This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
File: YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft (raw, json)
Hash identifier: A9UWrjWygddYry8RqoA+gYU8ZJl32FJNUj2C6bG+zis=
Subject key identifier: E9:D5:6D:CB:AD:A5:09:B0:17:82:CE:96:8B:37:12:E4:6F:86:21:15
Authority key identifier: 60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44
Certificate issuer: /CN=A9148488/serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
Certificate serial: 0A36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
Manifest number: 0A30
Signing time: Sat 24 Jan 2026 19:11:59 +0000
Manifest this update: Sat 24 Jan 2026 19:11:59 +0000
Manifest next update: Sat 31 Jan 2026 19:11:59 +0000
Files and hashes: 1: YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl (hash: j+ppYhP0JisG0sXF2wXhlLuum3tO4j+J40kiYPruViw=)
2: 5C8929C8839011EAB5B82263C4F9AE02.roa (hash: Jr5A5EFDHOtjVbEZUPlRHjoDRI+w8P0c18JoA/Eyebg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl
rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2614 (0xa36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148488, serialNumber=6076C5139D4CCFDEBCA44A14BDB7316888FA6344
Validity
Not Before: Jan 24 19:11:59 2026 GMT
Not After : Jan 31 19:11:59 2026 GMT
Subject: CN=6975197f-5c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0f:9e:3b:9d:94:f2:3b:6d:bc:d2:69:40:71:
51:2f:5a:bd:bb:e4:dc:a7:99:34:a7:6c:53:80:77:
9c:5e:7d:a8:98:18:07:06:ec:47:16:56:1a:a9:e9:
13:40:4c:ca:21:f7:b4:fa:de:a6:44:2a:08:f9:4e:
02:64:b4:fe:65:f3:08:a1:79:be:d3:7c:10:ed:60:
4a:2f:99:1d:f5:5f:5d:41:5e:6c:37:ef:0d:3e:f6:
54:bd:c2:20:6f:d2:a6:db:63:51:53:4b:f5:41:68:
e4:8f:48:75:85:0f:c0:da:cf:ce:43:62:2d:c4:7f:
12:f1:a1:bd:c4:01:7a:43:b7:53:e3:69:c0:ce:1f:
41:dc:f0:25:22:4f:19:2d:af:95:c3:e9:e0:35:cd:
9e:3e:7c:b6:98:db:6c:47:15:43:41:7d:8b:61:db:
25:4f:1b:ee:dc:01:f4:41:a0:4e:40:64:1f:da:9e:
dc:22:f2:76:76:b9:90:95:49:c0:01:a0:0a:31:ea:
98:33:07:5d:88:cc:28:a0:fc:80:5f:42:b1:93:17:
be:e6:d3:4f:d4:4d:22:25:b1:b6:b6:31:31:df:d3:
f7:9d:84:ba:b1:78:45:19:ac:e3:2c:12:85:ef:89:
3c:57:d8:c2:26:fa:11:bd:dd:c7:a3:7a:79:c9:73:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D5:6D:CB:AD:A5:09:B0:17:82:CE:96:8B:37:12:E4:6F:86:21:15
X509v3 Authority Key Identifier:
keyid:60:76:C5:13:9D:4C:CF:DE:BC:A4:4A:14:BD:B7:31:68:88:FA:63:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHbFE51Mz968pEoUvbcxaIj6Y0Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148488/5D26834A838F11EAB7031862C4F9AE02/YHbFE51Mz968pEoUvbcxaIj6Y0Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:21:dd:63:21:76:30:44:0e:fd:f0:46:73:79:b0:2d:03:47:
af:41:d7:f8:33:f4:57:ea:a9:08:41:b6:fa:b8:14:b7:62:f5:
57:83:b2:62:f4:1c:3e:5e:a0:13:63:cd:ed:a4:5b:f2:27:a6:
83:ba:28:34:6e:ee:61:4e:7d:60:c3:44:ca:d1:68:f8:00:0e:
66:4c:1d:8a:d6:d6:a6:0b:6c:af:3f:a6:51:98:76:78:a4:e0:
6e:fe:a0:0f:0a:ab:aa:7f:0a:92:05:dd:d6:fc:81:c4:24:a5:
5d:a7:94:02:54:00:6e:d4:5a:e4:63:4f:f6:b8:d2:5f:d8:c3:
40:b8:c0:1c:7d:6a:d9:0d:65:b0:d2:cd:ce:e9:17:3a:66:74:
be:62:a7:21:51:9d:e0:cf:5c:2a:f2:7c:92:fa:e3:69:5f:c1:
e7:a4:5d:68:42:08:9b:89:72:26:aa:a7:3a:9f:5c:c9:cc:f2:
65:63:76:53:0d:85:6d:41:0d:5a:27:f9:06:1e:29:86:e4:3a:
34:66:b3:4f:26:36:01:71:1c:f3:4f:65:ac:ee:cb:7c:2b:2a:
f7:4a:92:ce:5f:dd:df:06:aa:f4:9d:92:f1:24:6c:fc:6a:bd:
7b:56:32:da:05:3a:06:47:7d:42:1e:68:f3:47:04:21:a9:b0:
43:16:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:30:38 2026 by rpki-client