This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
File: yT-PYPBn4kwb_PI7LPQivVhkvss.mft (raw, json)
Hash identifier: SGWKjEbc2BXIEejLNaK3W0W6JljZQJ/5SzFZoXeLlbc=
Subject key identifier: 5F:8F:73:E2:E3:AA:BE:2B:5B:01:BC:D7:F1:51:85:8D:67:3C:B5:73
Authority key identifier: C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB
Certificate issuer: /CN=A915E4A4/serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
Manifest number: 42
Signing time: Tue 23 Dec 2025 06:16:25 +0000
Manifest this update: Tue 23 Dec 2025 06:16:25 +0000
Manifest next update: Tue 30 Dec 2025 06:16:25 +0000
Files and hashes: 1: yT-PYPBn4kwb_PI7LPQivVhkvss.crl (hash: JbA+a8AobGzeBkkwxIBPPjW0+ZZmKOXNPRlPUg87u4Y=)
2: 7452F54C7D7D11F09C982A7CC4F9AE02.roa (hash: orW22gR1weyQBFJq2xht8k2Oky/95mfVvWkFfSQOdy0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl
rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 06:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E4A4, serialNumber=C93F8F60F067E24C1BFCF23B2CF422BD5864BECB
Validity
Not Before: Dec 23 06:16:25 2025 GMT
Not After : Dec 30 06:16:25 2025 GMT
Subject: CN=694a33b9-995a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:d0:14:2a:c2:99:ef:f9:87:b4:b5:9c:ba:
d9:76:63:78:a8:0f:0c:37:3b:d6:32:fa:e1:fc:d5:
db:7d:ce:00:9c:e4:49:df:af:67:3f:25:de:c8:c5:
ed:f7:76:7e:d2:8f:a3:0f:18:92:12:dc:31:b0:1b:
40:ff:3c:62:13:ff:99:ce:f3:53:ff:67:e4:bd:9a:
ff:f6:88:62:41:f8:86:9a:73:d3:36:7e:e6:f8:ae:
96:17:79:f6:db:f5:15:a4:a9:07:11:3c:72:eb:6a:
ad:02:33:31:12:45:86:1c:ec:f3:f4:5d:2c:f3:63:
7e:94:36:a4:36:42:43:f4:24:a6:f7:9e:9d:2f:39:
af:cd:f9:6a:de:92:c5:26:61:c3:f5:14:ca:30:08:
89:02:04:37:b8:f3:75:ce:de:bc:c3:05:02:d5:f3:
c7:4a:b3:71:c9:a0:57:8a:1f:38:38:14:59:0e:75:
1c:4e:1a:90:4a:c1:0e:69:05:09:5d:6c:5d:7d:86:
fb:5d:77:2f:92:c2:d1:62:a2:84:1f:ee:54:61:b8:
2e:73:fe:f1:eb:cc:c0:5b:52:ec:b5:70:cf:54:92:
86:4a:5b:ba:ec:8c:13:55:b4:e1:46:1e:60:0e:34:
4e:bc:b1:2d:1b:64:3d:bd:c6:ff:5b:f6:00:0b:73:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8F:73:E2:E3:AA:BE:2B:5B:01:BC:D7:F1:51:85:8D:67:3C:B5:73
X509v3 Authority Key Identifier:
keyid:C9:3F:8F:60:F0:67:E2:4C:1B:FC:F2:3B:2C:F4:22:BD:58:64:BE:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yT-PYPBn4kwb_PI7LPQivVhkvss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E4A4/EAB17BF67D7C11F096E59579C4F9AE02/yT-PYPBn4kwb_PI7LPQivVhkvss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:74:4d:b8:d0:57:bf:16:3f:23:3b:d5:de:4d:db:d5:62:2a:
d6:51:8f:05:83:b7:6a:db:01:ea:32:6a:d2:47:cd:8b:ac:46:
a0:fc:bf:dd:c0:a1:e3:46:66:10:8a:01:21:9a:cb:6d:75:90:
7e:f7:a0:40:27:ef:b0:11:f4:80:27:33:9f:a7:ff:c6:eb:79:
a1:79:7d:5e:ff:95:03:2f:70:2b:61:a1:6c:13:16:0d:4a:1a:
15:7b:cd:3e:f1:77:10:b5:45:8d:d4:ca:c4:7b:ed:2b:78:7f:
60:3b:8a:bf:ba:71:67:74:3b:02:df:02:c7:8e:20:85:92:87:
6f:95:bf:01:e7:9d:26:e8:06:66:dc:c3:9a:7f:7c:5e:2f:5a:
4e:21:fe:e9:c2:d2:c1:63:24:a9:48:b9:5a:37:cc:93:ad:d3:
26:25:9a:21:1f:93:87:60:69:be:45:dc:fc:3d:2f:2e:67:79:
a9:df:1f:78:bf:35:6c:b1:2d:9c:fc:7e:a8:5b:60:28:f0:12:
e5:9d:e0:30:a5:a4:77:4e:e1:ce:d5:b3:af:c0:e1:d9:c9:d1:
21:69:1d:12:3d:0a:6b:90:a8:4c:42:40:ae:42:a8:8c:16:74:
63:4f:58:ad:ff:fc:52:7e:77:96:47:69:8d:12:82:8a:fe:7b:
c6:79:80:4e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RTRBNDExMC8GA1UEBRMoQzkzRjhGNjBGMDY3RTI0QzFCRkNGMjNCMkNGNDIyQkQ1
ODY0QkVDQjAeFw0yNTEyMjMwNjE2MjVaFw0yNTEyMzAwNjE2MjVaMBgxFjAUBgNV
BAMMDTY5NGEzM2I5LTk5NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCuq9AUKsKZ7/mHtLWcutl2Y3ioDww3O9Yy+uH81dt9zgCc5Enfr2c/Jd7Ixe33
dn7Sj6MPGJIS3DGwG0D/PGIT/5nO81P/Z+S9mv/2iGJB+Iaac9M2fub4rpYXefbb
9RWkqQcRPHLraq0CMzESRYYc7PP0XSzzY36UNqQ2QkP0JKb3np0vOa/N+WreksUm
YcP1FMowCIkCBDe483XO3rzDBQLV88dKs3HJoFeKHzg4FFkOdRxOGpBKwQ5pBQld
bF19hvtddy+SwtFiooQf7lRhuC5z/vHrzMBbUuy1cM9UkoZKW7rsjBNVtOFGHmAO
NE68sS0bZD29xv9b9gALc5AxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX49z4uOq
vitbAbzX8VGFjWc8tXMwHwYDVR0jBBgwFoAUyT+PYPBn4kwb/PI7LPQivVhkvssw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNEE0L0VBQjE3QkY2N0Q3
QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3Yl9QSTdMUFFpdlZoa3Zz
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveVQtUFlQQm40a3diX1BJN0xQUWl2VmhrdnNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF
NEE0L0VBQjE3QkY2N0Q3QzExRjA5NkU1OTU3OUM0RjlBRTAyL3lULVBZUEJuNGt3
Yl9QSTdMUFFpdlZoa3Zzcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAZ0TbjQV78WPyM71d5N29ViKtZRjwWDt2rbAeoyatJHzYusRqD8v93A
oeNGZhCKASGay211kH73oEAn77AR9IAnM5+n/8breaF5fV7/lQMvcCthoWwTFg1K
GhV7zT7xdxC1RY3UysR77St4f2A7ir+6cWd0OwLfAseOIIWSh2+VvwHnnSboBmbc
w5p/fF4vWk4h/unC0sFjJKlIuVo3zJOt0yYlmiEfk4dgab5F3Pw9Ly5neanfH3i/
NWyxLZz8fqhbYCjwEuWd4DClpHdO4c7Vs6/A4dnJ0SFpHRI9CmuQqExCQK5CqIwW
dGNPWK3//FJ+d5ZHaY0Sgor+e8Z5gE4=
-----END CERTIFICATE-----
Generated at Wed Dec 24 21:21:19 2025 by rpki-client