This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
File: JyLFq77mO3a52pZseNc6ZlfSROs.mft (raw, json)
Hash identifier: K6F5TMSLcZsaLfBeN3SWclfEPCJrlfCJeXlhJV7JRX0=
Subject key identifier: 88:3B:32:3C:37:E1:03:D0:3E:02:8A:45:2F:65:CC:81:0F:EF:50:79
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Certificate issuer: /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial: E0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
Manifest number: DA
Signing time: Sun 25 Jan 2026 04:50:57 +0000
Manifest this update: Sun 25 Jan 2026 04:50:57 +0000
Manifest next update: Sun 01 Feb 2026 04:50:57 +0000
Files and hashes: 1: JyLFq77mO3a52pZseNc6ZlfSROs.crl (hash: XQa7mR0Sg/4LBi/DtPLGo/JTuCkrjwtcxjdTGJg53H4=)
2: 221824CCAE5811EFAFE7FF84C4F9AE02.roa (hash: Khq58BRpOcFl6vAetWVmBYtt5+j7UZco7A8cXY4mwdg=)
3: 9F69B82EAE3E11EF9289306CC4F9AE02.roa (hash: fqeZHl+86XrUqfSyzpiOkkKovnLHhp0revb4OcbcTE0=)
4: 9F03C370AE3E11EF9289306CC4F9AE02.roa (hash: xOr+QwzkIpPbgEMKx5aE8i+BEI2UzwdDZqaMaJBm/wk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 224 (0xe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Validity
Not Before: Jan 25 04:50:57 2026 GMT
Not After : Feb 1 04:50:57 2026 GMT
Subject: CN=6975a131-6ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:ff:f4:58:b6:32:01:2e:b4:97:c4:83:72:
84:f1:e6:72:14:b5:61:55:d8:3b:1c:ae:7f:f7:7f:
7a:88:89:74:d2:d2:7a:f1:41:25:c0:9b:12:5f:19:
98:77:92:45:89:f7:fa:1a:04:54:e6:2f:3a:a5:63:
6e:58:07:ea:5b:ed:96:56:a1:f2:f7:1d:65:0d:6e:
81:b7:6a:e0:bc:5c:26:82:e5:20:3f:9f:3a:26:1b:
4b:bb:21:f5:18:c7:38:a1:79:ce:81:5d:fe:4a:bd:
c2:a2:8a:8f:1b:c2:15:47:d0:b7:69:6d:ee:fa:21:
4b:53:16:9d:a4:7f:be:c0:95:2d:bb:06:ff:57:39:
76:59:f7:35:e6:57:57:ca:5d:b9:bb:30:fb:e4:06:
ab:1a:12:02:22:c4:59:c4:1b:80:dd:27:3d:df:be:
72:a4:05:50:74:ff:ae:62:62:25:4d:b7:a6:56:c8:
96:97:9b:a1:46:79:5c:d1:be:b0:af:3d:31:6c:92:
df:cb:24:fc:8c:43:86:8f:5c:71:53:8b:31:c0:e5:
3e:28:0a:d1:5d:e3:cd:ab:c5:6b:7a:8e:a9:6a:88:
fa:d2:85:b6:36:9f:71:9a:80:5a:7a:a2:e8:5a:a0:
8a:d6:ef:2e:cc:42:73:40:e8:0a:80:0f:66:db:32:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3B:32:3C:37:E1:03:D0:3E:02:8A:45:2F:65:CC:81:0F:EF:50:79
X509v3 Authority Key Identifier:
keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:56:70:cd:d4:09:5e:ce:55:54:3b:1b:ba:e2:18:0a:a3:27:
0b:39:1b:9c:1a:e4:c3:b9:ea:7e:77:e9:f5:bc:97:c0:20:ca:
8a:68:85:68:b1:f0:4c:d0:ab:6c:e0:0b:60:00:81:76:c7:07:
56:97:03:9b:c0:c1:16:92:f1:4f:06:9a:75:70:e6:1a:cb:d9:
f4:61:12:55:68:0c:93:b9:82:1f:10:7f:19:f1:40:e0:03:d7:
8f:30:27:f4:68:4c:81:4f:86:75:de:84:e4:a6:84:0f:1a:a0:
bb:a8:ca:8e:1d:7b:54:c5:c8:21:b3:2d:96:46:54:87:c5:4e:
36:9d:6b:92:6f:59:26:57:1c:aa:f8:b1:46:64:d6:49:fe:1d:
b8:99:0f:7d:4a:c0:9a:d4:0c:76:4e:20:6b:8c:11:78:67:98:
bc:80:75:a0:43:a8:81:08:9d:31:bd:8a:df:85:8c:e9:62:b8:
bd:ee:a6:8d:6c:72:88:6d:93:a9:8b:da:0c:41:43:8d:34:43:
55:14:4b:db:c0:fd:76:ca:b1:bf:08:24:7a:cf:a3:68:00:c3:
bc:29:30:13:bb:bd:45:e2:12:90:06:77:7a:11:7f:84:fd:be:
81:8d:10:27:47:ef:d2:c3:70:f6:51:3b:2f:19:89:b7:99:d5:
d0:85:b2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:55:56 2026 by rpki-client