This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
File: yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft (raw, json)
Hash identifier: BDVzH4RGC2kyKc7HDfE/bHcRJV7HskTff+ZO3UiOXFk=
Subject key identifier: CE:9B:62:1F:28:EA:A1:B7:53:69:17:D3:FB:5D:CF:F8:3A:B0:AB:B3
Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Certificate serial: 0E9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
Manifest number: 204A
Signing time: Tue 16 Dec 2025 17:03:32 +0000
Manifest this update: Tue 16 Dec 2025 17:03:32 +0000
Manifest next update: Tue 23 Dec 2025 17:03:32 +0000
Files and hashes: 1: yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl (hash: JMLpbn5ERriLGccgdKV/zgA1/51FYJyNhZWFJNB4EBk=)
2: 70F15C5CC5CA11EEA9DD0141C4F9AE02.roa (hash: qTqcBFpr622OYkqG96eDnnoJ09wPpnvN7CHOU2zyZG0=)
3: BFD96CC4C5CA11EEBFA07341C4F9AE02.roa (hash: SV6dYe0/qbcbeBjCTRLSVOKAd3cmZlbo1prAD3jSVSk=)
4: 3536466A2EFC11EE9618725BC4F9AE02.roa (hash: 2QTo+CsdRhAVYGY+SP4UeTuLXQh1z3BW1C7/XMRXisw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 23 Dec 2025 17:03:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3743 (0xe9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B06C, serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986
Validity
Not Before: Dec 16 17:03:32 2025 GMT
Not After : Dec 23 17:03:32 2025 GMT
Subject: CN=694190e4-5775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7a:7a:a0:89:2d:26:74:0f:0e:5e:64:a0:89:
a5:9d:6b:cc:80:c6:11:09:17:5d:4c:61:b3:75:0a:
32:98:6e:9a:84:50:b1:64:1e:c7:c4:ef:ac:d8:28:
1e:38:99:b3:b1:c8:8d:f7:6c:21:50:62:bf:2f:bb:
d4:fb:ab:eb:23:f3:0d:9f:a8:18:43:64:da:ef:91:
55:ff:59:ed:ab:dd:f5:7b:b9:6e:96:c1:ab:ae:60:
87:58:a3:d4:04:35:2f:0d:b3:a4:8b:48:81:93:5c:
7e:41:d8:9d:60:52:7e:06:74:91:a0:68:ae:7b:0e:
5d:89:2d:10:40:12:ae:62:ac:7a:00:6d:1e:d4:41:
eb:1e:ad:18:76:56:35:65:19:73:e5:22:0a:6e:27:
13:fb:b4:00:c7:85:5a:a5:f3:e8:0e:17:99:2f:ab:
ab:65:c4:cf:29:73:6f:9e:ec:a6:c5:d0:21:20:7e:
53:0d:d3:86:ee:82:1d:26:ea:f5:22:25:5d:cd:6d:
3e:99:e2:1b:f0:cb:9c:f6:51:16:8d:8e:31:a6:88:
8e:0d:a3:c1:cb:9a:a2:b2:b0:dc:c2:5e:1d:06:dd:
04:56:1f:7c:35:a6:07:d6:a9:9f:31:ff:e1:7b:96:
6e:a3:a3:35:9a:41:53:1d:b9:01:1f:c1:ba:83:67:
2b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9B:62:1F:28:EA:A1:B7:53:69:17:D3:FB:5D:CF:F8:3A:B0:AB:B3
X509v3 Authority Key Identifier:
keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:f1:e2:b3:b4:bd:6f:ba:35:d1:0a:48:58:4e:d1:6e:2e:ce:
cc:46:4e:56:4f:5f:d7:52:9e:e1:f0:f4:e5:ab:91:0a:0b:c7:
44:10:74:15:bc:78:45:35:b2:8a:5f:37:76:20:ac:f7:3a:57:
60:01:92:9b:32:29:48:43:c6:6a:f1:63:a8:9d:15:e1:9f:74:
27:19:01:d9:9e:89:f7:36:18:76:2a:00:7c:8f:30:31:18:af:
8e:68:d6:3f:53:e9:42:8b:df:92:86:30:36:d4:56:ab:c7:87:
1a:20:50:6d:19:c7:dc:fc:f6:0d:9d:e6:68:32:81:50:02:1a:
e4:b2:6a:30:c4:f4:cc:5b:0b:59:88:80:cc:b8:d0:fc:27:83:
4f:d9:c6:5f:37:e4:31:f4:fc:92:19:52:ba:5c:f4:36:83:b3:
3b:7f:5c:f5:07:fb:53:dd:a1:34:87:ac:fe:67:80:86:3d:75:
82:f7:39:15:fb:4c:97:34:ed:d6:d9:58:97:bc:53:c3:79:8f:
83:ab:e5:98:20:9f:ca:ee:94:c0:64:a6:fb:5e:b4:e5:36:44:
de:ae:0a:69:67:6f:8d:54:ba:ff:1b:9b:e9:ac:ca:7f:6e:86:
82:e7:74:2b:93:fe:78:fa:48:8e:aa:a6:1b:51:30:8b:cc:a3:
bf:d6:f1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 14:07:54 2025 by rpki-client