json)
Hash identifier: 6jK/kCpKb2V3IPqjGL41T8BKXu1kFbKtvjcq9gMjP90=
Subject key identifier: 6F:24:EA:F8:95:66:3A:AC:C9:24:C4:03:78:42:E4:C7:84:94:DF:27
Authority key identifier: 62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
Certificate issuer: /CN=A91CE5A6/serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Certificate serial: 01AD
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
Manifest number: 01A7
Signing time: Tue 23 Dec 2025 02:17:36 +0000
Manifest this update: Tue 23 Dec 2025 02:17:35 +0000
Manifest next update: Tue 30 Dec 2025 02:17:35 +0000
Files and hashes: 1: Yt3ChdqLPiCesA6qNnGEXaps8oY.crl (hash: aKnc2PZRNK6UXXzC9pDMWhyIE12udFQqbxXgJ7gZ/Ds=)
2: 3B8DEFBCB2CD11EFBEB6A532C4F9AE02.roa (hash: DgTHE1vd+LuLJ/6bYp2I4wVbGI057+J0uGiHNmi5Ok4=)
3: 64120230B2C211EFA43BF057C4F9AE02.roa (hash: 9h3davUQ9pNDA3U7SYojAK+YEhrIBkhT56ukToleizY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 429 (0x1ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE5A6, serialNumber=62DDC285DA8B3E209EB00EAA3671845DAA6CF286
Validity
Not Before: Dec 23 02:17:35 2025 GMT
Not After : Dec 30 02:17:35 2025 GMT
Subject: CN=6949fbc0-8b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:30:71:6b:a7:f8:29:03:cb:7c:8a:48:ab:
0e:53:56:6a:45:70:6d:a4:b0:1d:07:d3:45:37:70:
8a:46:51:2b:63:ba:03:2a:25:e9:6c:bf:d4:eb:c0:
c7:a7:64:51:6f:b9:51:9a:32:eb:f9:44:d7:cc:a0:
7c:01:7e:b2:97:2d:21:72:98:e2:7c:ec:1c:03:30:
d1:e7:d0:6c:87:0c:7c:9a:98:7e:ef:00:1e:5d:47:
2d:64:44:e2:62:55:bc:8c:ac:17:41:94:8f:15:d7:
7c:7f:30:29:e9:6f:e5:7e:1d:68:ee:90:63:50:86:
53:e0:8a:87:6b:30:b2:c3:33:45:0e:9f:f4:47:33:
9f:3d:68:94:50:dd:e2:f4:e7:dd:a8:a9:a8:75:86:
99:a4:3e:3e:16:26:47:c9:97:70:29:8e:25:ca:85:
ea:34:ba:62:e5:7a:8b:43:03:da:ec:3a:21:14:48:
e5:f9:4a:cd:ae:12:63:79:47:9e:44:7c:ce:db:e1:
97:da:65:4f:cb:0c:68:6e:28:d7:28:8e:77:d1:6d:
ae:ed:ae:81:b3:f0:ba:57:fe:b9:f7:b4:2d:2b:f7:
31:cc:42:34:a2:26:9b:08:69:b6:b9:31:64:da:3b:
92:87:c4:04:27:2f:ba:1a:7e:12:b1:db:d6:17:42:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:24:EA:F8:95:66:3A:AC:C9:24:C4:03:78:42:E4:C7:84:94:DF:27
X509v3 Authority Key Identifier:
keyid:62:DD:C2:85:DA:8B:3E:20:9E:B0:0E:AA:36:71:84:5D:AA:6C:F2:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Yt3ChdqLPiCesA6qNnGEXaps8oY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE5A6/AAB33E4C5B3F11EE8F1D3D6EC4F9AE02/Yt3ChdqLPiCesA6qNnGEXaps8oY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e5:91:15:f4:48:94:d6:e1:1d:00:25:6d:ab:6b:97:87:bd:
92:89:fa:7e:d6:c8:99:9a:79:23:68:6b:95:56:2d:ac:0d:55:
e7:0c:b4:9a:e6:38:12:a9:99:ab:43:fc:c2:90:5b:a7:0d:22:
d5:53:e6:e2:38:e3:3d:47:ee:2c:85:13:af:3a:07:f2:87:5e:
20:ee:b8:97:92:5e:63:6b:e1:82:b5:fe:22:2b:e1:af:e9:60:
aa:4e:3c:ab:f7:bf:ff:9d:a5:4a:9b:ac:bd:0b:4d:6b:18:9a:
18:f5:5b:ac:74:18:b0:d3:d4:19:f3:d1:38:3b:2a:17:78:1d:
2a:9a:70:c9:65:b3:07:3e:3a:04:35:34:bd:e1:b7:af:c6:af:
33:9d:3f:d1:c8:66:1d:a4:29:1a:2b:56:d2:cd:e1:3a:93:b5:
be:ee:23:6e:7c:bd:e7:2a:00:be:a6:32:5c:6e:57:20:09:2d:
b5:df:17:b2:63:b8:14:e6:df:ef:8a:69:46:af:00:66:cc:f3:
4a:c5:d2:88:b8:58:1c:37:80:9c:75:3b:53:13:75:19:0a:42:
0d:13:cc:44:f8:f6:7d:cb:d8:0b:7a:0e:77:1f:66:00:10:2a:
98:f9:09:8a:6c:35:c6:50:09:62:c4:01:51:7a:88:4e:fe:dc:
ae:f7:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 03:24:35 2025 by rpki-client