This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
File: yddu42nMHPDmKcUQpLr0ZeFfteE.mft (raw, json)
Hash identifier: tgfma3tZV73kz50pMqylgKas+pPwqZ60E0W7KtY086o=
Subject key identifier: 12:82:B9:A3:1A:7D:38:AC:B2:81:E8:F8:F7:70:13:1F:D1:45:0B:6D
Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
Certificate issuer: /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
Certificate serial: 0477
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
Manifest number: 0472
Signing time: Thu 04 Dec 2025 22:37:31 +0000
Manifest this update: Thu 04 Dec 2025 22:37:31 +0000
Manifest next update: Thu 11 Dec 2025 22:37:31 +0000
Files and hashes: 1: yddu42nMHPDmKcUQpLr0ZeFfteE.crl (hash: D21iDWRxs8GL0EMvI+LyhpDUOVOom/hykts7oAjTFx4=)
2: AD9D02406C6811ECB7C0925AC4F9AE02.roa (hash: kw8NlMSw+Nqcx4jBYDikGpkNhg4pIHl7KmPwkj2eC0g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl
rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:37:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1143 (0x477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
Validity
Not Before: Dec 4 22:37:31 2025 GMT
Not After : Dec 11 22:37:31 2025 GMT
Subject: CN=69320d2b-9d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:c1:0e:47:82:3b:32:b6:c8:60:08:ff:72:
c9:9c:4b:dd:a1:e9:27:9c:62:66:f1:6f:75:46:95:
e1:91:71:bb:0a:ca:08:cf:51:97:59:bd:b6:d0:07:
af:37:a0:16:94:fc:1c:43:a6:46:39:1f:aa:16:39:
86:5a:08:dd:90:96:73:21:00:f5:ed:64:1a:3b:50:
59:3c:53:2f:94:e8:8a:71:44:a3:2b:ed:26:90:30:
73:ad:90:50:73:81:c3:fe:3f:07:fb:54:a8:e8:89:
56:7d:f3:ad:80:80:ee:1a:ef:4c:9c:ab:e9:ea:34:
e4:99:3b:c6:36:dc:61:d9:e4:3e:2f:48:8a:98:92:
be:df:ed:30:dd:dc:ee:67:8e:85:76:94:78:d6:6b:
9a:da:90:1c:6e:49:9c:a0:69:2a:10:63:bf:c3:46:
2f:8c:9a:4c:c9:f3:d5:91:cc:53:d7:5e:bf:02:ac:
ad:71:40:3e:f7:b3:3e:3c:4b:f1:9c:bf:e8:6d:dd:
ea:8b:4d:63:f7:d1:ca:48:7c:20:ae:58:fd:f5:34:
4e:e7:78:1a:32:d6:ef:f2:0e:37:6e:b9:d6:5d:c9:
04:3c:ed:4b:22:69:7a:3b:75:46:ed:7a:22:9b:88:
5d:89:d9:41:9a:84:03:93:7e:4a:76:bf:d4:7c:05:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:82:B9:A3:1A:7D:38:AC:B2:81:E8:F8:F7:70:13:1F:D1:45:0B:6D
X509v3 Authority Key Identifier:
keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:a0:86:b8:08:0b:0a:4f:17:79:84:f2:c1:0a:f7:31:09:80:
c4:5e:5e:13:6a:94:63:15:88:3b:78:bf:68:8f:36:51:81:07:
dd:0d:c5:3e:ed:cb:6d:fc:bf:f4:de:ed:a3:d3:31:f7:ea:4c:
99:ac:31:f2:8c:99:70:5f:01:b9:d2:c9:d6:4a:51:53:05:1e:
71:3e:9a:ed:4a:d7:07:7d:80:6d:28:e9:dd:2f:0c:7e:69:ba:
d7:19:5b:49:25:43:bf:87:6b:c0:6e:3e:c8:15:38:35:a2:55:
3f:0a:0c:2c:07:7f:97:93:27:52:46:9e:9f:d4:b0:00:d5:7a:
27:fe:f2:eb:fb:26:11:aa:7e:e7:2a:bd:6e:27:52:3c:fe:06:
c0:b6:68:14:62:18:c1:7a:e1:d3:96:d8:55:fc:77:0e:17:ab:
2b:f0:6a:e7:9d:2e:de:de:b5:bf:c2:51:2a:da:89:ec:ea:fe:
b3:50:d8:9c:62:1f:1a:cf:f6:60:d2:f8:46:0a:15:28:2d:ff:
d7:69:ff:eb:b3:72:95:33:7d:4b:5e:d7:34:93:4b:30:7d:55:
e5:7d:03:46:a0:62:99:8e:cf:c0:cf:35:94:ec:c8:af:a1:5e:
bb:3d:e1:e9:22:ee:22:58:b2:c2:d9:1b:68:14:4b:96:ca:6f:
50:47:ea:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:10:34 2025 by rpki-client