This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
File: yl96MSHB9fmJUgx6UZcT-zpoyn4.mft (raw, json)
Hash identifier: OSHmCKyzKkBY4C7v1QErvBV9XkytzpxBc18GcyVqwwc=
Subject key identifier: 0F:90:33:9E:B7:AB:17:E0:8E:27:83:5C:67:48:D4:B5:B5:A7:7C:2E
Authority key identifier: CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
Certificate issuer: /CN=A919E1FC/serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Certificate serial: AA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
Manifest number: A4
Signing time: Tue 23 Dec 2025 05:14:13 +0000
Manifest this update: Tue 23 Dec 2025 05:14:13 +0000
Manifest next update: Tue 30 Dec 2025 05:14:13 +0000
Files and hashes: 1: yl96MSHB9fmJUgx6UZcT-zpoyn4.crl (hash: kG+aV2oFpYm/xVW1b8IZa2dIkTSis1+VpaJWQenxhRw=)
2: F70CBA98E9B911EFB5B54650C4F9AE02.roa (hash: 2T6Fyq/x0X9hd51yz+uFduciFhCl9089BnkJOOwfbVI=)
3: 09852FF6E9FC11EF9D3DE972C4F9AE02.roa (hash: DPBnqYDTJSln1r3AOtKRNxAr3JL7tCw2D7o2HDWUU1c=)
4: 0A34182CE9FC11EF9D3DE972C4F9AE02.roa (hash: nS3x5Wrf6OGlupRs4tpRKGZuj5/u2uLXlydcgcq1K8s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E1FC, serialNumber=CA5F7A3121C1F5F989520C7A519713FB3A68CA7E
Validity
Not Before: Dec 23 05:14:13 2025 GMT
Not After : Dec 30 05:14:13 2025 GMT
Subject: CN=694a2525-0c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:2e:04:f8:96:24:23:2b:aa:4f:d6:c6:32:
08:a7:9b:89:e5:f6:d8:fd:0a:f8:fa:25:19:b4:5d:
9e:3e:66:08:eb:91:24:66:e6:25:d0:98:9c:af:b2:
c5:fe:64:08:0a:3e:78:55:72:bb:e9:20:e7:63:71:
99:79:35:83:07:96:33:2e:5a:ad:62:ce:6b:71:01:
12:8b:f4:17:24:7c:5e:09:01:80:d2:b8:09:b9:58:
48:c8:5d:cb:0b:53:2c:29:c5:11:12:c7:87:09:b5:
39:39:97:3b:5f:9d:d1:9c:00:3e:1d:66:b4:fb:b0:
31:cc:20:9f:75:59:69:d2:cb:19:10:5f:a7:2b:67:
52:39:b0:72:91:fd:ed:42:24:c7:20:59:f6:cb:13:
ac:84:78:34:18:b2:09:77:e3:08:a1:69:2c:16:3e:
36:4e:0d:0a:21:4d:c6:7f:5c:b2:6b:a3:3e:5b:49:
51:a7:6d:eb:f1:fc:7f:70:59:20:a0:a3:01:9d:53:
0c:2f:ea:70:61:f1:8e:ae:5e:bc:cb:c2:49:0a:63:
92:c8:72:d9:ee:05:fb:e5:a6:38:70:2e:6b:e1:b4:
c4:a6:eb:a2:aa:04:db:c6:3b:e1:b4:89:3c:87:61:
e0:06:82:c9:72:6c:ce:a6:82:06:e5:dd:67:36:94:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:90:33:9E:B7:AB:17:E0:8E:27:83:5C:67:48:D4:B5:B5:A7:7C:2E
X509v3 Authority Key Identifier:
keyid:CA:5F:7A:31:21:C1:F5:F9:89:52:0C:7A:51:97:13:FB:3A:68:CA:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yl96MSHB9fmJUgx6UZcT-zpoyn4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1FC/5B325FA6E9B911EFB6DA414CC4F9AE02/yl96MSHB9fmJUgx6UZcT-zpoyn4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3c:39:c2:df:6e:f5:0e:8f:23:d2:13:cb:04:eb:cb:b1:45:
f6:ec:28:cf:3a:6c:d0:a9:41:df:3a:ce:18:e4:15:29:e3:8e:
a7:10:e6:35:b6:61:e9:ee:58:20:c9:52:95:62:b8:ed:5e:b6:
80:75:de:ba:ee:77:83:58:dc:85:0b:ab:05:2c:c8:0d:57:65:
ce:e1:e6:bd:67:7c:8f:5a:54:85:72:30:05:ae:4b:e7:6b:30:
cf:eb:3e:a8:2f:5f:ab:a9:3e:b4:91:ff:4a:7c:93:79:18:01:
f7:09:32:57:dd:39:ed:84:30:68:a3:cc:56:5e:62:e6:17:ae:
9d:e7:da:a2:ec:18:73:31:e2:59:58:c4:11:d9:1c:4d:e0:69:
f9:d0:ca:91:e5:3a:c0:18:b6:05:7b:db:bc:55:b8:f7:50:f6:
35:d6:0b:cd:b8:bc:92:6d:15:18:d0:86:60:bc:4c:f0:f7:c5:
26:95:62:d9:e0:81:a1:db:68:65:79:9a:cb:cc:f5:1e:e8:a0:
c1:5e:75:b4:99:54:c1:b4:7e:0e:79:2f:6b:55:cb:dd:a4:bd:
7c:68:3f:ea:c7:9c:4d:0e:71:bf:fb:85:09:1e:f9:f6:fc:7a:
24:50:d3:72:92:0f:c0:5e:22:bc:c3:53:a9:e9:8f:f8:17:52:
d2:79:95:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 19:30:39 2025 by rpki-client