This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
File: YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft (raw, json)
Hash identifier: 4uxLrmBXDD7deHXoG1WUIjrZ+JyLHDvJciyxSfp/uO0=
Subject key identifier: 03:3D:43:F8:79:BD:F9:13:52:1F:AF:3A:AC:E5:BF:D2:B1:1A:DE:45
Authority key identifier: 61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
Certificate issuer: /CN=A914F7F0/serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
Manifest number: 0115
Signing time: Sun 25 Jan 2026 04:06:53 +0000
Manifest this update: Sun 25 Jan 2026 04:06:53 +0000
Manifest next update: Sun 01 Feb 2026 04:06:53 +0000
Files and hashes: 1: YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl (hash: TebrY3XCx5Fcb9SUG4EeZKwojEglClOomXV1ytaUGVE=)
2: 9A826D9059D611EF814F004DC4F9AE02.roa (hash: 3aT0muq2AP76fHDV6M45dsCuBJOlUCEA5kwKeP8ww7o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914F7F0, serialNumber=611CB556C87BC049A5A43EB1F297107EFF1B7940
Validity
Not Before: Jan 25 04:06:53 2026 GMT
Not After : Feb 1 04:06:53 2026 GMT
Subject: CN=697596dd-8713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:88:a6:54:d5:f8:47:04:3a:2c:85:2d:19:
75:87:c9:a5:dd:39:c8:9b:9f:fa:3e:d6:3e:d7:af:
6f:bb:ec:e3:4f:4a:e6:ca:e6:04:b1:82:bb:b3:be:
b1:2c:83:e2:89:b0:e3:02:9f:96:06:a1:13:dd:9f:
0e:ee:c1:7f:f6:7f:38:3c:8d:25:d2:be:24:e6:f8:
4d:a9:53:4a:bc:67:a1:9e:3e:ec:67:a9:ad:4a:cc:
ad:53:39:b3:fb:24:ab:25:ff:da:d4:d2:22:91:01:
b8:de:68:0b:a2:56:0c:63:38:27:aa:d3:8a:d2:3c:
f5:49:13:e2:66:9c:b0:ea:48:9b:05:64:f2:1d:f4:
b4:e4:02:a9:19:c8:f1:1f:10:ba:34:c9:d5:9c:55:
76:7e:a0:9c:1f:4e:79:57:8e:7a:a5:91:09:2d:80:
0f:20:17:d8:e9:93:3a:f0:28:60:43:77:02:8b:48:
90:57:7f:9a:c8:4c:9b:75:e3:99:87:7d:36:cd:f8:
99:aa:1f:21:74:56:01:46:58:da:52:a8:d4:80:2e:
98:91:b9:fb:18:b3:2b:7d:1d:07:85:aa:34:9a:1d:
1e:74:79:13:01:b4:cb:fd:47:1f:a5:60:42:3c:f3:
33:d9:ea:3d:54:e7:50:e3:f7:18:40:25:cf:46:ba:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3D:43:F8:79:BD:F9:13:52:1F:AF:3A:AC:E5:BF:D2:B1:1A:DE:45
X509v3 Authority Key Identifier:
keyid:61:1C:B5:56:C8:7B:C0:49:A5:A4:3E:B1:F2:97:10:7E:FF:1B:79:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YRy1Vsh7wEmlpD6x8pcQfv8beUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F7F0/C74EB69A59D511EF83D28B4BC4F9AE02/YRy1Vsh7wEmlpD6x8pcQfv8beUA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c1:fd:2d:c1:f2:e8:87:94:46:d1:3e:e6:f2:8b:64:f1:13:
4a:11:f6:8c:11:37:63:19:6b:9a:e4:b6:22:0b:19:9a:c0:61:
51:bb:ac:64:3a:ed:4d:88:a3:31:2e:53:5c:88:9c:e2:02:d6:
94:1d:b3:bb:39:0f:fc:0f:b0:0b:19:30:d0:24:10:84:75:52:
6a:ee:e4:50:1d:1a:3a:9d:b2:47:c4:90:64:37:c1:59:a2:5e:
4e:c1:bb:c4:72:3d:20:3a:f6:f6:fb:52:22:8c:00:8a:c6:bd:
dd:91:5c:cb:99:41:85:be:59:9b:a4:68:a4:ff:9a:b4:ad:4b:
5c:93:2a:9d:46:79:6a:1c:a7:05:4e:71:1b:49:b1:81:92:71:
e3:b4:3a:0c:1c:70:9f:3a:09:78:d1:8e:19:17:2a:29:89:20:
1a:64:f8:89:74:53:f6:26:6b:e3:39:53:7f:47:a8:ca:ae:4e:
7f:41:c3:a8:ae:51:82:ef:3c:77:bc:ba:30:8f:be:9a:c8:21:
92:bb:bf:46:a8:bc:97:c2:78:60:9d:b1:0c:79:70:18:d4:66:
78:9b:cc:59:eb:b2:c6:b5:47:82:5f:6b:4d:54:d2:3f:87:61:
8b:46:fe:b9:db:81:9f:c3:fa:c0:a7:cd:07:bd:3c:32:01:e3:
6e:0b:08:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:15 2026 by rpki-client