This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft
File: AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft (raw, json)
Hash identifier: XJllFTXYvoUzJKmeBMUtUVcIDCDZZ9CO78V3Tr745+U=
Subject key identifier: BB:1C:28:A3:A0:1A:9A:25:22:00:88:38:5F:43:85:A9:47:8D:0B:29
Authority key identifier: 03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B
Certificate issuer: /CN=A9144BAD/serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B
Certificate serial: 0825
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft
Manifest number: 081F
Signing time: Sat 24 Jan 2026 20:19:38 +0000
Manifest this update: Sat 24 Jan 2026 20:19:38 +0000
Manifest next update: Sat 31 Jan 2026 20:19:38 +0000
Files and hashes: 1: AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl (hash: KaFwH95c1X4M+QLTLr8vBL9V9Q/p5V4lIbfs5MR8330=)
2: D3D1C19E0F2111EBBC6E5028C4F9AE02.roa (hash: w8h1UIf5R9tqHa/w+xuW6Fd0IPaJNgBHIyQBoTqMV4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl
rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2085 (0x825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144BAD, serialNumber=032AC2241D18CFBBC1C33CADF5E8F655412D4A8B
Validity
Not Before: Jan 24 20:19:38 2026 GMT
Not After : Jan 31 20:19:38 2026 GMT
Subject: CN=6975295a-6057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:ea:fa:54:73:0e:42:6d:f8:46:09:b9:9a:
59:d9:a5:b1:f5:84:f4:c6:f5:d5:95:23:17:8b:08:
63:dd:51:bf:36:cb:6f:be:a7:82:05:50:05:3a:15:
cf:10:f8:fc:81:d3:9b:72:57:9d:f2:08:50:20:f8:
50:bb:95:5b:a2:40:74:53:70:79:c4:cb:42:7f:41:
64:ff:e9:7b:aa:9f:d5:b7:73:f4:6a:d9:b6:b2:e9:
68:25:86:a9:7d:fb:c8:db:c4:1f:a2:4d:0e:ae:67:
53:29:85:33:d5:8f:6e:1a:63:cf:78:2b:af:3f:5e:
d7:15:51:25:e1:17:82:c4:e8:74:a4:a5:0c:07:c7:
0b:54:1f:5c:46:87:fd:28:6c:21:f7:77:4d:2a:44:
d0:c5:ef:e4:5f:03:83:96:60:17:91:f8:75:11:52:
0c:fa:12:73:95:92:1a:6d:47:5c:98:16:64:06:e0:
82:45:27:f5:f3:5c:44:a3:c8:4d:45:73:75:cf:6f:
f3:32:5e:c2:23:6f:83:d9:ed:c4:53:b9:32:bf:1c:
ad:ba:ae:26:48:28:81:71:86:07:62:44:20:b8:f7:
90:40:18:0d:55:3e:1d:c2:8a:63:6a:bd:d6:c8:cc:
85:03:43:ae:b6:e1:f1:5f:7e:17:c9:0c:a5:3e:ca:
2b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1C:28:A3:A0:1A:9A:25:22:00:88:38:5F:43:85:A9:47:8D:0B:29
X509v3 Authority Key Identifier:
keyid:03:2A:C2:24:1D:18:CF:BB:C1:C3:3C:AD:F5:E8:F6:55:41:2D:4A:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AyrCJB0Yz7vBwzyt9ej2VUEtSos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144BAD/D5D74346047811EBA7BD3A48C4F9AE02/AyrCJB0Yz7vBwzyt9ej2VUEtSos.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:71:f8:6a:86:0c:6e:85:65:39:ec:c4:36:9b:c5:6d:82:37:
f2:80:96:e4:01:16:0c:8e:fc:a7:b5:ff:80:4c:94:c1:57:96:
ab:9f:b4:49:10:96:99:03:f8:f3:c6:05:ca:fb:f7:2a:51:85:
3c:4b:3d:66:00:5b:c5:c1:9b:68:5d:c1:68:b9:32:6c:2b:e9:
50:a3:83:c9:2b:ab:4a:3c:26:c2:06:b8:32:94:4f:ce:7c:42:
dd:9a:c6:54:a8:26:83:5e:18:57:47:16:56:d6:85:f0:61:30:
e8:1b:42:d4:dc:0f:1d:fa:43:d3:3d:77:64:27:6a:88:da:d3:
84:78:7b:6c:de:da:db:da:12:ec:cc:6f:c4:3c:ca:00:8d:2e:
9e:f9:46:02:fd:63:04:b4:3b:e8:d3:af:da:b7:28:2e:b9:a9:
63:a9:e3:d4:e3:43:b2:4b:0f:54:06:b5:ff:93:5c:17:7e:43:
73:85:5c:94:16:19:ce:07:d6:b6:a4:fa:4a:00:ed:be:4c:27:
f4:21:b0:86:5c:d9:21:11:82:81:4f:71:09:c5:a2:99:32:b7:
43:32:f0:b9:fc:9c:fe:22:a6:af:e8:de:f6:66:cc:b3:8a:0e:
7e:57:22:26:6b:4f:27:1f:21:8a:d5:9a:7c:f9:0a:17:ba:d3:
1a:e3:d1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:15:03 2026 by rpki-client