This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
File: yuLPsaeXStawJFrjTksNztggmGc.mft (raw, json)
Hash identifier: hlAh4wZMTVNHqldDUS1zX80872Wbb5rKcbRV4BmWt6U=
Subject key identifier: FE:78:B6:45:E8:27:37:E1:BF:40:0D:4A:C5:50:17:B5:B1:E6:24:56
Authority key identifier: CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
Certificate issuer: /CN=A9120968/serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Certificate serial: 34EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
Manifest number: 34EE
Signing time: Thu 18 Dec 2025 14:53:20 +0000
Manifest this update: Thu 18 Dec 2025 14:53:20 +0000
Manifest next update: Thu 25 Dec 2025 14:53:20 +0000
Files and hashes: 1: yuLPsaeXStawJFrjTksNztggmGc.crl (hash: 4UoEdfhsWUq8zSNi9wlQ040OzD7lXz5SlgD9yBY/Juc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 14:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13550 (0x34ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120968, serialNumber=CAE2CFB1A7974AD6B0245AE34E4B0DCED8209867
Validity
Not Before: Dec 18 14:53:20 2025 GMT
Not After : Dec 25 14:53:20 2025 GMT
Subject: CN=69441560-b5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:2d:b4:1e:89:02:21:9e:1b:48:4a:f6:f6:
aa:78:83:a1:c4:38:9a:0c:d6:4d:ce:1b:08:f9:64:
25:be:a2:7d:f9:88:bc:84:4b:d5:a6:e5:a7:eb:ce:
f9:13:f4:72:57:8d:4e:ca:1f:e5:48:43:49:92:89:
8d:dd:12:83:b6:5c:42:0a:b0:c8:92:87:49:e5:2c:
4c:02:85:31:3e:bf:52:44:1d:05:b0:2e:27:de:06:
a7:48:c4:d9:18:f4:50:f4:48:25:fc:2d:9b:bb:04:
39:65:41:a7:aa:7e:be:bc:02:d9:ad:7b:11:f1:32:
eb:6f:f6:66:3b:80:a0:8d:d3:32:91:3e:8f:8b:c6:
d3:08:a3:63:50:f2:b3:07:a8:d4:6f:9d:af:b8:d4:
27:17:ce:ee:f8:21:7b:84:c1:7e:df:8d:a9:e3:d1:
fa:a6:bd:82:1f:c0:22:40:6c:68:e5:bc:e2:2d:e8:
8e:8d:c6:e6:82:67:05:db:4b:c3:56:f7:b7:6f:c8:
62:b4:38:cf:b0:6f:91:c5:f6:56:2e:df:2d:6d:be:
10:4a:6b:5e:04:b4:32:03:a3:8f:63:8f:7d:6e:be:
60:c6:7b:85:91:66:0a:0d:a0:e1:23:36:3a:8e:f3:
b5:b6:6c:1b:93:5f:e5:8f:3a:26:d2:33:7d:ae:3b:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:78:B6:45:E8:27:37:E1:BF:40:0D:4A:C5:50:17:B5:B1:E6:24:56
X509v3 Authority Key Identifier:
keyid:CA:E2:CF:B1:A7:97:4A:D6:B0:24:5A:E3:4E:4B:0D:CE:D8:20:98:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yuLPsaeXStawJFrjTksNztggmGc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120968/08ECEE481D9B11E2AF96A88808B02CD2/yuLPsaeXStawJFrjTksNztggmGc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:b2:57:ce:a8:27:b5:93:b2:72:34:64:bd:83:a0:36:02:3f:
6a:a6:6c:7e:15:16:a2:3e:ea:c2:74:2e:5b:7f:be:30:92:e6:
15:ce:19:e2:18:46:e3:7d:56:3f:54:da:53:db:7e:f5:c8:ce:
de:c1:cf:29:b4:93:cd:80:20:79:fa:c0:53:bd:61:eb:7d:8b:
8e:38:cb:f4:03:1e:24:24:a3:20:ff:18:23:f4:bf:01:55:19:
b5:78:8e:ed:69:dd:43:98:3b:06:57:cb:36:f2:cb:73:ee:50:
aa:98:38:0d:64:72:c1:78:fa:16:96:0c:cd:7f:51:e6:61:2d:
db:7b:0d:10:b7:0d:2d:81:54:6a:87:07:e0:ff:30:bb:31:5c:
9e:47:01:95:c4:60:b6:4a:e2:a3:a4:5f:24:b9:b5:a3:0b:75:
37:73:d8:a0:0c:f4:e9:68:dd:0d:88:54:66:cc:b1:5c:6b:3a:
85:2b:21:4a:b4:86:7f:ec:e1:6b:2c:69:ea:e7:46:c6:c7:a3:
ad:eb:56:16:28:de:c8:2f:5d:5a:8f:6b:f3:c0:6a:d2:72:2c:
a3:ef:3c:16:d8:ae:a7:22:05:61:af:6d:90:ed:86:32:df:61:
d6:a5:17:f3:40:95:a8:27:fb:ac:94:8d:aa:ad:f8:ee:89:b1:
61:c1:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:50:44 2025 by rpki-client