This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json)
Hash identifier: xU6vCabh84yJnWcghWJQqy+V1XEtR9XrKSoNHvcFPuE=
Subject key identifier: DE:AD:61:E1:CF:52:F8:16:F1:79:05:D6:ED:B0:6A:5A:3B:C6:F8:6D
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial: 041B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
Manifest number: 0410
Signing time: Sat 24 Jan 2026 23:36:18 +0000
Manifest this update: Sat 24 Jan 2026 23:36:18 +0000
Manifest next update: Sat 31 Jan 2026 23:36:18 +0000
Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: +MfgFmQKLANfPRQHAjJayIvvJlaiBAGETEfCaCFhxRQ=)
2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: /k7UGLxYpMRjSXOkhilDp1PbyHK35jDBnjLpEab1SqY=)
3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: nXP2TkV2xaQf8NtZFSYlzBkdLiCf/hTO1Pti6MrwpUU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Validity
Not Before: Jan 24 23:36:18 2026 GMT
Not After : Jan 31 23:36:18 2026 GMT
Subject: CN=69755772-8fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fb:8f:d0:c9:9f:6a:73:be:91:60:63:22:24:
a7:2e:fa:52:22:e2:5d:15:1b:55:02:5d:a2:00:73:
c3:96:d5:3d:79:e3:c5:c2:66:d4:0b:f6:07:c4:7c:
1d:85:dd:ec:57:b6:0c:ad:5d:72:d8:f6:eb:cc:95:
90:0e:69:86:10:8c:a8:7c:90:ea:c1:ac:7e:ff:dd:
bf:29:ea:3e:be:62:ad:bf:9b:fb:07:11:b3:7f:6a:
0b:ce:ee:12:78:5a:51:e4:6e:58:76:24:ac:63:67:
03:32:f0:8e:8c:48:c2:3f:25:90:ae:72:9a:aa:3a:
42:dc:ba:86:0f:40:f5:4b:28:59:b0:8c:e3:0f:fb:
79:db:cb:57:5b:cc:11:6f:c9:88:db:dc:04:7e:c9:
28:af:36:78:26:ab:06:c7:d4:e9:60:7e:49:57:d9:
7d:98:91:9c:17:0b:55:45:6f:78:38:a8:0e:38:c9:
76:6a:9e:91:d5:d0:83:36:54:ae:13:fd:0e:99:03:
ba:47:f3:00:1e:ea:76:e8:ad:ee:a8:7d:00:1f:72:
44:8f:9d:90:88:f6:be:fa:b9:24:9f:d8:53:a7:1e:
7c:88:80:f8:7c:85:3a:a6:26:02:c9:1d:02:0d:7f:
f4:37:05:0f:bd:32:a0:46:e4:a1:9f:69:9e:3f:31:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AD:61:E1:CF:52:F8:16:F1:79:05:D6:ED:B0:6A:5A:3B:C6:F8:6D
X509v3 Authority Key Identifier:
keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:f5:c9:1c:67:f1:13:35:d2:ed:76:72:c8:42:46:5c:34:d6:
8e:2d:1e:24:b0:6a:a2:3a:58:d2:85:0b:39:c5:b5:23:14:59:
2c:99:99:d4:96:64:46:1e:a5:f0:3b:b4:47:5e:28:ca:9b:95:
46:f5:47:11:e1:c8:68:73:18:27:df:91:50:ca:14:ce:3c:a0:
b1:d6:ce:f2:9d:62:28:8b:4b:e9:af:38:7a:44:ac:8b:62:e7:
4b:59:96:2d:02:54:1e:a2:d4:29:80:15:4c:09:72:c8:66:bd:
85:62:6d:cd:ab:f3:33:e1:01:6d:ed:b1:b8:bd:5b:d2:6a:3f:
db:e6:4d:b3:ed:94:b9:c9:b7:3f:f4:23:92:92:ab:7b:a0:6d:
99:3f:d7:89:cb:fb:7a:d7:72:a8:a0:a5:57:57:4e:a4:5e:cb:
8f:98:8e:f0:a2:8f:81:7c:f3:bc:ac:7e:57:5c:09:53:52:9c:
b9:75:cf:b2:a1:f4:d6:f1:74:2d:0e:f6:68:aa:80:e1:58:2e:
b2:ab:ec:56:85:1b:95:b5:3d:97:e2:85:99:b2:df:71:2f:5c:
92:49:d8:91:c4:33:7c:7f:7d:2e:17:d8:c8:78:bf:2b:94:2e:
d4:db:7a:6d:b3:1f:d2:34:b1:99:39:2b:68:76:5c:32:e4:e9:
01:a4:09:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:11:09 2026 by rpki-client