This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
File: NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft (raw, json)
Hash identifier: z2M5w87KqlaRgJ8LVgOKyfPRHCT6fvgDLyz53Hg0QrE=
Subject key identifier: 44:93:40:84:AA:C3:77:47:AB:4C:44:97:D9:44:B0:19:11:E9:39:2A
Authority key identifier: 37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96
Certificate issuer: /CN=A913CADE/serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96
Certificate serial: 1730
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
Manifest number: 1725
Signing time: Sat 24 Jan 2026 16:22:59 +0000
Manifest this update: Sat 24 Jan 2026 16:22:59 +0000
Manifest next update: Sat 31 Jan 2026 16:22:59 +0000
Files and hashes: 1: NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl (hash: HwTG6MKA2WKKXjTjAkdanmlPPKfgDtgISSh416MPd8k=)
2: DDDE13B8FAE811E7A715F157C4F9AE02.roa (hash: 3NBDQoX7jImDov3ZX0pfPuQVgflIK4hAwefOS6yfBcQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl
rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5936 (0x1730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913CADE, serialNumber=3725B2E97DD45DC0B7521C0A1BB5E40609B05D96
Validity
Not Before: Jan 24 16:22:59 2026 GMT
Not After : Jan 31 16:22:59 2026 GMT
Subject: CN=6974f1e3-108e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:8d:98:cf:f4:10:f2:c9:ec:6c:0e:57:f5:
3a:3f:65:0e:15:48:35:b3:46:9c:c5:aa:d0:82:f0:
d8:a2:cf:5e:31:45:33:ea:02:be:d9:09:1f:a3:f1:
b0:fa:ce:fa:e9:7c:ea:b3:a0:c8:26:b5:43:75:55:
b3:05:81:72:7a:c1:60:99:51:b5:4c:d2:a2:fa:0b:
fc:0d:bc:a8:29:08:2b:df:fa:06:20:32:9c:fc:73:
00:62:7d:00:49:fa:fb:53:cc:47:ef:f5:73:de:b2:
19:03:a3:d5:a7:e2:e3:bf:3f:74:92:51:f3:da:4a:
59:6c:76:16:35:74:1d:38:41:90:95:57:5f:ce:dd:
04:9c:b4:7e:de:6e:01:27:f0:d3:0a:19:b8:d0:aa:
bb:9e:dd:77:54:9d:18:a6:24:eb:7f:de:e8:94:bc:
a0:d2:fa:e2:c7:4d:a5:33:3c:fd:97:78:10:7c:c6:
ab:81:b1:4e:6a:03:d9:97:79:0d:d0:cf:57:20:aa:
34:f6:04:8b:05:01:2f:05:35:4b:2b:e1:9e:a1:f6:
ec:eb:cf:37:86:ac:9a:fd:29:10:51:8e:d0:e6:fa:
c3:32:1b:c0:cb:c5:79:bd:dc:30:41:d6:fb:c9:7b:
09:46:39:1c:ff:65:93:6b:5f:8d:a5:2b:b2:59:b1:
07:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:93:40:84:AA:C3:77:47:AB:4C:44:97:D9:44:B0:19:11:E9:39:2A
X509v3 Authority Key Identifier:
keyid:37:25:B2:E9:7D:D4:5D:C0:B7:52:1C:0A:1B:B5:E4:06:09:B0:5D:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NyWy6X3UXcC3UhwKG7XkBgmwXZY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CADE/F02AB17CFAE611E7923EA150C4F9AE02/NyWy6X3UXcC3UhwKG7XkBgmwXZY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fa:ea:62:ac:52:78:cf:12:31:83:83:80:db:e8:04:cb:d2:
11:51:cf:ec:1b:43:ec:c8:4a:0f:01:72:3c:c0:b5:ae:2e:ee:
0e:26:d6:c8:71:3b:2b:50:76:94:2e:62:f7:53:c4:e3:4d:12:
60:30:4d:80:5d:e9:8e:92:e0:9b:c5:4c:30:3e:a9:43:3d:b2:
09:85:60:5d:53:0d:d3:c5:84:89:ee:f6:a2:c8:e0:ac:ac:78:
62:09:45:5e:85:02:88:5d:2d:34:92:90:11:77:a7:12:75:4a:
89:c4:87:7d:a7:7a:19:9d:4f:26:3c:a7:a5:d8:be:38:27:65:
5d:49:b5:f5:37:64:f1:1c:6c:e5:61:5c:0c:f6:a4:7b:e9:8a:
35:57:08:6b:e2:d4:66:a0:f0:f4:fb:bf:09:e4:a7:99:07:bc:
89:4b:cf:01:0c:23:dc:06:7e:61:a2:f1:71:01:6b:d9:41:03:
1b:f5:36:99:65:48:0b:9b:cb:42:4e:98:3f:2c:c0:8b:cb:fc:
00:4c:12:6f:3b:ba:ab:e2:f6:08:f0:29:89:0b:bd:ed:8a:23:
13:93:e9:1a:40:66:da:f3:e7:90:be:64:5d:a7:87:f7:21:1a:
70:cf:64:6c:ad:04:b3:a4:fa:32:5b:40:5f:08:bf:4c:1b:74:
d7:1c:00:73
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0NBREUxMTAvBgNVBAUTKDM3MjVCMkU5N0RENDVEQzBCNzUyMUMwQTFCQjVFNDA2
MDlCMDVEOTYwHhcNMjYwMTI0MTYyMjU5WhcNMjYwMTMxMTYyMjU5WjAYMRYwFAYD
VQQDDA02OTc0ZjFlMy0xMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwCaNmM/0EPLJ7GwOV/U6P2UOFUg1s0acxarQgvDYos9eMUUz6gK+2Qkfo/Gw
+s766Xzqs6DIJrVDdVWzBYFyesFgmVG1TNKi+gv8DbyoKQgr3/oGIDKc/HMAYn0A
Sfr7U8xH7/Vz3rIZA6PVp+Ljvz90klHz2kpZbHYWNXQdOEGQlVdfzt0EnLR+3m4B
J/DTChm40Kq7nt13VJ0YpiTrf97olLyg0vrix02lMzz9l3gQfMargbFOagPZl3kN
0M9XIKo09gSLBQEvBTVLK+Geofbs6883hqya/SkQUY7Q5vrDMhvAy8V5vdwwQdb7
yXsJRjkc/2WTa1+NpSuyWbEHSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESTQISq
w3dHq0xEl9lEsBkR6TkqMB8GA1UdIwQYMBaAFDclsul91F3At1IcChu15AYJsF2W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FERS9GMDJBQjE3Q0ZB
RTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhjQzNVaHdLRzdYa0JnbXdY
WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL055V3k2WDNVWGNDM1Vod0tHN1hrQmdtd1haWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Q0FERS9GMDJBQjE3Q0ZBRTYxMUU3OTIzRUExNTBDNEY5QUUwMi9OeVd5NlgzVVhj
QzNVaHdLRzdYa0JnbXdYWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCM+upirFJ4zxIxg4OA2+gEy9IRUc/sG0PsyEoPAXI8wLWuLu4OJtbI
cTsrUHaULmL3U8TjTRJgME2AXemOkuCbxUwwPqlDPbIJhWBdUw3TxYSJ7vaiyOCs
rHhiCUVehQKIXS00kpARd6cSdUqJxId9p3oZnU8mPKel2L44J2VdSbX1N2TxHGzl
YVwM9qR76Yo1Vwhr4tRmoPD0+78J5KeZB7yJS88BDCPcBn5hovFxAWvZQQMb9TaZ
ZUgLm8tCTpg/LMCLy/wATBJvO7qr4vYI8CmJC73tiiMTk+kaQGba8+eQvmRdp4f3
IRpwz2RsrQSzpPoyW0BfCL9MG3TXHABz
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:04:32 2026 by rpki-client