This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
File: Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft (raw, json)
Hash identifier: sI9+swMm3F/f9YD/vKrUAJgLr3EAqp5HdCAazYAyrBI=
Subject key identifier: 0B:3F:12:BB:F3:F3:A5:0B:AF:A0:97:7D:0A:D2:23:D6:DB:BA:21:01
Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59
Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
Certificate serial: 0197
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
Manifest number: 0194
Signing time: Tue 23 Dec 2025 02:28:52 +0000
Manifest this update: Tue 23 Dec 2025 02:28:51 +0000
Manifest next update: Tue 30 Dec 2025 02:28:51 +0000
Files and hashes: 1: Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl (hash: hjIYL1QAu3b2+WQHFamTQrCH+/ok5yE7N7yK+BchGLA=)
2: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (hash: 6/RNoQhjZDLc2AhsjhYLjFVymAZMY+bhp7y0D06E0yU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl
rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 407 (0x197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59
Validity
Not Before: Dec 23 02:28:51 2025 GMT
Not After : Dec 30 02:28:51 2025 GMT
Subject: CN=6949fe64-16d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:f5:ef:b5:d6:bc:90:a0:29:1e:66:2f:d9:
f7:a4:d1:b4:f5:9b:c5:8b:c5:03:1a:38:5f:61:f6:
6c:e9:d9:7b:51:3e:21:78:5c:26:68:76:5f:10:85:
da:e9:67:57:ac:66:53:28:2c:28:43:5e:69:a2:ef:
46:ed:a6:07:3b:8c:4a:9e:c2:e8:6b:ce:26:31:ea:
de:58:e7:6f:0f:be:66:20:d9:cf:8a:2e:36:19:8f:
88:00:8c:88:d9:2c:2d:e9:16:f2:15:3b:7e:cd:25:
ac:f6:c2:06:19:b5:70:ce:e4:88:b8:4d:e6:ff:73:
ed:60:85:1d:ca:e0:c6:bb:5c:9c:a2:94:15:ae:3a:
13:75:a3:7c:9b:1d:10:f5:58:7f:8c:09:14:a9:bb:
75:cf:8c:61:fa:10:e2:4c:15:f8:98:f7:13:bc:f3:
99:c1:42:33:df:38:60:2c:52:aa:bc:c4:e8:0d:d1:
6a:1e:80:6b:48:43:e9:bf:74:c5:4a:54:96:a1:51:
67:41:fa:3a:74:a2:5c:96:41:bb:a4:ba:18:c3:6b:
7a:4b:cf:73:2a:37:b9:47:4d:78:34:59:ec:d2:5a:
94:a0:20:33:7e:a1:2d:2a:da:54:b5:a3:2b:d6:db:
7a:64:36:f4:00:67:18:3a:57:a7:51:3d:a5:6d:99:
50:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3F:12:BB:F3:F3:A5:0B:AF:A0:97:7D:0A:D2:23:D6:DB:BA:21:01
X509v3 Authority Key Identifier:
keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:15:45:23:1f:ff:a8:3e:b3:4f:2b:5b:a2:a4:89:4c:01:1b:
1e:1f:f5:81:8a:c9:65:6a:75:36:7d:1b:85:ed:24:2f:60:a9:
d9:97:3c:54:a5:71:18:6b:7a:91:a0:a5:f1:b1:40:f8:85:fa:
fd:10:32:26:4a:b7:64:7b:6e:14:c9:40:65:6b:78:2d:21:8d:
aa:45:77:7b:c9:cb:bb:a0:6f:8c:7d:f0:21:51:6d:a1:28:df:
42:e9:f5:92:80:44:b5:5c:2d:ab:2c:8f:3f:69:c8:cf:8c:0b:
46:5e:07:4f:0f:2a:49:05:da:e1:05:3e:af:7e:97:d1:b2:17:
62:8d:57:8d:8a:7e:77:63:84:33:28:b8:c5:92:f2:0b:cf:b1:
28:3e:46:0f:f1:30:9b:f8:a0:e7:a5:72:54:7a:61:d9:d2:44:
73:1d:85:d6:d6:3c:88:d5:5f:3a:e2:aa:72:51:82:ec:e9:6c:
32:85:7c:a4:7a:ef:a7:f8:bd:29:60:3f:24:c8:fe:87:91:9e:
95:55:bc:65:37:d0:be:71:b1:19:3c:0c:86:c4:43:8f:84:20:
22:87:69:ae:da:62:ad:d7:98:3b:24:74:0a:c9:2f:4a:9a:0c:
35:e7:f5:e0:25:4d:c2:5e:f1:35:d4:5b:a8:c7:62:d5:97:e7:
e6:03:4e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:16 2025 by rpki-client