This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft
File: yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft (raw, json)
Hash identifier: NMS2t70zlsRuJETLnM59a5PXu/Xt7tk8Pixrhk3Isto=
Subject key identifier: 74:A7:25:8F:43:1A:67:8D:5B:60:C4:58:BD:1C:44:B6:42:50:B2:41
Authority key identifier: CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A
Certificate issuer: /CN=A91F89C1/serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A
Certificate serial: 06D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft
Manifest number: 06D0
Signing time: Thu 18 Dec 2025 21:31:53 +0000
Manifest this update: Thu 18 Dec 2025 21:31:53 +0000
Manifest next update: Thu 25 Dec 2025 21:31:53 +0000
Files and hashes: 1: yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl (hash: HnYy99d9n+TyBqeIRdxU1zmT26pEa+1bvekkM29Vh9o=)
2: 89283C80809211EB938F4016C4F9AE02.roa (hash: XR/AocxlHs3JH5B6YCwM4YFgAXn6/2T8ovPAbIrIeuQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl
rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1751 (0x6d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89C1, serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A
Validity
Not Before: Dec 18 21:31:53 2025 GMT
Not After : Dec 25 21:31:53 2025 GMT
Subject: CN=694472c9-a2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:b1:79:87:a0:18:63:06:a2:c6:7a:cb:a3:
69:b4:75:8c:2b:ed:29:e9:1b:14:e8:56:c7:29:ce:
46:73:1f:ab:d4:9c:04:5b:17:48:d3:37:84:27:03:
63:ae:a6:95:08:37:4c:28:ce:1a:c9:ee:2d:46:e6:
88:01:83:d1:0b:fc:e7:d2:96:e2:e9:f9:b1:db:82:
a4:2c:88:77:e2:80:da:55:ca:6e:6f:aa:27:19:9a:
77:17:67:f9:ef:35:99:aa:e9:fc:23:cc:2e:09:fa:
6a:87:bf:bb:da:d7:c9:5e:ee:b0:fd:0c:37:8e:a7:
ce:2a:75:0d:28:12:37:82:48:a3:56:e3:8e:18:4f:
86:84:a7:16:c3:5d:38:ef:22:f6:eb:c2:0f:dc:ac:
f7:4f:74:d6:8f:f7:fa:3d:19:84:85:25:b1:8d:8d:
bc:f7:13:65:d6:77:ea:1c:3d:87:68:4c:00:04:e5:
97:31:42:da:b4:70:5d:5c:44:74:03:b3:cb:0d:c2:
86:de:7e:a9:55:85:b8:95:93:23:cb:c3:69:15:95:
11:5e:8f:6a:e9:e7:6e:02:46:00:cf:3a:2a:be:24:
0b:f2:a0:0c:95:39:d6:d4:12:2e:7d:f7:ea:7d:f1:
cf:16:67:37:81:f9:a4:a3:96:f8:b3:fd:94:64:03:
81:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A7:25:8F:43:1A:67:8D:5B:60:C4:58:BD:1C:44:B6:42:50:B2:41
X509v3 Authority Key Identifier:
keyid:CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:0c:e8:2a:5b:93:20:a3:8e:e2:b4:cd:36:35:5f:3a:58:da:
e0:a2:6e:bb:7e:bf:a0:9c:8d:9c:2e:07:85:1f:f7:3e:36:5e:
b3:8f:bb:b8:ff:a5:30:7b:41:40:64:16:58:21:ba:dc:14:f1:
93:32:42:39:87:5f:20:c9:90:7b:be:b3:bc:5a:96:44:e1:9c:
5b:b9:79:b9:07:66:41:22:7f:c1:ab:52:1f:ce:31:5a:c5:4f:
64:21:36:7f:db:31:c2:86:61:b0:5e:0c:f2:38:d8:5b:3c:ac:
f3:35:0c:97:44:e0:8c:39:36:ae:5c:79:2c:99:66:76:38:e2:
b0:e0:78:e7:d6:96:7b:7e:95:cc:f1:c2:09:8d:aa:6c:db:b9:
5f:3d:eb:77:b1:df:db:93:68:91:a5:eb:27:35:81:e7:dd:7b:
87:7e:30:cb:ce:49:3a:5f:c9:89:e6:0c:ce:20:4d:50:b0:1b:
7e:0d:c0:a8:2d:f5:78:6c:0e:e0:26:0a:10:b2:46:f8:00:67:
1e:cd:1f:85:90:22:1b:e8:26:32:39:c9:f3:6e:e1:b7:c3:44:
1d:94:97:8f:34:dd:29:f1:c8:32:ee:77:46:e8:25:c1:cd:b0:
b2:b6:b8:54:04:71:cf:fd:1f:52:d9:ae:63:a4:62:ce:69:39:
1f:24:c4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:59:11 2025 by rpki-client