This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
File: yvC3hLE-FADutCJboi1vmDiCTsM.mft (raw, json)
Hash identifier: mcP2BfBUOy2LlnOtE8NDfBx0pR5hy0s+MVSpCwsUcEQ=
Subject key identifier: 7C:CD:71:0E:29:EA:AA:1D:0D:60:33:9F:D4:C4:EF:B2:FC:DE:F2:3F
Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
Certificate issuer: /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Certificate serial: 15C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
Manifest number: 159F
Signing time: Mon 22 Dec 2025 16:30:31 +0000
Manifest this update: Mon 22 Dec 2025 16:30:31 +0000
Manifest next update: Mon 29 Dec 2025 16:30:31 +0000
Files and hashes: 1: yvC3hLE-FADutCJboi1vmDiCTsM.crl (hash: JnVHu9h/YwwTjwGP+A5nCBbwPCbLKGB+Ryjt0VWQf/I=)
2: DD147B54CDC411F0AA804C7EC4F9AE02.roa (hash: c9tQ6tGOfHF6dDbo20j3PQMCUdrxSIao94HQBUVl16Q=)
3: 0A668418C9EB11F091DA0157C4F9AE02.roa (hash: G0q1kVLLjpmOAsgB/MtpGh7lmRxZO5pRH/nVGn1BUrw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl
rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 16:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5573 (0x15c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D99E, serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Validity
Not Before: Dec 22 16:30:31 2025 GMT
Not After : Dec 29 16:30:31 2025 GMT
Subject: CN=69497227-34ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:41:ff:23:aa:5b:76:cb:9b:1b:07:00:16:
a9:5a:7e:13:46:a2:08:65:6e:71:02:8f:5e:43:86:
4f:73:95:b9:53:19:41:35:03:36:50:9c:8f:10:75:
75:e4:a5:1f:e2:76:6b:31:63:ae:22:6f:83:26:e2:
e6:38:b6:b4:f6:c4:98:23:41:03:03:2c:b7:99:05:
6d:24:a9:d5:54:08:75:e7:c9:11:2f:ff:a1:84:a0:
0d:d6:cd:57:18:39:56:7b:4e:14:26:84:be:c5:5f:
cf:61:e4:a1:d8:06:5c:60:41:a9:17:d2:dc:64:31:
7f:4e:f1:aa:97:0d:77:c3:76:91:cd:53:5e:1d:e4:
ba:ee:f4:60:7e:28:8e:67:cf:9d:06:63:51:6c:93:
61:94:ca:29:55:62:68:55:de:e6:68:9c:61:10:2b:
0c:bb:b7:a9:d1:ef:c5:96:41:0b:ff:05:1e:21:83:
d6:76:e9:68:ca:5c:bc:2b:65:d5:75:f7:f2:f8:bb:
da:c9:53:b4:60:d7:63:59:f6:c6:e7:b8:f7:b0:c8:
d0:8c:c4:ec:59:8c:48:ce:64:7b:4a:0d:2c:e3:18:
d0:b1:9d:70:2f:a6:cc:69:3e:48:63:37:15:f1:bf:
3f:c6:7a:f9:a4:6c:a7:1b:ae:a6:0a:d3:4b:36:35:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CD:71:0E:29:EA:AA:1D:0D:60:33:9F:D4:C4:EF:B2:FC:DE:F2:3F
X509v3 Authority Key Identifier:
keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:e2:56:38:eb:6c:d1:68:f5:95:7c:78:04:45:2e:47:db:9f:
28:bf:e9:12:c0:3b:24:11:5c:46:de:da:ea:db:b9:29:ae:ad:
34:e7:c3:c3:66:70:21:71:7a:7d:b8:ef:72:30:f5:fa:20:57:
ad:1a:f9:f8:c9:3c:4e:f6:36:00:df:8f:47:23:46:95:5a:65:
95:87:67:80:99:9e:d8:1b:17:a2:e9:5d:77:cc:86:29:0f:9e:
33:6a:e4:9b:c1:6f:b7:f5:14:86:ea:ba:21:97:88:31:b8:81:
77:b4:b4:69:79:19:e3:bd:a3:1f:ae:9d:5c:3a:8b:59:f1:81:
23:72:ca:8e:89:db:06:51:9f:f0:7d:e6:85:21:1b:0f:8c:4d:
a3:54:c6:07:80:25:5a:fb:c0:48:ec:fd:27:bf:43:b9:3a:8b:
ff:26:c6:f1:5c:ba:7b:69:2e:7a:18:8e:2c:4d:17:b3:ed:f3:
aa:b5:b8:46:28:98:58:bb:a1:52:5f:b5:bf:d2:bb:75:ee:53:
df:6e:5d:ef:47:be:b0:bd:74:8e:44:14:07:08:18:3d:47:98:
f1:84:a5:72:81:38:70:0a:c5:22:32:a0:f9:2d:4b:d9:d3:ba:
64:fc:6e:87:af:01:3c:cd:c1:70:4b:e4:c3:82:b7:21:be:c0:
22:40:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:45:08 2025 by rpki-client