This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
File: yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json)
Hash identifier: ty0CBYtqfw6xnBm1V7jTlpdcLsxC2dA5M0yyYti8Hhg=
Subject key identifier: 99:93:D8:81:E8:F6:4B:2D:23:2C:25:DF:85:1E:7F:3F:ED:24:E5:C3
Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Certificate serial: A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
Manifest number: 9B
Signing time: Fri 05 Dec 2025 04:22:05 +0000
Manifest this update: Fri 05 Dec 2025 04:22:04 +0000
Manifest next update: Fri 12 Dec 2025 04:22:04 +0000
Files and hashes: 1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: 4784yEhIxMcfe64xKUpjHxRxJ6BAZwWeDwfS2ug2fKg=)
2: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: DPBnqYDTJSln1r3AOtKRNxAr3JL7tCw2D7o2HDWUU1c=)
3: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: 2T6Fyq/x0X9hd51yz+uFduciFhCl9089BnkJOOwfbVI=)
4: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: nS3x5Wrf6OGlupRs4tpRKGZuj5/u2uLXlydcgcq1K8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Validity
Not Before: Dec 5 04:22:04 2025 GMT
Not After : Dec 12 04:22:04 2025 GMT
Subject: CN=69325ded-8e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:0c:de:97:ab:21:cc:9b:5d:c3:c0:4b:96:
58:8e:55:b5:84:82:0f:37:04:9a:89:6c:0b:03:4d:
63:80:b6:af:1b:45:18:6f:a4:05:53:40:b5:e7:85:
13:52:0a:16:fb:b6:c1:67:4d:83:d2:0f:49:65:29:
19:09:ce:86:08:1e:6c:6c:ef:ab:3c:65:e8:11:23:
2a:2c:9b:5c:9d:bf:ea:ca:38:5e:47:6e:a4:c5:17:
8c:4c:6c:62:2e:e2:2f:ea:a8:d6:d0:2b:f6:f0:48:
6e:33:07:20:38:44:39:02:79:ee:20:54:83:90:1e:
e0:22:20:da:10:d1:aa:97:3f:40:a5:30:7e:30:4d:
a5:9e:93:73:42:9b:8c:ce:53:c0:f8:70:c6:b9:9b:
7f:a6:27:ca:60:e4:d9:b7:18:b6:79:d9:3a:4d:33:
da:10:cf:99:21:18:85:23:cf:fb:a6:24:33:da:47:
0e:54:08:ec:1b:05:04:50:24:32:92:fc:ef:19:14:
93:36:13:7a:6c:4a:bc:f9:9a:f6:67:50:75:2b:ad:
1d:2f:20:08:d3:4e:3d:30:16:95:6c:63:2d:35:a6:
c9:3a:02:ec:7d:a8:a8:2f:6a:45:9b:ad:bc:75:fd:
f5:65:b9:63:2e:3e:da:37:99:81:09:3b:b9:5b:ff:
b4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:93:D8:81:E8:F6:4B:2D:23:2C:25:DF:85:1E:7F:3F:ED:24:E5:C3
X509v3 Authority Key Identifier:
keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:b9:e2:a2:60:85:69:d0:81:47:eb:a0:41:d2:11:83:57:b8:
e2:8e:2e:82:a1:a6:8c:ae:07:f8:c5:a6:2e:5f:e9:f2:75:ac:
47:19:8f:be:85:c9:c8:70:49:9c:d4:9e:99:66:2b:84:1a:37:
f6:fc:61:57:f3:f5:35:59:07:1b:37:a6:d3:b8:55:33:bf:fb:
b2:62:b0:ea:33:c4:23:f0:cf:a2:e8:b1:70:fe:33:ca:d9:82:
4c:8e:9a:14:c0:78:58:c3:57:3e:60:55:d1:7b:e9:86:33:3e:
f7:c4:c3:a0:d1:99:70:35:1d:e1:46:48:9f:a1:5c:33:86:5d:
43:ae:a6:dc:f9:e3:10:64:84:2e:a6:8f:72:a8:aa:67:81:ae:
bf:f1:38:d9:fb:5b:7d:1d:b0:77:e2:f9:64:04:8e:d7:13:c8:
65:ad:da:d6:55:d2:7e:88:a6:d1:b1:36:67:2d:ff:14:a0:27:
7f:28:b3:50:cf:5c:e1:b2:68:9b:b1:a0:dd:4e:b5:e4:ac:bc:
20:fa:3f:17:55:3a:3c:a3:c9:c2:fc:37:81:6a:9f:1e:d6:f8:
f4:90:9c:9d:e3:8e:14:3a:99:f8:0a:19:a9:38:b5:61:bc:fa:
21:a0:a3:e8:67:29:64:8d:5e:1b:df:b3:d6:49:5f:12:5c:49:
b4:c2:70:f1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUUxRkMxMTAvBgNVBAUTKENBNUY3QTMxMjFDMUY1Rjk4OTUyMEM3QTUxOTcxM0ZC
M0E2OENBN0UwHhcNMjUxMjA1MDQyMjA0WhcNMjUxMjEyMDQyMjA0WjAYMRYwFAYD
VQQDEw02OTMyNWRlZC04ZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNEM3perIcybXcPAS5ZYjlW1hIIPNwSaiWwLA01jgLavG0UYb6QFU0C154UT
UgoW+7bBZ02D0g9JZSkZCc6GCB5sbO+rPGXoESMqLJtcnb/qyjheR26kxReMTGxi
LuIv6qjW0Cv28EhuMwcgOEQ5AnnuIFSDkB7gIiDaENGqlz9ApTB+ME2lnpNzQpuM
zlPA+HDGuZt/pifKYOTZtxi2edk6TTPaEM+ZIRiFI8/7piQz2kcOVAjsGwUEUCQy
kvzvGRSTNhN6bEq8+Zr2Z1B1K60dLyAI0049MBaVbGMtNabJOgLsfaioL2pFm628
df31ZbljLj7aN5mBCTu5W/+0mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmT2IHo
9kstIywl34Uefz/tJOXDMB8GA1UdIwQYMBaAFMpfejEhwfX5iVIMelGXE/s6aMp+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTFGQy81QjMyNUZBNkU5
QjkxMUVGQjZEQTQxNENDNEY5QUUwMi95bDk2TVNIQjlmbUpVZ3g2VVpjVC16cG95
bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lsOTZNU0hCOWZtSlVneDZVWmNULXpwb3luNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTFGQy81QjMyNUZBNkU5QjkxMUVGQjZEQTQxNENDNEY5QUUwMi95bDk2TVNIQjlm
bUpVZ3g2VVpjVC16cG95bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlueKiYIVp0IFH66BB0hGDV7jiji6CoaaMrgf4xaYuX+nydaxHGY++
hcnIcEmc1J6ZZiuEGjf2/GFX8/U1WQcbN6bTuFUzv/uyYrDqM8Qj8M+i6LFw/jPK
2YJMjpoUwHhYw1c+YFXRe+mGMz73xMOg0ZlwNR3hRkifoVwzhl1Drqbc+eMQZIQu
po9yqKpnga6/8TjZ+1t9HbB34vlkBI7XE8hlrdrWVdJ+iKbRsTZnLf8UoCd/KLNQ
z1zhsmibsaDdTrXkrLwg+j8XVTo8o8nC/DeBap8e1vj0kJyd444UOpn4ChmpOLVh
vPohoKPoZylkjV4b37PWSV8SXEm0wnDx
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:02:28 2025 by rpki-client