This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
File: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft (raw, json)
Hash identifier: COacQECR+kip22KUdYR9aXnFC4G4FDqp8YENhnl9qco=
Subject key identifier: F1:DE:02:06:7A:18:9A:4E:94:81:A1:9F:19:F7:FB:65:13:E2:CA:01
Authority key identifier: 63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
Certificate issuer: /CN=A9147B58/serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Certificate serial: 062E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
Manifest number: 0627
Signing time: Sat 24 Jan 2026 22:04:27 +0000
Manifest this update: Sat 24 Jan 2026 22:04:27 +0000
Manifest next update: Sat 31 Jan 2026 22:04:27 +0000
Files and hashes: 1: Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl (hash: W39IBAKmu29UGBSv2Loh7cQ25gqdsUTKIowYS8LfKJs=)
2: 657BCA62CABC11EB8D6D063BC4F9AE02.roa (hash: W1fkw/mYSuTpBkq23h73Gt2ZtwtQaM95I1fyF0uTlto=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1582 (0x62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9147B58, serialNumber=63E48762A89308096773D9E1C9D1A9998035670D
Validity
Not Before: Jan 24 22:04:27 2026 GMT
Not After : Jan 31 22:04:27 2026 GMT
Subject: CN=697541eb-1108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:6f:ed:aa:79:19:32:85:95:9e:44:89:67:
5a:ee:8a:b7:ba:10:ab:d2:d5:ec:f8:1a:7b:6d:a9:
31:71:7e:28:ed:5f:cb:a7:74:11:40:f1:ea:cf:b4:
d5:3e:4b:e7:8a:00:25:6e:34:e3:bc:4b:8f:73:77:
93:d8:40:0a:f2:67:b3:1e:13:c3:59:85:a9:63:da:
d6:a7:3b:5a:72:dc:50:5a:9c:ed:7b:a3:75:75:7c:
2c:b3:25:e2:cc:79:77:7e:88:f2:88:18:e2:eb:e7:
13:77:e7:a2:c7:85:ac:7b:48:14:0d:d3:01:30:3f:
e7:8d:ff:aa:a2:58:04:09:91:15:63:74:15:29:5b:
8b:ff:73:c8:10:b0:15:48:48:6a:01:a7:a7:96:68:
41:ee:65:21:50:da:ad:8e:47:37:11:59:63:9c:01:
a6:a9:ec:7a:39:ad:84:7b:19:90:bf:01:70:dd:c3:
f2:7b:28:3c:5e:f0:22:8f:16:4b:6f:49:25:0e:16:
c1:75:f3:5b:1e:55:00:d4:34:89:c4:f2:a3:6c:49:
f8:dd:9b:ef:fa:d8:d5:cc:23:b0:65:0c:3a:75:c4:
ff:c1:4b:25:8e:86:aa:87:3d:2e:e4:3c:ad:98:be:
e7:60:2c:1e:30:e4:d7:41:8f:00:20:8a:35:ed:1f:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DE:02:06:7A:18:9A:4E:94:81:A1:9F:19:F7:FB:65:13:E2:CA:01
X509v3 Authority Key Identifier:
keyid:63:E4:87:62:A8:93:08:09:67:73:D9:E1:C9:D1:A9:99:80:35:67:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B58/AAC21C7ECAB811EB84155336C4F9AE02/Y-SHYqiTCAlnc9nhydGpmYA1Zw0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:b1:aa:c3:26:30:85:bc:40:2d:d8:95:fd:6a:9a:33:ca:e7:
11:14:8d:46:29:d7:c9:9a:56:25:23:7c:2a:ae:db:3d:91:56:
d5:30:04:dc:92:de:d1:e1:4a:bc:c7:67:71:7c:e7:86:53:8f:
5e:6b:31:0e:df:2f:5c:4b:ef:fd:0f:7e:05:51:80:e0:2c:dc:
05:ba:a9:e0:a1:66:4c:46:42:67:93:14:ae:55:fb:40:a8:e8:
36:f6:e7:8d:f9:27:0d:fe:b8:96:67:34:25:a7:bb:72:e7:dc:
1a:86:db:a9:23:f5:7b:80:14:e3:19:a0:6f:e1:bd:5d:71:28:
80:6b:47:7d:3b:ae:56:94:ce:e0:bc:bc:a7:c0:02:8b:39:94:
bc:ef:dd:21:4a:0c:05:0d:56:2a:e2:e0:bf:17:db:29:99:ef:
30:d7:6a:b9:0c:09:96:f7:62:b7:0b:da:9e:b1:0c:b9:91:08:
9e:16:7d:48:07:90:29:88:72:7b:6d:1f:f6:8f:1b:2e:85:22:
8c:ab:86:e1:85:0f:5e:f6:c3:60:63:73:5e:61:6c:15:a4:2a:
bd:6e:21:78:6b:11:9e:be:3a:a6:8b:a1:18:ac:79:61:62:97:
84:64:85:61:d8:4d:99:d2:47:d4:60:29:22:66:78:3b:4f:6c:
f8:12:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:00 2026 by rpki-client