This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
File: Yg05s6GDeXO9EyafKwasmyc4gg0.mft (raw, json)
Hash identifier: oa71SNIGqrvoFEwHENd8hSEOHh8qKrFSXxDl8BBTWSk=
Subject key identifier: F3:E3:AB:DA:FF:2F:A8:6C:2C:79:C5:80:9C:54:06:DA:09:AB:BF:A4
Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D
Certificate serial: B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
Manifest number: AA
Signing time: Fri 05 Dec 2025 04:18:12 +0000
Manifest this update: Fri 05 Dec 2025 04:18:11 +0000
Manifest next update: Fri 12 Dec 2025 04:18:11 +0000
Files and hashes: 1: Yg05s6GDeXO9EyafKwasmyc4gg0.crl (hash: P9/dL+NWvaomutSarUekw5BqZX/DpetwIkIS8Io5oYY=)
2: F2CD19D6E96011EF8940367DC4F9AE02.roa (hash: ++9L+NGOaw5DrKySyO8La0vQc8M3tYnN6EhjONDGSUQ=)
3: E454FEF2689311F09107C42BC4F9AE02.roa (hash: GyGMKgS9X/eYqbsrmXREtsm2FLIobZJ8M53ERZyQ3yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl
rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 178 (0xb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D
Validity
Not Before: Dec 5 04:18:11 2025 GMT
Not After : Dec 12 04:18:11 2025 GMT
Subject: CN=69325d04-d2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:21:85:88:c4:cc:f0:f0:93:b1:28:a4:a0:
07:16:41:2d:5c:73:a7:bc:d7:99:93:aa:25:59:a1:
ab:f8:0e:be:58:d9:05:15:9b:83:96:b8:26:28:84:
54:12:5e:5e:83:27:6b:91:01:05:d9:c1:c9:9c:54:
aa:09:97:44:0c:99:84:2e:84:30:70:7b:48:ec:d6:
12:b3:ec:9f:8e:a5:70:65:bc:6b:09:66:4d:d9:4a:
32:79:dd:08:a6:62:5b:80:09:8c:91:f9:dc:9d:b3:
8e:3e:b3:a6:f0:1e:d2:a8:56:b5:0b:9c:4d:56:44:
fd:3d:6b:29:8b:bc:9b:0a:b2:63:c8:3f:54:be:43:
15:07:c1:42:c4:05:89:ab:21:0e:62:5c:8d:7b:a1:
d1:9d:e9:3b:61:c5:1c:6a:bf:77:73:6c:17:83:b5:
a0:27:e3:07:9a:44:94:e3:12:94:45:ed:d9:88:12:
43:48:0f:f1:32:47:01:46:5d:60:24:7f:45:41:b2:
bf:2a:69:21:96:8a:1b:90:2a:ec:b2:d8:79:1b:4f:
89:1e:19:d8:6b:4f:b0:e6:bc:fc:59:4e:8c:31:d8:
73:73:8e:bd:f1:32:71:5d:59:41:d3:05:62:ec:cd:
f8:b9:0c:04:5f:5c:94:89:98:75:dc:d0:4a:5e:c2:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:AB:DA:FF:2F:A8:6C:2C:79:C5:80:9C:54:06:DA:09:AB:BF:A4
X509v3 Authority Key Identifier:
keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:63:90:1f:b0:a3:84:f6:61:bc:eb:cd:b9:d1:c7:d6:54:ed:
60:82:2c:57:29:f2:68:16:f5:9d:7d:fb:ea:3b:20:e0:5f:b4:
93:d8:22:2f:db:18:fc:94:81:87:a0:23:a1:56:81:62:02:27:
f8:e4:fe:00:71:1b:1b:1f:67:e9:e1:67:27:87:ea:1c:44:fe:
9a:ae:82:1c:19:4d:d7:15:47:d9:c6:21:18:3d:64:fb:54:97:
13:67:33:88:57:1d:8e:f0:fb:83:fa:4b:a2:70:26:d0:47:6a:
b9:b1:d2:b7:12:46:c2:2b:f2:15:9f:43:bc:08:cd:6d:99:ab:
41:4a:e2:cb:4f:36:0c:03:b1:bb:b7:e4:ab:df:9a:0a:7a:ca:
f3:07:95:4b:17:4c:ec:b4:63:1c:65:b5:ca:21:e6:28:83:c8:
bb:c1:4e:ea:c9:14:0f:2e:87:05:12:77:14:b6:e4:5f:04:da:
6d:ad:82:f2:7a:29:19:de:c4:15:60:c6:81:c5:58:d9:a4:83:
ab:fb:e9:7e:6d:65:10:f6:a1:14:c3:a4:7e:14:d3:ba:34:ef:
36:08:2b:f2:9c:a5:07:fc:42:99:50:a6:5c:d7:59:cf:7c:e6:
0f:61:68:f8:80:e8:91:a6:e1:28:42:6f:94:7c:1f:b1:bc:5a:
9a:ee:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:23:19 2025 by rpki-client