This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
File: tsy15DHkUBkVDE83IfT4Cm8u19s.mft (raw, json)
Hash identifier: CPQviHjqZS6KYeKwTQzLgimPJc/5otxaUf+4R9BK0Qw=
Subject key identifier: E7:00:D3:3C:85:13:51:CF:31:E7:44:EF:67:99:FD:53:03:58:BF:0B
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Certificate issuer: /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial: 079C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
Manifest number: 0782
Signing time: Thu 18 Dec 2025 21:04:20 +0000
Manifest this update: Thu 18 Dec 2025 21:04:20 +0000
Manifest next update: Thu 25 Dec 2025 21:04:20 +0000
Files and hashes: 1: tsy15DHkUBkVDE83IfT4Cm8u19s.crl (hash: etk2gWTr38yQd0Owq8QZAtO04oiY3p5a65jYON9XxuA=)
2: 48EFF31A621B11EF8FB5117AC4F9AE02.roa (hash: agCGjmWYmlY22GfNRQLo7JWrox6fkhHy906PQcOJAjM=)
3: 2574266EAA4911F09A71D135C4F9AE02.roa (hash: Brwwe0F+aPgM2TNE0pK+hfBC17xvLwuArPyDlCwuh9E=)
4: C098EF8E499811EFBB8C701EC4F9AE02.roa (hash: fjb9xxIvXmy/Q4aA7zhlhVkljXVrUMNfVIOWbyyneP8=)
5: E181BAA059DD11EF9C39750CC4F9AE02.roa (hash: UEeWCT6ImEaxx6DYiNNHxE3gZPCQQ4xS1glK4ixz1u8=)
6: DD4F3A9E5E4F11F0A2B4CA09C4F9AE02.roa (hash: iumKdiWKLDrYCA6lG4pZSxvEMLWk/u5zf4emlDCdIrc=)
7: BC04E5745E4E11F082F8D529C4F9AE02.roa (hash: 4Hdor7a2T28NKyTSPVzwdY26NXpymu+/SZMUZB9AJGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 21:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Validity
Not Before: Dec 18 21:04:20 2025 GMT
Not After : Dec 25 21:04:20 2025 GMT
Subject: CN=69446c54-e67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e9:c8:ce:76:3d:f8:37:fe:09:95:05:7c:52:
41:94:b9:f9:06:db:9b:05:70:6a:b8:de:dd:27:9b:
b0:6a:7f:d9:0e:69:0a:8e:3d:82:8b:20:79:44:bd:
27:1c:12:50:a4:14:ed:ca:1f:38:75:50:9b:67:1d:
d6:0d:76:c8:c9:b6:55:78:7b:38:cc:dc:a5:3f:35:
3d:5e:1e:1e:1e:50:0b:ad:81:7c:78:28:62:33:86:
da:e9:dd:cc:e5:c1:3b:11:51:dd:90:13:ca:0e:37:
72:b3:97:6d:2d:c9:07:4d:50:49:38:ae:f9:b3:f0:
dd:2e:c3:77:2d:88:77:68:3f:6f:85:50:b7:f7:01:
34:91:20:ad:f5:55:cf:75:e8:ca:0c:a8:39:d8:ba:
2d:1e:cb:01:af:74:ed:97:65:c8:fd:97:3c:8c:2c:
0b:d8:ce:a6:42:99:31:70:c8:77:49:8c:3c:78:32:
1b:ef:95:93:60:41:a8:e2:69:61:3c:46:51:48:7e:
00:49:ab:37:fc:0b:36:ea:0b:91:3f:24:05:d8:50:
19:ea:42:2d:d4:69:b6:86:3a:47:6d:4d:f7:07:24:
8e:5d:e5:42:13:1e:71:81:27:e5:5e:c8:41:40:0f:
e6:8d:4c:6e:89:75:d9:09:23:d1:56:27:d8:06:b5:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:00:D3:3C:85:13:51:CF:31:E7:44:EF:67:99:FD:53:03:58:BF:0B
X509v3 Authority Key Identifier:
keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3d:2c:62:3f:13:65:03:4b:e7:3f:4a:db:06:06:d0:9a:92:
e2:6f:4c:a4:31:cc:b6:42:cb:de:12:5b:64:c2:29:46:19:13:
bf:d4:23:12:e1:d3:b6:4c:e8:fa:88:af:93:50:b0:a0:11:cc:
81:b4:35:30:57:73:c3:49:d6:bc:82:ff:af:3e:23:b6:b2:e7:
2d:8d:9e:d3:f5:92:ab:78:3a:a6:54:00:e7:1e:8d:61:cf:92:
20:64:14:0d:9d:a7:e2:57:28:69:9a:33:4a:ad:f6:0e:b1:53:
81:41:ae:5d:e5:46:67:18:f2:55:1e:c9:e4:f9:90:82:d6:60:
73:34:40:dd:9a:4d:25:7e:8a:c9:3f:c9:f2:02:3d:f0:9c:60:
c2:01:33:f1:17:b2:8b:dd:a6:aa:54:e1:fb:26:85:dd:d3:4d:
e8:3a:a0:d4:23:6a:6c:53:2a:e9:ef:a2:5d:2d:25:9d:dd:14:
12:47:87:8b:1c:89:73:66:b5:96:29:9f:33:bc:bb:97:b0:a5:
1c:38:b0:65:5e:37:37:a6:0c:2a:3a:26:12:2c:4d:40:7d:b1:
20:8d:a5:bf:19:b0:f4:f0:c1:19:29:7e:27:e7:d3:fc:17:3e:
51:3f:8d:ba:fe:a6:94:2b:6b:fd:24:3a:60:c4:eb:f0:f2:6d:
a2:70:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 19:02:40 2025 by rpki-client