This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
File: 7Yy8VM2G8sH5LexryQnbxvpjTIE.mft (raw, json)
Hash identifier: DIsKKRLh2P9uNHkypFAp3Ex5H4ya2jd+fMSkLIWhBxA=
Subject key identifier: 98:51:2A:BF:6C:52:01:CB:DB:77:5C:33:2C:A0:4B:F5:CB:4A:D3:C9
Authority key identifier: ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
Certificate issuer: /CN=A918A3E6/serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Certificate serial: 0845
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
Manifest number: 0838
Signing time: Thu 04 Dec 2025 19:54:52 +0000
Manifest this update: Thu 04 Dec 2025 19:54:51 +0000
Manifest next update: Thu 11 Dec 2025 19:54:51 +0000
Files and hashes: 1: 7Yy8VM2G8sH5LexryQnbxvpjTIE.crl (hash: gpDDyw8DStuEdv/8dUXv1rrfTM0CJLH5ifVHGKh1E48=)
2: C130A016889811EE8EB03D6EC4F9AE02.roa (hash: A+8vz2aU+wC552KBg2dFDTbTWJJd1ELKdd2raygWGUA=)
3: 7ABD27E4889811EEB99AD46DC4F9AE02.roa (hash: Vo3PCsdHmPC7RHzYgOW5sXRasLzQm3wjobK8wMgaD5g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:54:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117 (0x845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A3E6, serialNumber=ED8CBC54CD86F2C1F92DEC6BC909DBC6FA634C81
Validity
Not Before: Dec 4 19:54:51 2025 GMT
Not After : Dec 11 19:54:51 2025 GMT
Subject: CN=6931e70c-42b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:59:96:84:27:77:76:00:fc:a2:26:bc:64:
a2:de:73:4b:ac:02:bd:bd:46:db:1d:a4:dd:16:88:
ff:d3:7a:eb:f4:78:d1:6f:88:18:b2:60:1c:e9:b6:
ca:28:74:ae:72:30:32:c4:ef:ec:29:31:68:46:ae:
84:28:0c:45:06:f5:cd:75:ba:c8:c2:b0:da:63:af:
cc:89:0a:2b:a5:ef:94:93:cd:23:07:8f:82:3f:5b:
c8:f2:83:10:64:4b:29:d1:8c:12:8a:69:ac:e4:01:
b0:52:69:79:3a:f6:4b:8e:b6:b4:60:bd:b2:d9:c5:
60:89:01:a5:9c:dd:f7:f1:f4:19:14:8e:5e:29:7b:
53:ba:4d:eb:0c:19:23:25:6d:1f:ac:91:0a:58:cb:
bd:b9:da:4c:74:4f:0f:8d:19:f4:7e:c4:75:58:1a:
a5:f4:9f:e1:3f:1e:d8:61:1f:60:07:42:2a:c6:e9:
59:43:b2:ac:54:42:a4:d7:08:b0:a3:e3:de:a8:f1:
33:a3:10:b2:25:e2:96:14:83:84:23:61:7a:5c:14:
a5:01:3c:3d:44:07:a5:67:80:d9:6a:16:94:0a:d2:
bb:a7:c2:84:15:5c:a1:7f:ef:65:95:35:68:0b:4a:
77:ef:a8:c0:a6:66:bc:16:1a:c6:b1:df:64:2f:11:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:51:2A:BF:6C:52:01:CB:DB:77:5C:33:2C:A0:4B:F5:CB:4A:D3:C9
X509v3 Authority Key Identifier:
keyid:ED:8C:BC:54:CD:86:F2:C1:F9:2D:EC:6B:C9:09:DB:C6:FA:63:4C:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Yy8VM2G8sH5LexryQnbxvpjTIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A3E6/640D618EF2C911EA86F12717C4F9AE02/7Yy8VM2G8sH5LexryQnbxvpjTIE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:47:a6:e5:a0:d9:61:ab:db:a6:72:a7:1b:1b:74:18:68:3c:
36:81:2d:8f:51:ee:27:34:01:90:c0:1b:78:53:1a:ba:dc:ef:
6e:40:c2:06:5f:ab:46:e1:3a:34:af:ae:17:bb:11:be:97:a5:
57:93:92:b3:c5:1c:ac:c0:df:dd:7d:51:5c:dd:79:e7:73:ef:
e3:e3:e9:dd:22:da:bf:3b:db:4b:2f:22:c8:f0:2a:ce:4c:36:
b1:1e:93:96:7e:98:dc:76:d6:51:85:09:20:b2:06:a6:5f:f1:
ef:df:f6:72:10:64:78:ee:02:91:b4:8d:d0:67:57:d9:5b:30:
85:af:e8:2c:06:4e:f9:bc:4e:fe:30:e2:cc:b6:e8:b3:1a:cd:
9b:05:b1:dc:5e:58:87:00:d4:d0:5b:da:4d:f5:d3:82:61:b2:
80:53:6f:d2:eb:f7:75:09:5d:d9:06:48:b0:3e:10:50:a0:58:
3f:d0:96:af:ca:60:28:07:2c:76:e8:ba:87:b7:04:12:88:6b:
13:e6:71:0e:f2:f4:9f:48:45:f0:11:48:59:8b:69:b3:5a:f2:
28:dd:c3:4d:e9:74:16:f4:fa:5a:cf:87:e8:58:26:34:62:a3:
9d:e9:63:15:6e:d6:5b:f9:fb:e8:db:fc:5e:98:28:84:6d:35:
10:67:7a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:34:08 2025 by rpki-client