This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
File: CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft (raw, json)
Hash identifier: R7Bh+1/+Efv8LtV2q2zwFlhMckAWnhk2y5Y9C+y2TX0=
Subject key identifier: 2C:40:0E:FA:EB:67:3B:D6:89:CF:56:9B:1C:C8:60:8D:9E:64:53:4C
Authority key identifier: 09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
Certificate issuer: /CN=A913806E/serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Certificate serial: 082C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
Manifest number: 0824
Signing time: Sat 24 Jan 2026 20:16:48 +0000
Manifest this update: Sat 24 Jan 2026 20:16:47 +0000
Manifest next update: Sat 31 Jan 2026 20:16:47 +0000
Files and hashes: 1: CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl (hash: XBorFx41SZP8X0/ruStkbU63N05lqsHazLMgNZ0mvPk=)
2: 1AC2369A010911ECB732340DC4F9AE02.roa (hash: l/86X+8o68B2pJxJyOCeQIqt2RaiG2o8599WQfHm2oI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:16:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913806E, serialNumber=0989E191558BBCE46FAB7B53E4A735EEADA8D477
Validity
Not Before: Jan 24 20:16:47 2026 GMT
Not After : Jan 31 20:16:47 2026 GMT
Subject: CN=697528b0-7490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:95:c5:72:23:96:cb:09:25:a3:c5:0e:0e:
e2:8e:fd:da:dd:73:6e:6f:47:3d:2b:ab:73:5a:11:
28:2f:ce:34:43:d8:e1:48:5d:b6:01:75:31:60:bc:
1f:88:d0:b0:09:2f:16:a1:10:5d:14:bf:06:c8:c3:
e2:a8:89:3f:ff:88:6c:16:26:54:b0:a3:3a:45:5a:
cb:f5:ba:cf:b8:4f:50:c7:f3:01:2d:6d:e8:74:26:
f4:ea:96:b6:a7:34:c7:d2:23:7f:a3:ab:1a:b1:d2:
ab:ac:38:dc:4e:04:ae:cd:6b:f8:8e:fb:b0:b2:b1:
ea:5d:9c:cd:bc:30:8a:82:32:85:82:69:70:00:4e:
ea:2c:71:b6:90:2c:52:d5:64:87:cc:95:3b:ad:48:
81:f0:51:bb:66:5c:d0:f6:7a:b3:ff:65:46:6b:26:
ba:f1:dc:e2:65:8c:f4:0a:45:eb:8f:b0:4e:0a:f6:
32:12:57:12:13:e9:f8:1e:db:22:8b:1a:2a:56:2b:
88:84:bb:03:70:b4:1e:94:ae:cb:38:a4:10:47:45:
9e:2b:93:65:47:c8:0e:e3:a3:23:c5:b7:50:2c:4c:
43:57:23:72:e6:3c:ef:ae:92:76:31:6c:d5:2b:fa:
05:d8:05:1f:ab:c5:27:bd:03:36:12:f3:fb:49:2a:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:40:0E:FA:EB:67:3B:D6:89:CF:56:9B:1C:C8:60:8D:9E:64:53:4C
X509v3 Authority Key Identifier:
keyid:09:89:E1:91:55:8B:BC:E4:6F:AB:7B:53:E4:A7:35:EE:AD:A8:D4:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CYnhkVWLvORvq3tT5Kc17q2o1Hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913806E/9DBFAB38022F11EB9333183CC4F9AE02/CYnhkVWLvORvq3tT5Kc17q2o1Hc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:74:fc:cb:ab:29:6f:a8:ae:51:fe:91:cc:94:06:7c:ba:05:
a6:46:a7:8c:4b:3f:ba:1e:d5:b5:4b:4a:78:cb:f4:67:b3:a8:
ec:b2:4e:42:ec:b7:1c:53:ed:a0:8f:89:b7:17:3a:55:94:47:
7a:88:31:77:28:a8:d5:08:04:eb:f5:cb:c9:6f:51:f6:6b:7c:
7e:4c:67:72:cf:58:6e:cc:32:98:45:b9:21:8e:54:e0:a7:9c:
1f:e9:42:a4:3f:b6:30:ef:ef:f6:4a:1d:9c:9d:f9:77:5b:4d:
9d:bf:3e:59:1d:8b:95:a4:b0:d1:a2:17:4b:61:3a:6a:a1:11:
c2:f2:fe:d1:a6:6d:02:70:3a:91:3d:f1:f5:b0:64:f5:29:1e:
f9:1e:3f:e3:8e:d0:1c:26:69:8a:f5:5f:59:92:61:5f:86:b5:
7b:74:5d:0a:cf:7d:f0:b7:3e:cf:7f:e5:b4:0c:88:4f:1e:1b:
d0:97:ad:84:86:d7:b5:67:e6:97:e0:97:cc:fe:2c:e8:7b:71:
f3:83:7c:da:4c:f5:21:93:b7:32:80:b3:eb:cc:46:3f:38:41:
c5:cd:21:45:94:59:a5:ce:17:e2:98:6b:ca:0e:7c:65:d6:13:
9a:e1:62:e2:b0:f0:04:44:dd:e2:4f:7a:0d:19:59:c1:05:28:
f1:f2:4e:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MzgwNkUxMTAvBgNVBAUTKDA5ODlFMTkxNTU4QkJDRTQ2RkFCN0I1M0U0QTczNUVF
QURBOEQ0NzcwHhcNMjYwMTI0MjAxNjQ3WhcNMjYwMTMxMjAxNjQ3WjAYMRYwFAYD
VQQDDA02OTc1MjhiMC03NDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2CCVxXIjlssJJaPFDg7ijv3a3XNub0c9K6tzWhEoL840Q9jhSF22AXUxYLwf
iNCwCS8WoRBdFL8GyMPiqIk//4hsFiZUsKM6RVrL9brPuE9Qx/MBLW3odCb06pa2
pzTH0iN/o6sasdKrrDjcTgSuzWv4jvuwsrHqXZzNvDCKgjKFgmlwAE7qLHG2kCxS
1WSHzJU7rUiB8FG7ZlzQ9nqz/2VGaya68dziZYz0CkXrj7BOCvYyElcSE+n4Htsi
ixoqViuIhLsDcLQelK7LOKQQR0WeK5NlR8gO46MjxbdQLExDVyNy5jzvrpJ2MWzV
K/oF2AUfq8UnvQM2EvP7SSr7EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCxADvrr
ZzvWic9WmxzIYI2eZFNMMB8GA1UdIwQYMBaAFAmJ4ZFVi7zkb6t7U+SnNe6tqNR3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODA2RS85REJGQUIzODAy
MkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZPUnZxM3RUNUtjMTdxMm8x
SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NZbmhrVldMdk9SdnEzdFQ1S2MxN3EybzFIYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODA2RS85REJGQUIzODAyMkYxMUVCOTMzMzE4M0NDNEY5QUUwMi9DWW5oa1ZXTHZP
UnZxM3RUNUtjMTdxMm8xSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwdPzLqylvqK5R/pHMlAZ8ugWmRqeMSz+6HtW1S0p4y/Rns6jssk5C
7LccU+2gj4m3FzpVlEd6iDF3KKjVCATr9cvJb1H2a3x+TGdyz1huzDKYRbkhjlTg
p5wf6UKkP7Yw7+/2Sh2cnfl3W02dvz5ZHYuVpLDRohdLYTpqoRHC8v7Rpm0CcDqR
PfH1sGT1KR75Hj/jjtAcJmmK9V9ZkmFfhrV7dF0Kz33wtz7Pf+W0DIhPHhvQl62E
hte1Z+aX4JfM/izoe3Hzg3zaTPUhk7cygLPrzEY/OEHFzSFFlFmlzhfimGvKDnxl
1hOa4WLisPAERN3iT3oNGVnBBSjx8k4t
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:45:26 2026 by rpki-client