This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
File: Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft (raw, json)
Hash identifier: igWQGKe7sSy7A4cHhmboFHWcWhpTY+RiEOSqjVhx0n0=
Subject key identifier: D2:CB:EF:AD:9D:31:18:92:24:83:75:66:20:48:D5:04:C2:2B:7F:69
Authority key identifier: 63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C
Certificate issuer: /CN=A91C15F2/serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
Certificate serial: 0649
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
Manifest number: 0640
Signing time: Sat 06 Dec 2025 21:34:29 +0000
Manifest this update: Sat 06 Dec 2025 21:34:28 +0000
Manifest next update: Sat 13 Dec 2025 21:34:28 +0000
Files and hashes: 1: Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl (hash: S33wF+KJuWdRQOid0toTfJSeXGtO9Qwg+96fBbmzNVY=)
2: C8AE3C40B93811EBAC80A46DC4F9AE02.roa (hash: Ck3Q3b0m7wZfc35rCMLbisQ7sVgiMLOPm+0PDdt1xrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl
rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 21:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C15F2, serialNumber=6382B513348315D5AF3F130EC54C1DA867288C2C
Validity
Not Before: Dec 6 21:34:28 2025 GMT
Not After : Dec 13 21:34:28 2025 GMT
Subject: CN=6934a165-a6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:f5:6f:79:37:2b:da:e5:dd:47:47:1e:20:
3b:b3:aa:52:75:7a:f8:6e:7d:68:b4:09:22:29:c5:
e8:95:ee:2a:cf:cf:23:94:0b:29:5c:4d:d2:e5:99:
78:3a:8d:a4:6f:78:52:28:e4:c6:b8:86:1a:12:15:
42:ef:e4:4c:38:3e:a5:76:1d:53:cd:60:a0:5e:d2:
08:52:f7:c2:c8:d2:a4:2a:c2:5c:17:89:c6:e5:ce:
bf:f4:be:dc:a7:8c:9e:99:6f:24:34:97:be:0a:3c:
d0:a0:79:ab:12:5e:93:c3:24:6b:a5:51:d1:89:dc:
79:65:0d:b7:80:45:92:50:de:0a:95:23:da:47:59:
d5:69:26:50:ba:c3:dd:99:40:65:04:07:31:ea:49:
5f:8d:d8:e3:7d:a0:51:bf:9c:16:bd:77:76:e9:5a:
f8:24:73:eb:01:bf:41:e4:c6:a3:81:c0:7c:9a:c4:
25:ca:53:c9:57:73:7c:18:f3:6a:f7:fe:7c:86:7c:
a3:36:58:8a:fe:34:b0:c0:33:f5:e0:4f:9e:16:09:
1e:d1:41:fb:14:47:a6:28:b0:7a:7a:70:c2:90:49:
d6:57:0b:76:43:0e:f6:c2:5d:67:68:5e:d8:94:ba:
9c:cd:c6:2d:e4:ba:80:36:f9:71:90:3e:c9:1e:d3:
d7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:EF:AD:9D:31:18:92:24:83:75:66:20:48:D5:04:C2:2B:7F:69
X509v3 Authority Key Identifier:
keyid:63:82:B5:13:34:83:15:D5:AF:3F:13:0E:C5:4C:1D:A8:67:28:8C:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y4K1EzSDFdWvPxMOxUwdqGcojCw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C15F2/56322D98B89811EBAD6C1D48C4F9AE02/Y4K1EzSDFdWvPxMOxUwdqGcojCw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:4b:91:09:6d:22:df:c0:f3:21:3e:b3:e1:02:28:9e:19:e5:
09:41:77:f6:e5:2c:a3:af:77:52:db:c9:26:e7:94:5c:e5:6c:
30:40:0d:8d:cf:82:2f:15:ff:10:d7:1a:f9:4c:bc:fe:46:b6:
32:5b:68:4e:80:fc:0b:4f:25:49:f8:d2:e6:77:92:1d:8e:2f:
98:dd:d9:e8:64:6e:e0:a3:2d:a3:9e:5e:3b:f9:1b:16:70:5e:
8f:49:c0:2a:01:db:5a:86:68:1b:36:46:62:55:ed:89:c5:6b:
c2:3b:f5:36:0b:5d:77:f8:bb:7d:a4:88:36:43:2f:1b:e5:bd:
a3:66:8b:12:70:e8:f3:89:ef:68:f2:d7:fb:27:0b:8e:8c:8e:
a6:23:73:54:39:11:28:8f:c1:3d:c3:f8:a0:87:0d:eb:6c:b9:
fb:00:81:ea:5d:51:8f:10:b5:14:9c:ba:81:39:7f:5a:2c:8c:
e9:09:4e:4d:e4:3c:93:b8:9b:21:7c:2d:fe:db:e3:3c:11:b5:
21:97:54:13:dc:04:41:c4:0e:1a:8e:dc:b4:60:f8:60:2f:6b:
8f:3f:d6:a5:86:18:a7:5c:ed:ad:1a:16:8c:33:0b:2f:5c:a2:
e1:90:cd:40:e4:10:cf:6f:22:00:3b:f8:d0:d0:cf:68:eb:a5:
bc:02:4f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:36:59 2025 by rpki-client