This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
File: dyPYVuUggiTyvImjgJd39SgzEvw.mft (raw, json)
Hash identifier: bmKCKbIuwZau40xjfYfrmRdZTq4c8xmjRdIapmISlnk=
Subject key identifier: 73:8E:B8:80:B3:EF:73:C1:90:D5:AF:71:F9:25:01:F5:E7:78:05:37
Authority key identifier: 77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC
Certificate issuer: /CN=A9163EDF/serialNumber=7723D856E5208224F2BC89A3809777F5283312FC
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
Manifest number: 017E
Signing time: Tue 23 Dec 2025 02:45:54 +0000
Manifest this update: Tue 23 Dec 2025 02:45:54 +0000
Manifest next update: Tue 30 Dec 2025 02:45:54 +0000
Files and hashes: 1: dyPYVuUggiTyvImjgJd39SgzEvw.crl (hash: XmeAkHVX1fed6U5VvQbMY+6tGFqQK0yWlQhtY8/h/rQ=)
2: 7FB5CBF097DB11EE8E67BA41C4F9AE02.roa (hash: Vqca7Dlck5zECijiatjZli/eAV/OHF6vZWtbK8kCw4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl
rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 02:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163EDF, serialNumber=7723D856E5208224F2BC89A3809777F5283312FC
Validity
Not Before: Dec 23 02:45:54 2025 GMT
Not After : Dec 30 02:45:54 2025 GMT
Subject: CN=694a0262-3340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:59:66:fb:f3:b8:f1:de:11:33:4a:7a:de:4a:
a9:89:d0:a8:9c:8c:c0:57:f1:e2:41:d2:ac:fb:3f:
79:9e:3c:1f:10:4c:cd:99:34:49:01:51:2a:ea:86:
0b:12:f1:a6:e3:4f:50:22:c9:86:a9:f8:0f:21:72:
d1:b1:ee:b5:5c:8c:e6:a5:ec:c8:91:48:64:f6:b9:
da:69:72:4f:c9:7b:48:0d:cd:b9:39:21:21:b6:e8:
ad:fe:5b:23:c4:5b:43:ca:e9:a6:5a:53:ba:d5:69:
38:f1:ec:b5:9a:bf:bc:69:b4:5e:b0:9a:84:bc:a7:
e7:cd:04:b7:0f:ad:55:59:02:dc:33:8a:c9:76:ba:
2f:b8:e2:5a:9c:5f:66:b2:8d:20:81:a5:56:8c:af:
8c:33:a8:3d:1d:f2:ff:ee:8d:ac:c4:97:74:20:02:
0e:6e:e4:39:51:d4:20:54:8b:99:4a:61:a5:b6:44:
13:f0:f2:b5:35:ef:03:3f:d1:c7:24:5e:0d:74:14:
12:8a:66:34:4f:3b:a6:e4:71:fd:62:14:c4:8b:75:
25:05:bd:2d:1b:30:50:d8:5d:10:83:ab:ce:82:7a:
92:54:48:b0:19:94:92:fd:e2:fc:77:5b:b7:43:e1:
18:4a:43:9d:5b:19:02:92:f1:a4:fd:fa:a6:9e:c7:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8E:B8:80:B3:EF:73:C1:90:D5:AF:71:F9:25:01:F5:E7:78:05:37
X509v3 Authority Key Identifier:
keyid:77:23:D8:56:E5:20:82:24:F2:BC:89:A3:80:97:77:F5:28:33:12:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyPYVuUggiTyvImjgJd39SgzEvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EDF/D8A7C736972211EE99AC337EC4F9AE02/dyPYVuUggiTyvImjgJd39SgzEvw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:78:73:6c:0c:bd:56:88:4d:da:c4:7b:61:07:9d:3c:09:e4:
87:8d:0d:59:b9:4c:bb:84:2a:e3:01:83:95:6d:d5:42:29:37:
f7:b1:f5:f4:04:fb:fe:33:60:60:b8:f1:f1:08:34:e1:7c:e2:
49:5d:25:8e:98:f7:c7:ed:77:91:6d:ed:a9:90:17:23:11:91:
0e:db:f2:32:57:91:d4:b7:12:ac:43:e1:46:df:0a:2c:3a:63:
07:9d:1e:96:da:e2:92:66:06:90:b9:b1:79:2f:0a:43:18:28:
e0:89:5c:91:51:f4:60:4a:65:b3:26:db:95:ab:40:35:c4:4f:
61:18:89:88:8c:94:2f:63:22:b6:5b:57:21:e7:56:ad:b8:64:
4b:df:4d:3c:7f:18:bb:0e:3e:44:3e:0c:fe:cc:99:40:54:f6:
dd:78:5f:9d:2c:e1:90:28:45:35:f1:90:e1:07:67:e3:83:37:
b2:f3:9e:df:be:68:5c:57:37:3d:21:fd:39:ef:e7:3f:3b:7c:
79:64:6a:91:86:69:20:98:41:57:83:20:97:f5:1a:b6:5a:1a:
06:f7:a9:1d:d5:85:3d:90:2c:d9:84:9a:57:6b:c3:bd:54:c2:
4e:c9:67:f8:07:9d:98:d5:8c:91:a1:36:84:84:0b:a9:0c:a8:
f5:a7:da:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:31:16 2025 by rpki-client