This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File: yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier: /Z84xVZ9saKV3ZSmIptAzC26QjgVdwEjw4JFW7gQiTg=
Subject key identifier: 57:21:30:95:F7:CB:80:D6:15:97:65:1D:1A:C8:C8:51:D7:CF:B9:BA
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer: /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial: 0818
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number: 080F
Signing time: Sat 24 Jan 2026 20:23:01 +0000
Manifest this update: Sat 24 Jan 2026 20:23:00 +0000
Manifest next update: Sat 31 Jan 2026 20:23:00 +0000
Files and hashes: 1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: 15Elxy1qsQ5rTJcio2E3lCfbt9100MZHse+0mmqE2UE=)
2: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: qJReJaaTRE38lshBw+MzbYFyUK14agtT5WHSqFZE0ko=)
3: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: VJ44WLNQk6fthSf4IfFQ/fDdSEbGp2lfMGV/+APm5xk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2072 (0x818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Validity
Not Before: Jan 24 20:23:00 2026 GMT
Not After : Jan 31 20:23:00 2026 GMT
Subject: CN=69752a25-1c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:7f:6d:1b:ee:b0:0b:43:a8:f9:bc:a8:43:
22:38:e4:28:fd:cb:e7:75:2f:33:9f:04:ba:60:4d:
4c:a7:6b:d6:56:0a:25:e8:d7:62:b1:de:75:ad:43:
1e:03:db:c1:09:15:69:ee:d5:f4:9d:01:0f:54:b4:
4d:ec:43:e9:d4:02:db:7e:43:75:06:0d:80:2a:fc:
13:19:9e:9e:d9:73:de:1e:d4:a6:3b:35:d8:71:6b:
5e:53:94:23:2b:3a:63:32:22:86:d3:bb:fc:ea:a6:
1d:67:40:c3:ce:1f:be:3b:77:1c:7d:f4:e5:8f:1e:
55:39:01:81:35:af:20:38:d3:77:12:cf:42:ea:90:
73:85:78:df:c4:88:91:26:a7:4d:0b:9d:58:91:25:
a9:45:e8:91:8c:fd:67:65:22:19:b0:c3:f0:57:1e:
9c:91:a8:9e:09:45:65:75:ea:df:5c:2f:f1:fb:1f:
a9:45:60:14:b2:2f:b2:1d:e4:59:9e:6c:e2:53:14:
af:4c:02:59:0c:ce:68:b1:8e:12:20:0b:68:74:4d:
9b:86:73:8f:86:e2:75:b2:1b:75:a6:2d:23:96:1b:
4b:37:ec:e2:4a:a2:4d:2e:20:31:ee:71:9f:a1:a5:
1c:09:c9:1c:c0:77:1c:3d:c9:57:ba:5a:ed:42:95:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:21:30:95:F7:CB:80:D6:15:97:65:1D:1A:C8:C8:51:D7:CF:B9:BA
X509v3 Authority Key Identifier:
keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:ee:6b:48:ce:d8:33:96:dc:37:51:02:43:1e:0c:ee:1b:8a:
c0:7c:92:34:6b:d2:6d:9d:13:23:ff:f7:34:bd:c7:de:4f:8b:
22:c4:ab:53:f5:12:6d:75:7e:46:37:9d:33:fa:fc:95:31:0b:
79:fe:1f:d9:e8:91:3d:93:5c:bd:23:54:89:d5:e3:98:c5:9c:
ec:e9:03:d8:2e:0d:68:c3:dc:64:62:e7:6f:b9:aa:e6:36:a7:
e6:ef:b8:73:79:66:3d:19:f6:04:07:48:5d:19:1b:79:83:1c:
84:ef:f8:dc:f3:bf:17:fb:e9:60:8f:9b:dd:1d:dc:7b:78:45:
f3:0e:db:3e:73:55:81:e7:dd:28:08:8c:44:5e:c0:8f:31:d4:
1a:56:d4:43:f1:1d:9d:b7:ec:a5:5d:84:c5:e6:1f:e4:63:03:
42:ae:43:fd:45:00:c1:7d:4d:aa:57:bc:ab:2d:93:cc:e2:04:
c1:47:96:0d:e4:37:10:74:c4:bb:98:8b:8d:2e:4f:cf:19:83:
73:4b:f6:c0:25:11:0a:43:34:dc:87:4b:f6:fc:2b:e5:6b:7d:
d8:8e:67:9b:78:ee:45:bf:4b:62:44:3a:f1:d6:4f:88:c3:c1:
e3:27:98:dc:6c:2e:3a:f9:92:43:e4:8c:b6:77:2f:8e:d8:7f:
b0:0e:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:52:23 2026 by rpki-client