This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
File: YmEJu-zJi6UufzmbgJYtOv5astQ.mft (raw, json)
Hash identifier: 2Zh8Km3hpPUNvEjTVK74I/tTTb23e8gxQ7S4kWb/syg=
Subject key identifier: 94:90:3E:1F:4A:B3:3C:EA:22:E3:54:6C:EC:86:AB:01:ED:53:01:0B
Authority key identifier: 62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4
Certificate issuer: /CN=A91D50A2/serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4
Certificate serial: 015E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
Manifest number: 015B
Signing time: Thu 25 Dec 2025 03:13:03 +0000
Manifest this update: Thu 25 Dec 2025 03:13:03 +0000
Manifest next update: Thu 01 Jan 2026 03:13:03 +0000
Files and hashes: 1: YmEJu-zJi6UufzmbgJYtOv5astQ.crl (hash: nNNHxMR/srO4qjFMdT81cayMVqZnwTtVR9nd3eqkq7E=)
2: 7447BEF0928411EFB854A522C4F9AE02.roa (hash: 8r1ggxGUtscfFUhVNnn2tSXuD/VeviYdi6zXjlI+agM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl
rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Jan 2026 03:13:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D50A2, serialNumber=626109BBECC98BA52E7F399B80962D3AFE5AB2D4
Validity
Not Before: Dec 25 03:13:03 2025 GMT
Not After : Jan 1 03:13:03 2026 GMT
Subject: CN=694cabbf-94d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:24:db:8a:0c:69:28:4f:1f:65:3b:01:bc:
09:bc:97:6a:5d:16:6d:65:53:60:01:67:3a:66:75:
d5:81:f1:19:88:d2:73:d3:83:9d:b4:87:c3:ea:8b:
7d:88:c9:16:7e:02:5d:96:25:45:7b:e3:d0:ca:00:
ee:9f:a5:4e:35:a3:f8:ae:9c:7c:47:27:e4:dc:55:
2e:e4:58:3f:ad:d6:05:62:51:e6:64:64:5d:fb:8a:
ce:2d:50:7c:02:48:0e:b5:36:c4:e6:ad:a1:26:c8:
17:57:cd:7b:64:93:da:20:ec:69:1d:59:63:19:51:
44:29:34:ec:69:fa:34:ce:86:4c:18:da:b1:75:e4:
52:05:dd:fb:24:29:2d:00:18:6c:e4:07:49:71:f4:
e7:bc:4c:b9:1f:50:39:ff:bc:54:22:10:c5:d3:e2:
f4:5a:65:7a:99:40:45:95:09:1b:86:3a:c3:86:52:
ea:d3:f1:0c:06:49:e2:ba:6d:0d:0f:2f:a8:4b:65:
c1:0c:4b:13:24:35:80:16:00:df:30:34:1c:d0:dc:
9d:3e:ec:ac:fb:3a:aa:1e:77:1f:3d:17:27:1f:bd:
2e:e9:4b:2d:2d:67:79:3d:16:5a:bc:b4:54:e7:dc:
2c:f6:6d:db:0a:bd:e5:7c:bc:a7:0a:49:6b:05:a8:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:90:3E:1F:4A:B3:3C:EA:22:E3:54:6C:EC:86:AB:01:ED:53:01:0B
X509v3 Authority Key Identifier:
keyid:62:61:09:BB:EC:C9:8B:A5:2E:7F:39:9B:80:96:2D:3A:FE:5A:B2:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YmEJu-zJi6UufzmbgJYtOv5astQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D50A2/EE31D874D02711EEBF5B693CC4F9AE02/YmEJu-zJi6UufzmbgJYtOv5astQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1c:e6:75:a9:7f:6a:c9:74:b1:68:aa:ba:25:da:86:43:37:
dd:59:a4:2d:2e:17:3e:c1:e4:f1:ce:62:6d:3d:9f:71:3c:9b:
cc:95:1a:cb:ba:6e:88:82:74:94:b3:a5:cb:68:6b:f5:ab:f3:
1d:01:e1:56:8f:dd:f1:7d:4a:b1:81:dd:69:bd:cf:d3:88:05:
4a:da:5c:4e:9b:a8:a6:1c:ee:fa:b0:aa:50:ad:32:30:c9:62:
6f:35:c2:9e:74:c2:5f:1a:1a:eb:0c:0b:c3:de:dd:1d:5d:e5:
bf:de:ef:c2:cf:b3:76:80:3f:47:50:dc:ab:34:52:71:9a:e4:
d3:38:93:36:a6:e9:36:41:c0:d3:93:fa:48:56:9f:43:72:eb:
79:0d:19:22:4e:84:b1:32:60:84:72:d2:9c:b0:ee:7f:13:59:
ea:95:1f:9c:0d:14:89:ce:a3:a9:9a:f2:9a:47:cf:5c:11:3a:
4e:3e:4e:ce:3c:c4:21:f1:5c:34:43:7d:c2:85:fc:c7:8f:a7:
70:d0:96:93:2f:cc:de:e2:ae:d6:44:60:9f:c3:ee:ee:a9:35:
47:30:30:f8:8a:b4:38:e4:50:8c:ba:8c:93:03:c7:87:ad:4c:
2c:7f:e8:ad:59:2f:39:99:79:3c:df:a3:e2:33:5a:d3:f2:c5:
05:f0:b1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 00:38:42 2025 by rpki-client