This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
File: YT7L4D69dbDJ5elhFPZXzliVsfc.mft (raw, json)
Hash identifier: hHOA2t+XXRujQBLWFEaFPS7i88qyYytANF/4wC3gax8=
Subject key identifier: B5:78:C1:A6:7F:B9:9A:E5:EA:FF:C9:68:D9:49:58:C0:C0:C1:D9:60
Authority key identifier: 61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7
Certificate issuer: /CN=A9182794/serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7
Certificate serial: DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
Manifest number: DA
Signing time: Sun 21 Dec 2025 04:47:07 +0000
Manifest this update: Sun 21 Dec 2025 04:47:07 +0000
Manifest next update: Sun 28 Dec 2025 04:47:07 +0000
Files and hashes: 1: YT7L4D69dbDJ5elhFPZXzliVsfc.crl (hash: IWM3qsNCE9KFl5t3edvBImsC09jts2jefaWcuwcGz24=)
2: C296778C95CB11EFA3BE9873C4F9AE02.roa (hash: YFnVZs2sNdDdcoL6mfOS9gOjX930yi4DDrGYTFUTspw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl
rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 04:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182794, serialNumber=613ECBE03EBD75B0C9E5E96114F657CE5895B1F7
Validity
Not Before: Dec 21 04:47:07 2025 GMT
Not After : Dec 28 04:47:07 2025 GMT
Subject: CN=69477bcb-810f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:34:27:1e:78:0d:de:a5:92:69:c8:0f:2c:e7:
7e:fe:b6:eb:87:68:de:f7:f8:d9:31:56:fe:c4:55:
7a:25:b4:c0:ec:1f:47:ae:16:7e:fc:11:fb:db:0e:
61:a1:07:f3:fb:37:9f:c3:ae:4f:2c:2d:40:5b:c4:
af:24:0e:76:2d:db:d2:f4:2e:6f:d2:d9:31:e3:13:
5a:c7:08:68:8f:16:9c:00:9a:20:da:dd:8c:4d:7d:
1a:6b:87:c8:7a:3b:9b:b9:1c:2e:d7:e1:12:8c:6f:
dd:82:22:73:d8:f3:6a:81:20:f9:54:05:1e:51:a5:
fc:a0:9c:8b:69:2c:02:0c:34:90:18:2f:9c:0d:2a:
b6:9d:d0:f7:dc:42:c2:49:3e:fb:25:f4:6d:4d:01:
23:45:dd:62:22:1a:11:83:7c:27:56:2a:4f:d7:5e:
b5:63:37:61:47:7a:eb:21:79:4a:ea:92:c1:53:eb:
28:1c:2c:81:77:a1:c0:15:79:4a:67:dd:0f:48:5d:
76:6e:9b:da:fa:8f:60:84:44:9a:36:3d:01:a1:f0:
12:27:a9:0c:de:f9:7f:6b:55:62:69:52:64:83:cf:
a7:85:00:e8:38:82:68:37:3c:8b:e2:22:65:d1:32:
46:ba:52:6a:d3:39:87:98:d0:0a:18:9e:03:c8:3c:
56:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:78:C1:A6:7F:B9:9A:E5:EA:FF:C9:68:D9:49:58:C0:C0:C1:D9:60
X509v3 Authority Key Identifier:
keyid:61:3E:CB:E0:3E:BD:75:B0:C9:E5:E9:61:14:F6:57:CE:58:95:B1:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YT7L4D69dbDJ5elhFPZXzliVsfc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182794/73DB77D095BE11EF84A82381C4F9AE02/YT7L4D69dbDJ5elhFPZXzliVsfc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:35:f8:84:a4:4e:1c:e1:56:60:66:4f:f0:32:d8:87:fe:53:
17:72:8f:5d:7e:b6:23:11:44:a8:66:bd:f9:62:d6:c1:84:c5:
b6:16:f8:0d:63:fb:b9:ab:84:1f:e1:bb:0f:99:bf:f5:74:13:
81:9d:27:d0:f6:0a:38:c5:32:15:9f:02:a7:fe:fb:66:03:f6:
d3:3f:f9:cb:89:c8:0a:33:be:e3:10:c3:b4:78:a1:8e:07:93:
bd:60:07:26:28:5f:a9:00:26:3c:15:ac:b0:ae:7c:2b:05:ed:
24:a4:8a:63:8c:db:ed:00:ee:0d:8b:40:05:82:5e:1d:1c:f6:
83:75:e2:ef:59:39:f4:5a:65:3c:50:5f:75:0e:88:b4:b4:df:
eb:8a:7b:1f:c8:98:59:b0:c3:9a:5e:41:e8:25:f2:a3:96:f1:
95:f1:af:d6:ce:c4:2a:66:08:38:f8:d1:f4:b0:cc:bd:50:2a:
93:17:59:67:af:64:ed:76:a6:38:82:ea:23:6c:32:b7:00:bd:
a9:b4:2e:4e:52:a1:cb:6c:7c:74:95:d2:7e:10:d6:90:5c:e4:
1d:64:96:f4:21:13:a6:08:13:8c:9f:f3:bc:ed:d6:2a:d7:34:
0c:ea:01:3c:5e:03:88:9f:22:91:f9:50:aa:25:2e:4f:d6:cc:
41:a2:c0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 17:27:31 2025 by rpki-client