This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
File: y-ExoIOkVjx8Q52webZLatEQGnw.mft (raw, json)
Hash identifier: aH8LslJAyNJ8qwAGi9EJlwadmp95iuKruivfmfIE/js=
Subject key identifier: 61:B3:E9:6F:79:F3:68:9D:75:A3:40:EB:76:50:31:C3:09:14:C3:C0
Authority key identifier: CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
Certificate issuer: /CN=A914EED0/serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Certificate serial: 08EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
Manifest number: 08DA
Signing time: Thu 04 Dec 2025 19:35:32 +0000
Manifest this update: Thu 04 Dec 2025 19:35:31 +0000
Manifest next update: Thu 11 Dec 2025 19:35:31 +0000
Files and hashes: 1: y-ExoIOkVjx8Q52webZLatEQGnw.crl (hash: YagSU0BewAUTr2iJ1Ktcvu3ree0xq+8TWj08zx9RoCc=)
2: 90D4C28CC2BA11EA8A079767C4F9AE02.roa (hash: e+13EZAvpj9mc2IILMERDnSK9NszhBMUbUBC2BNslfY=)
3: F043A0CCC2B411EA9BAFF054C4F9AE02.roa (hash: NHcEruSqBuMj/IPzd/3S47VAhmXWgMgQYut3Slp0jA8=)
4: 91B81F1EC2BA11EA8A079767C4F9AE02.roa (hash: HnUSTDgiOASq4KYnjuG0nd8h+Pt87RrArwZX9gcI9gM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EED0, serialNumber=CBE131A083A4563C7C439DB079B64B6AD1101A7C
Validity
Not Before: Dec 4 19:35:31 2025 GMT
Not After : Dec 11 19:35:31 2025 GMT
Subject: CN=6931e284-dfa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:aa:6e:7c:5c:03:36:42:f5:8b:f3:3a:47:
31:1a:c1:d9:65:16:3e:20:c2:1f:cf:72:ad:53:b4:
60:b0:52:65:b2:61:c9:de:35:c2:6a:07:35:e3:35:
95:9d:ba:e6:a8:43:e1:b3:ab:4e:c3:fa:13:88:07:
5f:f5:d7:31:91:7c:6b:a4:df:91:a6:2a:e9:87:d2:
2c:78:67:40:b2:c7:af:bf:ea:54:b2:50:76:44:25:
92:c9:88:d9:0b:53:85:a1:2b:ee:65:35:c8:5b:ac:
c0:26:9e:ea:f6:42:8f:1f:fb:22:9f:ca:31:b0:5b:
62:c5:9f:49:7b:5a:6b:17:9c:3c:08:c7:72:53:8d:
3e:7e:c2:e3:d9:de:ae:f2:2c:55:fd:dd:b5:06:0f:
23:10:69:da:a8:28:8e:5d:6f:0b:91:78:33:77:00:
78:a6:9a:2d:df:c3:6b:16:45:2e:c6:49:57:f4:10:
fc:ee:fd:a1:83:30:38:20:47:26:35:50:44:fb:57:
dd:2b:30:39:44:bc:33:cb:d0:71:ff:eb:ff:97:9c:
ce:4e:38:0a:d6:2e:d1:2e:f7:64:b6:06:df:b8:0b:
3e:f3:c0:3d:ec:cd:03:97:82:04:51:5e:22:9f:72:
be:6e:22:ed:af:6e:91:3f:12:ae:db:e8:0e:65:37:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B3:E9:6F:79:F3:68:9D:75:A3:40:EB:76:50:31:C3:09:14:C3:C0
X509v3 Authority Key Identifier:
keyid:CB:E1:31:A0:83:A4:56:3C:7C:43:9D:B0:79:B6:4B:6A:D1:10:1A:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-ExoIOkVjx8Q52webZLatEQGnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EED0/6EEB1150C2B311EAB4832750C4F9AE02/y-ExoIOkVjx8Q52webZLatEQGnw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:71:d1:0e:34:da:26:19:02:ad:71:7b:1c:c2:a5:22:43:7d:
7d:40:92:f3:ba:5f:ff:4f:ec:8d:b3:be:dd:43:15:39:4b:7a:
39:dc:92:de:b4:30:04:a2:b7:e6:33:b7:6e:7e:2b:66:86:87:
a4:44:7d:d0:40:d6:a3:92:b4:d5:e6:85:29:ef:12:da:25:82:
ec:91:a5:d8:11:f1:04:b5:99:54:84:ef:03:fc:c1:86:56:3c:
6d:4b:2d:98:a2:ef:e7:88:53:14:70:b7:35:18:2c:06:53:11:
99:be:cb:44:8c:06:16:46:ba:24:89:32:aa:2a:97:b6:dc:b6:
05:cb:1c:c0:0f:0d:44:c5:b6:08:5f:37:fc:1f:c1:3d:4f:ef:
99:8d:49:62:d9:c0:2a:0a:1c:43:1b:37:9a:f0:1b:2e:e1:77:
b1:3d:12:cc:9b:42:dd:e6:0b:c5:e6:d0:58:5e:21:05:2a:5f:
0b:64:08:42:c4:65:01:5e:69:b9:54:fa:7f:2a:96:17:de:90:
18:ee:78:b3:f3:3f:98:e6:4c:0d:83:c4:8d:5f:17:1b:22:6b:
e9:ff:cf:23:e5:e7:66:3d:86:cb:c9:0d:63:db:6d:a7:b7:d7:
07:9c:2a:ed:81:41:69:98:4e:65:ba:cd:65:1f:73:92:0f:4e:
f1:d1:bc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:51:39 2025 by rpki-client