This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
File: yozvXh2MPaWsm67lsZbvBmCaOVk.mft (raw, json)
Hash identifier: p9Ri50t0whMuiW2RXchfo47BHd8T3WT6x34undpYuX8=
Subject key identifier: BC:C5:80:57:C0:A2:39:80:C4:7A:7B:74:1C:C5:15:0E:77:12:14:1A
Authority key identifier: CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
Certificate issuer: /CN=A911B5BA/serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Certificate serial: 0B83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
Manifest number: 0B80
Signing time: Sat 06 Dec 2025 18:20:21 +0000
Manifest this update: Sat 06 Dec 2025 18:20:21 +0000
Manifest next update: Sat 13 Dec 2025 18:20:21 +0000
Files and hashes: 1: yozvXh2MPaWsm67lsZbvBmCaOVk.crl (hash: Hljx0MNYFivHSywtI/YiRgaXCnm1AYAF5rKzsfB2z2o=)
2: 410BAD2095F011EFA9137C67C4F9AE02.roa (hash: 3u5hviV9wYqSDD6MZKgqds2XhBaPvlTgTPQdfbhFev0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2947 (0xb83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B5BA, serialNumber=CA8CEF5E1D8C3DA5AC9BAEE5B196EF06609A3959
Validity
Not Before: Dec 6 18:20:21 2025 GMT
Not After : Dec 13 18:20:21 2025 GMT
Subject: CN=693473e5-9299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0d:15:b3:58:1c:c2:cc:15:75:3a:9b:dd:52:
8a:39:a6:04:4a:a8:11:73:6e:06:58:0b:ef:93:5d:
93:0b:55:1e:2a:3b:cc:eb:10:ff:f7:df:46:68:4d:
89:12:69:d1:66:1b:82:66:ed:56:69:96:5b:86:50:
af:12:9b:8d:ce:cc:50:6e:9d:ea:62:2f:4b:8c:18:
b9:3d:47:d6:20:e5:85:f0:c9:19:e3:fe:bd:c7:20:
9a:23:da:62:3a:6d:67:53:fb:fa:e4:5d:98:9e:b5:
23:af:fe:6d:c1:92:49:c3:70:4a:93:c4:70:49:d0:
54:e2:ad:b6:2b:00:36:1b:41:89:91:48:d6:a5:50:
ec:44:98:dd:7c:c0:91:96:0e:2b:c9:e2:e0:8b:f8:
b2:bc:32:08:e1:84:87:f6:21:0c:9a:1a:e8:55:07:
42:da:29:8a:70:97:41:fc:fb:0c:d5:fe:37:e2:13:
bf:13:c5:43:cd:97:c4:67:43:85:c8:f3:ee:c8:fd:
1c:0d:09:d3:46:14:7d:a6:b5:56:7c:ee:aa:41:88:
62:06:dd:c8:1f:e7:b4:d1:2f:66:6d:46:1d:fb:2b:
b3:25:92:11:61:6c:e2:5a:9d:e0:9d:db:81:ff:ab:
af:72:ea:68:c0:97:d5:e0:80:d5:ac:dc:ef:b8:4e:
c9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C5:80:57:C0:A2:39:80:C4:7A:7B:74:1C:C5:15:0E:77:12:14:1A
X509v3 Authority Key Identifier:
keyid:CA:8C:EF:5E:1D:8C:3D:A5:AC:9B:AE:E5:B1:96:EF:06:60:9A:39:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yozvXh2MPaWsm67lsZbvBmCaOVk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5BA/93E2FB0C3DA311EAA4DC3A59C4F9AE02/yozvXh2MPaWsm67lsZbvBmCaOVk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:61:5a:25:34:bc:2a:e0:62:23:eb:41:21:07:f0:7b:95:1e:
0c:a4:1c:3a:cd:49:c1:73:fd:2d:cb:78:12:34:51:7e:e3:9f:
35:cc:1b:a3:08:a9:3f:0d:1e:02:cc:53:96:92:e9:42:fc:ac:
50:36:3f:e2:7c:06:13:9d:0d:2c:79:8a:95:49:7a:b7:2f:6e:
8a:34:97:85:ea:ae:11:9d:a7:30:5b:83:f2:9c:20:7f:f7:be:
32:be:92:79:32:48:2e:4f:e8:60:6b:5f:02:6f:53:99:16:27:
85:11:c9:6e:40:50:6e:80:f4:a3:36:01:cf:e6:3f:9d:f4:02:
56:14:aa:4e:bc:d5:a5:6b:35:20:c1:62:f6:ca:38:7b:28:63:
47:16:08:6f:10:c4:6b:23:25:10:1f:c1:83:2a:2a:79:31:25:
39:7d:76:28:66:ca:39:85:25:3a:9b:9b:4c:a4:2d:e5:ff:fa:
26:42:3f:f3:40:e1:5e:e8:89:0a:41:db:b3:18:cd:ec:2d:be:
5d:95:3e:97:c9:10:4e:e0:f0:ab:6d:d3:19:11:dd:b9:5e:10:
12:1e:33:50:d6:9b:16:b7:33:e3:b2:c0:0c:b1:b8:16:cc:d1:
5f:d6:5b:ca:a7:65:23:e2:ae:50:de:ad:71:92:82:a5:0a:50:
bd:5c:01:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:19:40 2025 by rpki-client