This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File: rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier: G3JBTmLkPoiU1Vyc05eFl5+H6Gd4rGTJ+d8YRL5Nd/Y=
Subject key identifier: 96:37:05:CE:1D:B9:18:FE:1F:49:2F:9B:5C:45:17:BB:CD:FA:8E:23
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer: /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial: 01D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number: 01C8
Signing time: Sun 07 Dec 2025 01:24:47 +0000
Manifest this update: Sun 07 Dec 2025 01:24:46 +0000
Manifest next update: Sun 14 Dec 2025 01:24:46 +0000
Files and hashes: 1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: baZ2UH2SE8xIrBAV3BTCy9boNsA6ARj1EzouybUnWNk=)
2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: p81EH8N+mq+tuXFMTqadpbhtGnx8x8sovmy9swXxzCM=)
3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: GGQZQXITbCi35kDi1cszvpoNDF4GQHNFV1AYsPL4NFA=)
4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 468 (0x1d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Validity
Not Before: Dec 7 01:24:46 2025 GMT
Not After : Dec 14 01:24:46 2025 GMT
Subject: CN=6934d75e-967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:ed:5a:ca:b2:13:dd:62:82:a3:e4:b9:e7:
6b:f0:28:40:b0:23:f2:64:ae:69:f0:a1:4d:1c:5b:
96:9f:00:b2:f6:4a:b1:1c:cd:59:40:fe:8c:bd:09:
0e:f1:9d:97:3f:04:dd:d0:2d:32:ad:1c:0c:a4:b7:
e6:18:0d:78:f3:48:b1:64:37:e2:1f:91:9b:59:ac:
6a:c9:51:94:f2:96:f1:29:4a:c8:fe:ba:80:9a:cc:
1f:8b:c5:7d:05:5f:c4:2a:07:fa:07:32:e3:f2:87:
00:ce:9b:02:fa:3b:06:d2:e4:3a:cd:37:2d:41:ed:
2c:68:de:72:80:09:48:e5:09:9e:4e:ee:71:2b:23:
ac:5e:eb:c7:ef:ed:0c:69:7c:37:f2:fb:82:a7:33:
86:3f:18:9e:4a:56:ae:f7:8c:a2:09:bc:f9:fa:87:
ce:6f:c1:ab:cc:06:83:54:ae:5a:0d:e8:65:55:bb:
bd:67:13:72:df:a3:8a:54:02:9a:13:0f:31:15:48:
fd:c7:50:dc:ef:67:4b:3d:62:92:46:4a:35:37:8b:
2f:a8:b6:6f:77:2c:fe:e8:38:12:0e:85:ee:ea:2c:
6a:fd:d4:00:af:58:d9:c2:16:40:01:0d:73:1b:7e:
f9:98:1b:70:dd:69:3d:57:5f:e7:48:b4:17:11:61:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:05:CE:1D:B9:18:FE:1F:49:2F:9B:5C:45:17:BB:CD:FA:8E:23
X509v3 Authority Key Identifier:
keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f4:af:77:ba:cf:b1:f5:8c:ea:4a:1d:d4:12:df:e3:98:57:
38:a8:70:ed:40:81:8d:70:1d:d5:86:e2:5a:2c:0a:2e:e5:3a:
40:54:c2:c5:53:fc:63:5f:9e:c9:06:fa:ed:df:5b:e1:a5:d2:
4e:97:24:9a:60:3d:8b:50:e5:91:2d:32:b5:78:81:82:4b:6e:
6a:54:50:20:56:bf:be:5a:ab:22:0f:59:d8:d5:02:14:39:43:
c6:e1:d1:80:80:9f:fb:f5:ba:3d:1c:f3:ce:a9:a8:c2:58:b8:
67:1e:26:68:f1:c7:38:e8:8b:f0:af:33:93:ca:2c:24:1a:fd:
a8:23:c6:aa:22:2c:a9:03:47:58:ca:58:2f:ac:45:56:a0:36:
f0:85:40:59:5a:eb:bd:63:5a:54:91:e0:2e:23:5d:28:dd:94:
2e:d8:8c:88:7a:ce:78:81:cc:56:d1:82:84:a9:d9:63:03:52:
c6:05:ec:fe:26:35:4f:85:28:1a:21:77:56:c8:dc:b5:60:ff:
3a:9e:80:42:40:54:b7:fb:f2:3d:79:69:4a:16:23:20:d5:cc:
05:b0:02:12:dd:9f:71:ea:d9:2f:8b:d6:d8:aa:47:87:c4:82:
8b:13:a4:fc:6e:3a:c3:fc:43:f6:2f:cb:b2:b3:a6:60:e0:cd:
b0:76:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:56:54 2025 by rpki-client