This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
File: yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft (raw, json)
Hash identifier: jnUujH7x7bZ3byEpPOQRrhxT5Ftfvhn2El698GQ+xg8=
Subject key identifier: E9:8F:E9:A2:96:CC:51:AF:2F:58:10:A5:AC:7A:29:82:7F:81:84:D3
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Certificate issuer: /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial: 07EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
Manifest number: 07DA
Signing time: Sat 24 Jan 2026 20:40:31 +0000
Manifest this update: Sat 24 Jan 2026 20:40:30 +0000
Manifest next update: Sat 31 Jan 2026 20:40:30 +0000
Files and hashes: 1: yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl (hash: 3pHQvVzMKWq0Bjoodlzm0vHqCBAOfFCrLYGIytQJ3HE=)
2: 5C95BDC0C12E11EEA47CBB59C4F9AE02.roa (hash: 7rMsJcYH90atC1w6j5iHb4gURibqgcvujGATzNnYHhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030 (0x7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Validity
Not Before: Jan 24 20:40:30 2026 GMT
Not After : Jan 31 20:40:30 2026 GMT
Subject: CN=69752e3e-8360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cb:b1:7f:e0:c9:2b:9d:64:04:4a:e3:47:90:
c5:ec:9d:72:bc:e1:2e:15:ce:e3:75:75:92:27:67:
fa:2a:e9:64:09:2d:49:9d:d9:bf:7a:07:42:38:47:
1c:fe:e7:99:ec:7b:a3:ff:5b:a6:98:90:44:6b:89:
89:b7:69:bd:f8:4f:32:f3:ac:e7:32:63:ca:c5:46:
35:67:e5:6d:3e:fc:75:48:c1:98:67:95:ba:9b:f8:
a8:e5:e7:ba:51:fd:f5:88:b6:6c:a8:ca:c9:e8:2d:
d5:a0:56:b3:a1:77:d3:f8:41:e3:89:11:57:c4:32:
3f:f8:c7:c7:aa:63:21:b0:ad:2b:32:6d:f4:e6:5b:
79:e6:27:2a:9f:29:4b:e1:f1:be:f4:27:92:79:5e:
dc:ee:cf:86:7d:b5:c4:c2:b8:4e:63:ae:41:e7:ad:
29:b0:b0:56:13:95:21:a4:3c:52:25:b0:91:d2:5d:
03:7e:08:07:63:f5:3f:e8:47:66:e6:92:d6:bd:80:
92:7b:b7:6b:3c:7d:60:8d:e9:3e:74:98:97:3b:cb:
bc:3c:4d:2d:3f:ad:98:ee:5d:e5:8a:2a:e2:98:1a:
a8:67:f4:0a:59:ef:b6:5a:7f:d8:bf:d0:7f:f8:a6:
d1:63:2e:ca:02:c3:1d:f1:6f:ef:45:1d:bf:7b:4e:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8F:E9:A2:96:CC:51:AF:2F:58:10:A5:AC:7A:29:82:7F:81:84:D3
X509v3 Authority Key Identifier:
keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:99:be:eb:11:14:07:61:f3:5e:10:22:ea:09:57:7d:3d:e6:
73:6b:4e:27:5e:92:a9:f4:03:4f:e9:0c:81:54:cb:a6:e9:57:
2e:5c:cc:55:cb:23:0e:d4:4b:43:4d:18:54:6f:20:30:1b:90:
54:60:be:55:7a:b8:96:bb:bb:3f:75:d7:33:1e:06:91:1d:84:
2d:8d:81:9e:db:fe:79:08:b4:63:1b:c3:7b:89:31:59:63:97:
f7:58:7c:d3:bb:71:f9:64:6b:4f:ac:11:d9:f9:f4:c1:93:ad:
2a:c5:bf:21:6a:f4:18:18:27:94:6e:6e:8d:8a:bf:4f:ac:8d:
da:06:bb:65:c8:9e:8b:a5:82:f4:ce:d1:39:af:31:36:aa:b2:
5d:9a:10:87:33:08:b2:75:fa:3c:0c:5a:8f:4a:06:19:2b:bc:
bf:47:db:57:2a:f0:1f:b7:74:8c:d7:03:a5:7e:8c:b7:77:d8:
e2:8c:b6:32:17:24:0c:20:53:38:e0:d0:c4:0a:ee:a3:7d:bd:
ce:da:50:0f:56:70:b0:80:bf:cb:93:00:2f:fb:91:4f:79:70:
f0:79:79:f3:e0:ed:73:56:0e:9f:17:82:b3:86:08:b1:b4:79:
f8:37:e1:ba:34:e2:3b:fa:69:24:9c:7f:73:d5:81:64:39:7a:
3d:e2:7c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:16:23 2026 by rpki-client