This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
File: y7Nb36Nai-snCaTbsy49IWLsH6g.mft (raw, json)
Hash identifier: N1oWqCI4suJx5WHkr8lmt1p1JtudswaoJiJOwjQLUBM=
Subject key identifier: 7B:76:E9:7B:77:B1:66:B9:E6:BF:E3:F0:D5:DB:5F:48:D3:77:CF:39
Authority key identifier: CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8
Certificate issuer: /CN=A919130F/serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
Manifest number: 6E
Signing time: Fri 05 Dec 2025 04:48:30 +0000
Manifest this update: Fri 05 Dec 2025 04:48:29 +0000
Manifest next update: Fri 12 Dec 2025 04:48:29 +0000
Files and hashes: 1: y7Nb36Nai-snCaTbsy49IWLsH6g.crl (hash: c5AQWX0oofRFU9OSki5+v3bVZCQFNuVXLdNDaPXjecE=)
2: 26B1D24C2A4211F08783A40EC4F9AE02.roa (hash: SDRI2ES0jWjnto/2GRG1yqaHYEDkagPUNjmUepTZiAo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl
rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:48:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919130F, serialNumber=CBB35BDFA35A8BEB2709A4DBB32E3D2162EC1FA8
Validity
Not Before: Dec 5 04:48:29 2025 GMT
Not After : Dec 12 04:48:29 2025 GMT
Subject: CN=6932641d-2d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:aa:b9:57:4f:24:bc:95:21:a6:bb:93:14:
47:0d:a6:bf:f9:7e:28:cf:07:05:a7:02:1c:17:2c:
68:19:7d:3a:58:a3:79:cc:07:f2:ae:a3:af:28:74:
d4:81:89:a5:50:75:50:f2:7b:28:9b:01:13:3d:d0:
43:39:15:d3:6b:2f:c8:dc:b8:e3:7e:2c:3f:d0:71:
f3:c1:9d:25:cf:9d:7f:e3:41:5b:7c:a1:b2:e1:2a:
fc:73:4d:db:9e:eb:5b:7a:e9:b2:b6:e6:ef:16:94:
85:4e:3b:c8:0c:e8:ba:f5:91:fe:9b:8f:6d:00:94:
9c:8f:57:6f:b2:18:0a:aa:5d:70:cb:33:ac:3a:55:
8f:2d:36:0b:35:9e:25:be:88:cf:ed:ab:44:aa:0d:
fd:10:74:5c:3f:d3:8c:51:55:3e:ae:78:b9:f3:47:
bb:1d:4e:26:88:96:36:45:08:0e:73:00:d0:18:31:
d3:5e:6c:5c:38:90:53:9a:ca:c9:d5:5e:5b:62:fd:
77:68:14:62:a5:dc:a5:2c:42:40:de:41:6e:ee:d0:
be:82:65:3b:cd:db:10:69:a1:e3:f2:ef:28:79:64:
e8:3a:16:db:01:03:b5:31:8f:64:3b:a7:56:86:a3:
0d:85:2b:63:42:11:18:e4:ed:38:0f:be:76:97:0e:
74:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:76:E9:7B:77:B1:66:B9:E6:BF:E3:F0:D5:DB:5F:48:D3:77:CF:39
X509v3 Authority Key Identifier:
keyid:CB:B3:5B:DF:A3:5A:8B:EB:27:09:A4:DB:B3:2E:3D:21:62:EC:1F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7Nb36Nai-snCaTbsy49IWLsH6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919130F/72E2C4242A4111F08321934CC4F9AE02/y7Nb36Nai-snCaTbsy49IWLsH6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:11:ea:92:73:88:ea:7a:8c:8b:bd:2e:73:9f:cc:60:4b:16:
9a:6e:97:5a:b5:78:f5:72:9e:cf:28:cc:21:ac:64:07:e1:d0:
47:e4:b1:f7:d4:44:b1:ff:3c:50:2d:40:68:0c:0f:c0:d2:58:
25:72:bf:6f:9d:3f:ff:44:c7:9c:68:74:dd:43:bd:cb:b3:00:
82:69:aa:d5:a5:3f:ab:da:be:22:0e:50:d3:19:7d:25:45:80:
33:84:1e:83:f1:fc:2a:35:3e:77:c3:d8:4d:60:cf:24:dc:ed:
a4:ea:20:4f:53:54:d0:9b:ae:c8:1b:01:14:8f:6e:9d:bd:6e:
1d:1a:0c:be:3e:f3:0b:78:0e:93:b5:b5:5d:80:47:c0:0a:75:
48:fa:48:60:00:08:d4:36:3a:9c:73:9e:82:3a:cc:c4:3a:97:
80:f0:b3:a8:c6:a6:02:30:c1:31:e2:61:e3:bd:2f:e6:e5:c3:
e1:40:ff:e7:4a:2d:a2:91:49:b8:2e:5b:07:95:70:69:93:09:
3a:a3:6c:21:37:9c:ba:8b:1b:67:7d:3a:21:d1:9b:b7:09:c2:
41:b8:58:33:52:24:51:b9:34:6a:db:e4:29:cf:a8:72:ac:2b:
1f:59:b9:88:9f:59:91:9c:be:a1:ee:a0:bd:90:96:2e:42:15:
16:47:1d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:04 2025 by rpki-client