This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
File: yQm9soTk3whHdmDWgrfLP1lIMeM.mft (raw, json)
Hash identifier: /oXWmnBfeSBJYPePAmBW51ranAKTqRT03nrSpuf5ZHw=
Subject key identifier: 2A:70:8F:60:72:B4:62:CF:35:40:05:E4:A3:3E:7D:C5:25:64:93:E1
Authority key identifier: C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
Certificate issuer: /CN=A912BD25/serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Certificate serial: 0C79
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
Manifest number: 0C6F
Signing time: Sat 24 Jan 2026 18:11:08 +0000
Manifest this update: Sat 24 Jan 2026 18:11:07 +0000
Manifest next update: Sat 31 Jan 2026 18:11:07 +0000
Files and hashes: 1: yQm9soTk3whHdmDWgrfLP1lIMeM.crl (hash: oljEAp/2yuHH5L45Qdsl1Z5FjBWq3J6/IevjCbAygDE=)
2: CF3378E272DB11ED8483E95DC4F9AE02.roa (hash: oTWmtO2mgStqeMj6jPmXnnLNrPwchhiOjUM05tQ62SY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:11:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3193 (0xc79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912BD25, serialNumber=C909BDB284E4DF08477660D682B7CB3F594831E3
Validity
Not Before: Jan 24 18:11:07 2026 GMT
Not After : Jan 31 18:11:07 2026 GMT
Subject: CN=69750b3c-12fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:9e:d2:64:e2:3e:24:d7:e6:dd:76:e4:8d:
dc:d8:8d:a2:85:df:8b:55:8b:7b:de:1b:c2:a4:fa:
7b:c4:55:16:ca:ab:b9:15:64:04:70:c5:26:7d:9e:
20:86:63:f9:38:2d:c3:60:cd:69:01:ec:3f:18:21:
e3:ce:f5:9a:61:fa:e9:59:01:2a:db:e0:62:32:a2:
44:c3:5f:c9:c5:9f:01:33:a7:e4:97:90:4a:da:05:
2a:8b:d4:66:7d:5d:da:45:26:1a:95:f8:26:d9:a4:
11:0c:1b:6d:39:9a:57:33:4f:47:8d:74:03:17:22:
21:bc:d4:28:12:c9:90:6a:a8:27:f1:72:ee:50:12:
1c:9c:6c:23:97:5d:23:05:72:70:b0:18:19:bb:7a:
63:c2:36:ac:8e:5c:84:b4:13:1a:fb:61:85:02:6a:
ea:ba:5a:9c:3f:f9:aa:4d:82:21:5d:77:5a:f9:c0:
58:3b:35:a3:29:55:15:15:3c:18:8e:db:6a:35:09:
28:de:d0:55:a7:ea:1b:1b:96:f6:ae:0f:cd:45:15:
18:16:89:27:ca:98:2e:0e:50:0b:48:66:29:d5:ba:
18:93:38:6f:73:45:9f:16:cc:99:8f:cb:c1:75:b4:
bc:fe:98:4a:ef:1c:71:50:24:b0:ed:90:35:0f:e6:
2c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:70:8F:60:72:B4:62:CF:35:40:05:E4:A3:3E:7D:C5:25:64:93:E1
X509v3 Authority Key Identifier:
keyid:C9:09:BD:B2:84:E4:DF:08:47:76:60:D6:82:B7:CB:3F:59:48:31:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yQm9soTk3whHdmDWgrfLP1lIMeM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BD25/07F8214A14E411EA876E8640C4F9AE02/yQm9soTk3whHdmDWgrfLP1lIMeM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:45:3a:aa:91:f4:a7:d0:3e:ab:c8:cf:f8:d2:d7:1b:91:cb:
f7:23:3a:58:df:0d:ab:3e:53:87:e0:4f:df:61:0d:ae:dd:03:
9f:82:fd:8e:4a:3c:f5:2b:66:79:c4:17:1a:5d:df:ab:7f:f8:
4d:91:da:2b:cb:30:7f:09:0d:cc:9c:38:f5:7b:17:3e:3f:c8:
fe:d8:68:70:78:cb:39:d5:08:7e:49:24:06:f4:fe:38:cf:f3:
3f:2b:72:1b:40:15:c7:f6:ae:f1:a5:da:2a:33:69:ac:a9:43:
79:f8:36:c0:d2:0b:88:2a:71:6d:aa:dc:f4:fd:ff:f0:9a:ed:
ad:88:2f:a4:d0:56:3b:b1:d8:b1:f1:3e:56:e3:f9:dd:03:35:
79:3b:52:6a:17:7f:3e:f5:e0:a7:7f:a7:2e:56:9c:61:c7:e7:
dc:5b:a2:b4:c1:42:19:c2:b6:31:21:6b:2a:07:31:34:68:81:
d6:ba:44:55:6c:e3:d8:49:31:76:fc:0b:c2:b1:6e:c3:96:e2:
86:c9:84:70:39:40:63:80:2b:64:51:5b:27:31:89:a9:c0:14:
f0:f5:89:4a:1f:ef:53:a8:9c:53:a3:5e:2e:62:be:0c:86:e4:
47:c4:3a:b8:0c:1f:6d:88:53:cb:25:ce:43:a8:66:7f:06:b6:
a8:77:b9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:03:33 2026 by rpki-client