This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
File: YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json)
Hash identifier: maGSrPbvsYwEItuCX2aqj7nrUa7AIA2TWuJNCfs2At4=
Subject key identifier: 22:01:9D:2F:E5:5C:97:DF:D3:20:D8:49:AE:0A:D8:E6:7D:F3:46:C4
Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
Certificate issuer: /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
Manifest number: FB
Signing time: Fri 05 Dec 2025 03:13:11 +0000
Manifest this update: Fri 05 Dec 2025 03:13:11 +0000
Manifest next update: Fri 12 Dec 2025 03:13:11 +0000
Files and hashes: 1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: jYnwprTFkllhtvHNocNlOvJmaR6LPQ1OkQp1WYxIFEI=)
2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: 3aT0muq2AP76fHDV6M45dsCuBJOlUCEA5kwKeP8ww7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Validity
Not Before: Dec 5 03:13:11 2025 GMT
Not After : Dec 12 03:13:11 2025 GMT
Subject: CN=69324dc7-0d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:8d:2a:a3:a9:d6:7f:d8:83:1e:dc:15:83:
f5:3b:69:2b:3e:80:23:69:b7:54:46:7b:5a:58:0f:
3d:94:de:33:4c:9e:cd:f5:4e:53:b7:f6:ae:43:c8:
aa:02:4f:e4:90:b8:d4:80:40:45:b6:38:e2:ec:66:
c3:b2:5a:9d:89:b9:88:4e:d1:77:88:d2:17:40:b9:
f5:fe:16:ad:cf:0f:31:bd:7f:25:31:09:a6:81:5e:
bf:74:c7:6c:05:ce:e7:89:c2:be:c6:8a:b3:c5:95:
4f:f8:7d:c5:51:1b:63:e6:93:6f:30:45:71:1c:56:
d8:7b:bc:74:65:89:48:f0:1e:41:d3:99:d7:f2:19:
c7:8c:31:4f:d0:45:4a:b3:59:73:d1:94:de:cf:ff:
7f:25:9d:3c:43:03:87:97:4d:ea:70:87:5f:22:85:
9c:20:c0:20:15:c6:c7:b1:3c:0a:34:87:18:b7:bc:
47:7f:28:8f:d3:87:0c:c3:e4:77:9e:45:a3:5d:6b:
f6:78:30:6e:e1:77:fd:30:64:8d:04:c3:da:e3:34:
7f:07:fa:bc:0a:f7:2a:dd:d4:bd:80:8f:8a:64:18:
c2:e4:b2:11:14:bd:5c:2c:ea:6a:25:b4:db:d9:0a:
74:c9:da:a9:27:ee:5d:fb:df:e6:0a:84:16:07:09:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:9D:2F:E5:5C:97:DF:D3:20:D8:49:AE:0A:D8:E6:7D:F3:46:C4
X509v3 Authority Key Identifier:
keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:8f:2a:21:cf:22:7d:76:ed:80:53:a2:44:d7:27:2c:54:fa:
9c:f7:c8:e5:d0:4c:fb:83:02:7d:29:25:53:f8:f0:8e:d9:65:
2c:55:72:f9:e6:f7:87:c2:a9:4e:b2:51:c0:4f:67:c4:28:95:
3b:b0:30:b4:c6:a0:47:4e:11:af:20:6e:b5:76:4b:37:f6:66:
f3:30:5a:ab:4f:b4:3b:c9:62:ef:65:09:82:17:2c:93:7d:e2:
25:bf:d0:1f:cf:5c:53:4d:3e:e8:98:d9:8d:ca:85:ac:3f:5b:
77:7c:be:b4:0c:68:5f:04:1f:8e:14:f8:70:46:45:55:eb:1a:
86:46:ac:59:28:b6:5f:3e:fb:2b:14:5f:89:aa:95:89:b3:66:
6e:20:f4:c0:59:8a:42:0f:f0:1b:49:40:4d:96:38:38:6c:a3:
7a:42:2b:dd:0b:d8:bd:13:80:c5:f6:e7:2d:44:e1:c1:7a:31:
a4:84:74:ab:18:87:66:39:9b:09:8b:d3:7d:92:69:06:3b:32:
16:1d:81:2d:ea:cf:a6:74:81:ce:a7:00:19:93:3b:a4:81:ae:
74:4d:fe:76:1f:e3:77:27:71:71:49:61:b0:64:0a:3d:cf:41:
3d:5c:20:67:cf:de:be:b4:65:a9:c1:8b:b3:72:fe:24:bc:5a:
2e:bd:f3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:59:17 2025 by rpki-client