This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json)
Hash identifier: AU+vgWkFoGd4tZRAZyo+T3jG5RdHY5FHJr9F+QdMiS8=
Subject key identifier: EC:40:2F:25:57:A6:4E:23:0C:77:E3:2F:B4:EA:22:A5:98:D8:ED:F5
Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8
Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
Certificate serial: 0202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
Manifest number: 01E9
Signing time: Sun 25 Jan 2026 02:15:26 +0000
Manifest this update: Sun 25 Jan 2026 02:15:26 +0000
Manifest next update: Sun 01 Feb 2026 02:15:26 +0000
Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: YbrOl6PM5vPnsk0SG/70SGRGn9rGSHg2kEikXIvoHAg=)
2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: uvZ2Q94gPhmYQwiI4YLVYozC9g+L2KL5OS58nY+uLv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl
rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 514 (0x202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
Validity
Not Before: Jan 25 02:15:26 2026 GMT
Not After : Feb 1 02:15:26 2026 GMT
Subject: CN=69757cbe-7917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:82:33:c7:d6:6b:9e:6e:c5:70:c8:24:d0:
5e:c1:71:76:3e:e0:ea:71:f7:a7:89:a5:e2:ca:23:
15:e2:6a:af:4c:1b:ab:18:14:bb:a4:c6:ea:e3:85:
f7:88:69:52:27:c1:63:16:19:91:24:03:2a:df:9d:
80:a0:98:19:1c:41:87:52:8d:e5:ea:ec:64:23:94:
fc:af:96:19:26:99:c4:b2:cb:35:11:17:55:c2:27:
77:29:da:fd:76:f2:2a:af:6d:2b:bd:5c:43:32:df:
da:10:f3:59:10:83:a6:39:b9:ec:7c:68:02:31:60:
97:1d:b1:83:c5:3e:14:7d:7e:89:32:a6:bd:6e:b1:
5e:17:18:bf:53:bf:81:ed:8a:c5:9c:9f:aa:82:8b:
3f:94:5a:f4:c3:30:1e:5f:5f:56:3a:49:10:f5:70:
6c:eb:3d:dc:75:9c:9a:a8:6b:7b:9a:07:68:d3:b0:
1e:a5:67:14:dd:57:6a:3e:8e:79:06:c9:e7:f6:77:
ab:4f:3a:ec:dd:42:6e:a1:9a:82:b6:1c:39:4c:9d:
94:72:b6:37:de:48:fe:54:4c:4e:7c:a8:a4:80:e9:
43:98:6b:a7:61:ed:49:0d:79:5b:62:e0:af:bd:d5:
af:11:65:45:8e:1b:ad:83:79:bb:a8:15:fe:f7:9d:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:40:2F:25:57:A6:4E:23:0C:77:E3:2F:B4:EA:22:A5:98:D8:ED:F5
X509v3 Authority Key Identifier:
keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:03:83:2a:e7:de:83:2a:93:fe:58:1c:10:10:82:21:c3:fd:
67:c1:55:26:e8:27:0f:d5:ba:69:b1:b7:48:f7:2d:7a:7e:a2:
27:52:84:99:e0:c0:e5:b4:68:c2:c8:86:f2:1f:c0:54:fb:e5:
23:3a:27:dc:81:a6:ed:2e:c3:2e:85:57:2c:be:94:46:50:6f:
d9:d5:51:fa:6c:9a:45:f5:0b:a6:8e:17:3e:87:ec:36:36:d2:
d8:7f:7f:a4:7d:bb:b7:cb:e7:27:78:9a:b6:40:59:03:b6:99:
7c:2f:0f:02:00:f6:b8:12:5f:4e:74:13:f6:a7:ea:92:9c:b0:
2b:e5:95:5a:2d:1a:38:f9:29:bc:bb:6a:82:46:71:3a:d7:9c:
2d:aa:d5:8b:f3:84:39:ed:06:63:b3:29:cc:eb:af:b7:f1:a9:
99:b4:e8:4b:10:77:ee:cc:92:db:25:26:35:6b:66:70:d0:68:
ac:97:18:60:0d:82:a7:7a:54:b2:38:bd:08:37:e9:92:f6:27:
1c:83:d0:47:b9:4f:ef:78:46:e9:fb:d0:6a:6d:3c:8a:c4:fd:
d1:af:14:df:82:c0:fd:af:11:ba:6d:db:ce:39:86:2f:f9:78:
42:99:1f:75:c1:2e:e6:a9:66:e7:42:88:18:f8:b7:c1:9b:15:
e4:85:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:16 2026 by rpki-client