This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
File: YhmdhUkwna_yWfpPdr5svUb3VDA.mft (raw, json)
Hash identifier: jvfmA8f4jXnISk0MFuW3joHlpRwm2iRVPcFQRMJGqrw=
Subject key identifier: 21:00:49:3D:01:5B:F4:DF:98:70:66:CC:AF:07:50:D7:D8:D2:4C:7C
Authority key identifier: 62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
Certificate issuer: /CN=A9147A12/serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Certificate serial: 0C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
Manifest number: 0A
Signing time: Fri 23 Jan 2026 07:06:07 +0000
Manifest this update: Fri 23 Jan 2026 07:06:07 +0000
Manifest next update: Fri 30 Jan 2026 07:06:07 +0000
Files and hashes: 1: YhmdhUkwna_yWfpPdr5svUb3VDA.crl (hash: 8wCTMadXN/LuFlkOUgnE3BpEcGkXFwR4IEXYZgACKN4=)
2: 8CCD4284ECEB11F08F189C11746F56BC.roa (hash: rkvtwz4jQvka4siKBDvCO5UdOxOA6EFkiVcFLw5MxVo=)
3: 7C0561D8F10111F088AEA117476F56BC.roa (hash: 52UhIkv6hhME+D4lgOetYoFZhLT+usiRxSPsUZOFcmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 07:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12 (0xc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147A12, serialNumber=62199D8549309DAFF259FA4F76BE6CBD46F75430
Validity
Not Before: Jan 23 07:06:07 2026 GMT
Not After : Jan 30 07:06:07 2026 GMT
Subject: CN=69731ddf-f576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:36:b4:f0:7d:44:1a:a6:ba:d6:fb:c7:d7:
0a:82:48:33:ba:89:b3:f7:d1:84:ad:60:1e:e8:f4:
d0:b6:3b:5c:40:6a:59:93:1a:9d:6d:2f:95:21:5d:
96:ac:e3:4c:c8:09:26:8d:6f:53:82:b2:95:d8:2a:
ed:a6:4a:7a:50:f1:03:ef:e1:05:ce:e4:45:71:c1:
00:83:32:04:6a:59:8d:61:69:87:c4:47:d1:7c:0a:
04:1d:0d:42:71:aa:b8:d0:8a:e3:e0:0e:5b:32:db:
c8:5f:83:8c:2c:99:0b:7a:58:d0:bf:0c:ae:bd:13:
82:e6:4e:fb:fd:bf:f3:1c:9d:ed:dc:15:36:07:20:
c0:c1:5f:bd:6f:35:a5:08:6b:2e:c2:b1:ed:77:13:
4d:b6:0f:18:90:0f:c2:19:7a:14:02:7a:e9:cd:cd:
13:ff:e1:c9:d1:53:49:9a:e1:05:ca:cf:a9:78:73:
90:51:a2:3a:66:75:7b:01:8e:4b:31:c8:48:c1:1a:
bd:1f:ca:b4:5d:f8:44:1a:c9:68:f8:ed:5b:4c:84:
6e:cd:2f:9a:69:16:0c:47:34:85:f3:a6:a9:02:91:
79:a4:7d:c2:93:53:b4:b8:65:16:e8:d0:f5:e7:ff:
88:b3:08:ae:c9:98:f4:f8:90:7c:42:cd:6b:dc:28:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:00:49:3D:01:5B:F4:DF:98:70:66:CC:AF:07:50:D7:D8:D2:4C:7C
X509v3 Authority Key Identifier:
keyid:62:19:9D:85:49:30:9D:AF:F2:59:FA:4F:76:BE:6C:BD:46:F7:54:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YhmdhUkwna_yWfpPdr5svUb3VDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147A12/E3B13B6EECE111F0B538BA9C716F56BC/YhmdhUkwna_yWfpPdr5svUb3VDA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ae:7b:75:0c:9a:10:b3:fc:84:ea:a9:ea:b9:ee:ca:e3:77:
e7:5a:4c:2d:9d:0a:43:b9:5d:16:37:65:42:25:ad:80:50:76:
e0:31:f2:a3:52:30:6e:b3:50:9c:47:cc:5e:f7:1d:a6:a5:23:
45:61:dd:12:86:9a:55:52:73:ef:dd:7a:de:7f:2c:c2:c9:4d:
65:3b:14:d5:43:07:c2:3c:51:35:38:e6:3e:d5:52:7a:98:4b:
09:9b:b0:97:22:29:5c:1d:84:2b:f1:02:bc:83:e9:f4:d7:58:
10:9f:67:97:1b:9f:9d:9b:66:43:cd:ac:4a:96:6b:5c:e5:6b:
63:b8:59:45:cd:98:47:c1:0f:21:d7:69:1e:ef:15:61:b4:72:
10:86:37:7b:08:fb:71:f2:07:8b:26:75:1a:4d:62:4f:24:ea:
4b:f0:f3:b0:de:ec:07:6f:b3:48:fc:ae:1c:51:02:f2:b7:0b:
1e:cd:31:e7:d1:65:03:9d:4f:64:e3:43:bb:e6:6d:70:55:e3:
f8:2c:66:01:44:e6:d9:a8:c3:2f:32:6f:02:c2:b8:91:e0:92:
fe:3f:8a:76:ee:5a:3d:7e:69:e8:19:a2:7e:2c:f2:15:27:c0:
b3:0f:37:77:4e:31:b3:05:cd:e3:1e:de:fc:87:3c:2f:1b:aa:
fc:24:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:26:10 2026 by rpki-client