This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
File: yZ1gB81HfYmzWcM8k8qptbsQYBo.mft (raw, json)
Hash identifier: 4V1AmNGrIlIFPRmFnD0eJFtfRGDGA31A92g3pup9gPE=
Subject key identifier: B9:D0:83:45:9F:7E:73:15:64:47:6A:CB:36:BB:7A:76:F5:2F:55:8D
Authority key identifier: C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A
Certificate issuer: /CN=A9173F03/serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
Certificate serial: 0C90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
Manifest number: 0C80
Signing time: Sat 06 Dec 2025 17:52:25 +0000
Manifest this update: Sat 06 Dec 2025 17:52:24 +0000
Manifest next update: Sat 13 Dec 2025 17:52:24 +0000
Files and hashes: 1: yZ1gB81HfYmzWcM8k8qptbsQYBo.crl (hash: v+MD9tRoeH5xZXzmMPy+GQKV0V/f8XqDcJYMhu3E4sg=)
2: 1F3C6E3C6E6811EF93F0A64EC4F9AE02.roa (hash: KCbvW2+iTb2FhCUJSCAthuyvDnx7MU5+U8PZ8z1pu+g=)
3: 7D16D03C861A11EF99D32B66C4F9AE02.roa (hash: LFZ6uBkW6voau17buZXmD8B1WuozeZe536RV9ixDxuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl
rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 17:52:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3216 (0xc90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9173F03, serialNumber=C99D6007CD477D89B359C33C93CAA9B5BB10601A
Validity
Not Before: Dec 6 17:52:24 2025 GMT
Not After : Dec 13 17:52:24 2025 GMT
Subject: CN=69346d59-4d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:32:a9:2c:2e:39:1b:1c:2d:ae:d4:1c:da:
e5:97:08:55:51:9f:d4:8b:d8:6f:e7:68:20:41:ca:
bd:75:b3:60:37:5c:9e:c8:98:04:98:05:6e:a7:31:
17:85:fc:1e:94:4c:63:76:f8:ee:61:d4:11:57:9e:
57:cb:54:6f:2c:dc:83:35:50:61:d4:47:2e:c3:70:
4c:14:2b:0a:32:8a:26:d5:bf:5b:13:94:9a:5c:b0:
7d:f2:22:c2:fb:42:89:81:63:cf:aa:ce:32:8f:24:
f7:d8:38:7b:51:f6:2a:4a:e3:74:32:a4:30:30:5c:
ce:f6:97:1b:b3:06:c4:5d:64:d3:2b:9f:f1:4e:80:
3b:68:b6:0b:9f:8a:07:b3:07:33:14:fb:6e:3e:b8:
1e:8f:92:b1:65:c0:77:1f:72:26:fe:c6:b1:9b:d8:
a3:82:d1:fd:11:62:60:2b:28:61:02:40:3c:67:9f:
49:ec:bb:da:54:01:82:e2:76:cc:c2:af:fd:69:ea:
5c:7e:d6:f9:80:6c:34:9f:89:c8:d2:6c:5f:b0:71:
bd:76:37:19:66:f8:53:4b:58:ab:04:c6:20:2c:9b:
5f:78:e5:56:86:f8:0a:ef:5f:e5:93:c8:76:f2:f0:
09:c8:5b:31:29:93:65:f8:68:55:cd:af:20:09:a4:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D0:83:45:9F:7E:73:15:64:47:6A:CB:36:BB:7A:76:F5:2F:55:8D
X509v3 Authority Key Identifier:
keyid:C9:9D:60:07:CD:47:7D:89:B3:59:C3:3C:93:CA:A9:B5:BB:10:60:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ1gB81HfYmzWcM8k8qptbsQYBo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F03/64F6C28E0DE111EA99669885C4F9AE02/yZ1gB81HfYmzWcM8k8qptbsQYBo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:0c:a6:56:52:38:ee:2a:81:2a:63:69:0e:27:b4:c5:53:6e:
cc:46:70:3b:a1:15:9d:d0:c3:92:60:8a:e1:ab:25:4e:f7:7c:
bc:08:bb:43:6c:b7:12:63:d4:4c:54:09:52:8c:9f:7f:94:8b:
04:32:b5:ed:90:f6:dc:b2:bf:12:cd:40:b9:57:b1:f3:58:e4:
35:8e:0c:be:b5:f5:12:a5:17:20:37:73:bd:8a:4d:7e:4a:8b:
7f:ef:a1:08:c1:b5:78:4c:70:b7:02:3c:6b:47:f9:e3:7d:54:
61:77:3d:f2:e3:1c:b4:f9:c0:e1:ad:dd:e6:78:5a:eb:1c:6f:
6b:ab:b1:4b:ee:9f:51:cd:f2:be:c3:2d:e9:3b:1f:39:6d:90:
b7:38:87:cc:b1:1b:7b:90:2a:87:b8:27:81:96:c9:04:55:e9:
e8:3b:f4:26:49:fa:34:49:f7:84:09:bc:50:6b:71:3c:5a:cc:
88:7f:7d:91:36:2f:a9:3f:9d:17:8e:ca:4b:42:34:14:3a:1a:
b6:12:a2:e0:3f:76:6b:c0:0e:c3:74:86:e9:39:05:c4:91:ef:
83:64:ba:9b:23:fb:7c:45:82:18:82:e2:81:cf:9b:dd:bd:01:
93:d9:7e:81:7f:20:14:ff:ae:c8:fa:2a:d4:c4:92:b4:67:63:
8e:54:32:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:13:32 2025 by rpki-client