This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
File: ygBwrFIB1vandapSXVPY4zDjIJY.mft (raw, json)
Hash identifier: LH15nUrNFtdkU+i/50ImVsBpag8WnOnu3w0ZDPLGaE0=
Subject key identifier: C8:6B:26:74:EB:A3:7F:6B:0C:AA:21:08:44:91:34:6C:B9:FA:3D:5A
Authority key identifier: CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
Certificate issuer: /CN=A9116907/serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
Manifest number: 0250
Signing time: Sun 25 Jan 2026 01:06:24 +0000
Manifest this update: Sun 25 Jan 2026 01:06:24 +0000
Manifest next update: Sun 01 Feb 2026 01:06:24 +0000
Files and hashes: 1: ygBwrFIB1vandapSXVPY4zDjIJY.crl (hash: x3uFcAFUsnjJSm3P8GpPevetzw7YBYOq1L3Sjzcpiow=)
2: EF9D5BBCE94211F08F77753A3C6F56BC.roa (hash: zW8y67+z9qqh6A12CJysjMAC1WHA3PzjP4KrkoB/h34=)
3: 19A1D2A8E94311F0AC417E3A3C6F56BC.roa (hash: aaLsrNsk5qcQc4ZKQj2ds0rfmg5DHE/A4p+ldQnt/hY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 01:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116907, serialNumber=CA0070AC5201D6F6A775AA525D53D8E330E32096
Validity
Not Before: Jan 25 01:06:24 2026 GMT
Not After : Feb 1 01:06:24 2026 GMT
Subject: CN=69756c90-c82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:c3:66:27:99:13:b2:40:5c:72:d1:d9:24:
f0:15:e5:01:57:25:29:fe:ac:18:c8:bc:0f:37:d6:
4d:f1:5f:f4:21:b3:3f:7c:98:f9:bc:a2:7a:1a:71:
d9:0a:42:d9:9b:9c:81:b4:d5:e7:64:fe:fa:cd:c9:
28:26:2f:8d:9b:da:85:c8:69:0d:14:d8:f2:10:9f:
1e:08:6c:39:cb:80:ab:97:45:88:6d:39:70:d8:ae:
d7:6f:ac:a3:4d:68:43:66:20:99:b8:3b:c9:f9:3c:
fc:0e:c6:f0:b1:eb:be:95:59:43:f7:61:81:4e:a7:
7b:60:ba:25:bd:32:d5:b6:f5:dd:76:88:8d:4e:0e:
e1:52:bc:f0:d4:1a:59:10:e0:1f:d4:77:94:2f:b6:
d7:ea:ca:75:49:48:61:95:27:67:91:a6:04:8b:8b:
ca:7e:76:9f:c2:dc:23:00:dc:9f:0d:c5:5a:9d:33:
bd:ea:6e:9a:60:78:02:3b:a5:a1:c2:75:47:f9:76:
7a:28:1d:2f:4f:cb:7d:2f:b4:1e:a1:4a:12:0a:e9:
32:3f:c0:c2:ea:2b:78:98:b9:6d:30:90:6f:0c:9e:
d5:74:d6:b9:21:b5:5c:66:fd:47:18:df:26:9f:bf:
6c:c6:48:a9:60:0a:a6:25:d3:51:a5:6a:84:bc:e4:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6B:26:74:EB:A3:7F:6B:0C:AA:21:08:44:91:34:6C:B9:FA:3D:5A
X509v3 Authority Key Identifier:
keyid:CA:00:70:AC:52:01:D6:F6:A7:75:AA:52:5D:53:D8:E3:30:E3:20:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ygBwrFIB1vandapSXVPY4zDjIJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116907/B56A7CB07AB711ED9B953569C4F9AE02/ygBwrFIB1vandapSXVPY4zDjIJY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:87:ec:f7:f0:fd:8e:2c:6a:72:89:87:50:06:5f:7b:0a:6e:
0f:20:80:1d:4f:b1:39:8a:b0:7f:94:9e:18:11:32:7a:d5:03:
99:58:d8:12:1c:ac:fe:df:02:27:86:37:d2:aa:42:da:ed:20:
98:d4:21:42:90:32:ac:53:a0:bc:62:63:d3:97:83:66:c5:87:
db:ab:90:9d:b1:df:c7:26:5f:76:03:19:45:ec:05:76:de:5d:
fe:4d:93:19:d8:f5:69:aa:c0:72:7e:b9:8b:f1:3f:c0:6f:57:
01:80:00:74:76:da:45:80:1e:46:94:5b:8d:a0:ff:ad:dd:63:
81:5c:fc:e0:dd:66:c0:e8:8f:df:9b:bc:17:83:ab:fb:5a:39:
d1:6c:e4:d9:ed:cb:27:3e:bd:f5:62:3c:02:5a:2f:7b:38:6a:
16:17:78:12:a9:67:6c:c3:b0:ca:e9:a3:55:c7:ec:e1:c5:91:
0e:67:ac:5d:aa:29:c7:7f:3b:22:ec:ce:e6:7e:c9:84:8e:ef:
5d:44:1f:5b:75:2d:69:cf:e4:a1:c3:42:4d:6a:3c:f1:dc:03:
56:f3:20:c3:5c:77:38:30:95:83:42:46:9f:0e:53:43:77:ea:
47:e5:2c:28:f4:6a:8c:54:b6:cd:b6:d4:e5:81:83:31:20:17:
1c:c8:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:39:32 2026 by rpki-client