This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
File: 1pYa2ozVd8wz1xqaLcgbDBklrJg.mft (raw, json)
Hash identifier: r8k4W8LjWeQPMXjjaeclQeIqVeMVfWIA3ebqANWbVXQ=
Subject key identifier: 78:F6:9E:B9:21:1E:DF:71:A9:75:EB:92:22:87:55:2D:20:7F:08:75
Authority key identifier: D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98
Certificate issuer: /CN=A9179CA8/serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
Certificate serial: 0201
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
Manifest number: 01FD
Signing time: Tue 23 Dec 2025 01:29:56 +0000
Manifest this update: Tue 23 Dec 2025 01:29:55 +0000
Manifest next update: Tue 30 Dec 2025 01:29:55 +0000
Files and hashes: 1: 1pYa2ozVd8wz1xqaLcgbDBklrJg.crl (hash: tzHPyrQSFtu/2aMiM1RqAy0tnndXrbj1e/1YVjMj+Rg=)
2: B94E87EAD44911ED88A2367FC4F9AE02.roa (hash: QVZDCd1ya5oxlLiJqZP/4xPWOb/nFUonfRIHAss0Ydc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl
rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 01:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 513 (0x201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179CA8, serialNumber=D6961ADA8CD577CC33D71A9A2DC81B0C1925AC98
Validity
Not Before: Dec 23 01:29:55 2025 GMT
Not After : Dec 30 01:29:55 2025 GMT
Subject: CN=6949f094-b7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:c7:e6:8a:4a:de:66:c8:ef:c1:51:93:8f:
39:bf:07:e7:6f:0b:18:ea:13:47:50:e5:66:2d:25:
4b:37:2a:c7:46:5f:37:63:8e:44:27:f6:f0:db:82:
fc:cb:41:7b:af:c7:16:a1:91:c0:6c:9c:fa:8e:10:
09:7d:99:ed:b9:98:3c:ad:2d:4b:b9:98:38:56:fc:
54:fe:a8:b6:df:b0:4c:36:5d:46:ba:71:74:7e:a3:
7d:20:10:55:8f:6e:2e:a2:ba:85:cc:52:a6:e8:5c:
8c:bf:25:15:71:ae:72:46:7b:cb:c2:b9:50:fc:1d:
5e:88:91:d9:fd:61:65:83:66:26:38:c2:70:97:9a:
c2:a3:c0:c6:82:ca:10:c8:ea:73:f1:c7:53:58:b0:
a3:09:02:27:76:d6:6e:14:81:8a:6c:f8:62:bf:86:
15:cb:04:34:8b:b8:28:c5:04:5f:97:62:52:06:5c:
78:a9:e4:af:e3:4f:8a:a9:15:ae:0d:ac:15:ee:3c:
b1:f7:78:e0:73:b5:ad:80:9b:72:eb:2d:d0:de:f5:
62:72:39:ac:a1:cc:3a:b8:d6:25:32:bc:f4:cd:72:
c1:51:c4:da:49:97:8a:1a:8f:4f:9e:f8:61:a2:ae:
b0:99:09:e9:1d:78:88:8b:58:23:55:e5:0a:ca:6b:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F6:9E:B9:21:1E:DF:71:A9:75:EB:92:22:87:55:2D:20:7F:08:75
X509v3 Authority Key Identifier:
keyid:D6:96:1A:DA:8C:D5:77:CC:33:D7:1A:9A:2D:C8:1B:0C:19:25:AC:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pYa2ozVd8wz1xqaLcgbDBklrJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA8/05660926D44711EDAA41BF7EC4F9AE02/1pYa2ozVd8wz1xqaLcgbDBklrJg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
81:8e:9c:f3:51:e6:4f:f6:0b:ef:5f:60:ca:ab:a4:24:e1:dd:
1a:71:46:b1:9e:86:93:b9:fd:16:db:87:d7:94:fe:b0:b7:6b:
d1:e6:f8:f0:f0:34:f7:1c:7b:74:10:06:21:07:d7:63:b9:8e:
14:e6:f6:de:4d:20:10:34:6a:1a:2e:04:40:cb:90:97:cd:57:
a3:9a:c9:cc:f7:d8:62:49:27:7d:4a:92:ea:ad:54:6d:8a:95:
c9:cc:76:58:31:38:97:70:43:00:6d:d5:7b:19:2c:df:24:04:
1e:54:d9:66:ed:d7:d5:3e:06:0e:85:df:21:78:a0:f4:50:c5:
7a:fd:7f:3a:08:a0:ac:8b:2e:11:99:d1:3b:8f:b8:f7:a2:1f:
89:ee:ee:d6:03:d7:71:8e:f8:9f:ad:41:f4:f6:3e:68:28:ba:
da:53:43:3e:9d:a3:14:a7:ea:fb:85:ea:6a:00:ca:a3:36:69:
77:f9:c1:0e:3d:de:16:f5:93:4a:26:e8:d9:21:e3:6b:dc:b4:
54:17:b9:15:b2:dc:40:18:db:50:5d:7c:db:65:9f:3f:37:9d:
cd:81:c5:0f:13:f7:f0:c6:87:6f:0a:80:99:e6:00:51:54:a9:
f6:d0:48:fb:64:77:8c:3d:47:a2:36:71:da:72:1b:6e:12:b0:
00:07:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 08:26:01 2025 by rpki-client