This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
File: y539cqjfUOBlAEN4BraiAY7Mvf0.mft (raw, json)
Hash identifier: K8Pk8BbF0PEpr3CW7rFazK5ie0lET+sWKwUYiVz3fpg=
Subject key identifier: C1:DE:B7:8C:6B:56:06:11:C1:A2:BC:EE:8B:89:17:7D:BA:7C:79:8C
Authority key identifier: CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
Certificate issuer: /CN=A9150733/serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Certificate serial: 0BA5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
Manifest number: 0D7C
Signing time: Sat 24 Jan 2026 18:33:40 +0000
Manifest this update: Sat 24 Jan 2026 18:33:40 +0000
Manifest next update: Sat 31 Jan 2026 18:33:40 +0000
Files and hashes: 1: y539cqjfUOBlAEN4BraiAY7Mvf0.crl (hash: tZz+Wn8i67OxdHheWhW8aqlV0ffCZoWIp0GsiYnReYI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 18:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2981 (0xba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150733, serialNumber=CB9DFD72A8DF50E06500437806B6A2018ECCBDFD
Validity
Not Before: Jan 24 18:33:40 2026 GMT
Not After : Jan 31 18:33:40 2026 GMT
Subject: CN=69751084-0794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:de:dc:b9:7b:f1:fd:88:f1:71:9f:e6:52:
18:7e:ad:bc:51:51:73:a7:da:3a:32:ae:90:2f:0c:
26:89:17:64:14:de:2c:d6:75:2d:6f:05:b2:67:93:
1d:2a:ce:39:ab:59:7e:52:d9:da:8a:d7:d9:be:7e:
0f:d5:2e:8e:16:8d:64:f3:d8:a6:be:35:e8:bf:2f:
1c:e9:5d:d2:d2:19:25:44:96:82:c5:2c:10:47:3f:
36:4d:41:61:bf:d1:aa:73:8e:5c:f2:5d:ca:ae:01:
68:11:5f:f3:62:e9:48:ec:5a:c0:0f:1d:89:c7:34:
2f:bd:78:7b:3f:0e:e3:02:47:54:d3:64:99:28:6d:
36:47:69:4a:2c:8d:81:fa:3e:7a:8a:77:93:64:38:
34:3a:d0:91:30:cb:70:96:24:c2:8c:04:6c:32:e0:
54:9c:a6:19:58:41:5a:27:a9:7d:c8:a1:1f:d9:e6:
2a:56:c7:83:65:95:b0:f0:62:43:6c:ed:65:da:73:
ef:36:26:81:81:6c:e5:ac:d7:8e:2a:dd:bf:d1:60:
c6:b5:3e:d2:1d:0a:b9:43:a2:a9:2d:1e:83:17:df:
3c:88:ae:4c:20:50:85:78:b0:98:f7:c4:ed:7b:9e:
71:34:1a:0e:33:c9:64:6b:27:ca:d3:b4:9f:c6:77:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DE:B7:8C:6B:56:06:11:C1:A2:BC:EE:8B:89:17:7D:BA:7C:79:8C
X509v3 Authority Key Identifier:
keyid:CB:9D:FD:72:A8:DF:50:E0:65:00:43:78:06:B6:A2:01:8E:CC:BD:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y539cqjfUOBlAEN4BraiAY7Mvf0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150733/217868CE3DB511EAA6491312C4F9AE02/y539cqjfUOBlAEN4BraiAY7Mvf0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:c5:ea:c7:80:d9:6f:b6:2c:80:74:2d:ca:6f:30:71:d3:36:
3c:1a:d8:0d:2a:92:25:ce:e1:f2:a6:3f:05:f7:55:3d:6f:0e:
d2:80:cf:e2:4d:c5:8b:04:5f:e7:63:aa:2b:6a:b6:d3:92:e8:
7e:fd:89:57:d8:29:b3:52:bf:4f:3c:cf:d5:f5:8d:98:07:19:
25:5e:f3:73:6d:c2:e8:44:0d:01:ec:6b:a9:cf:99:dc:96:43:
71:0d:80:d8:08:fb:2e:d4:f6:3a:07:5e:9e:c5:52:17:7d:cb:
d2:ab:04:ec:5f:15:12:24:25:b5:a1:0f:42:28:c0:13:8d:95:
bf:67:94:e5:fa:8e:62:51:5e:61:ff:78:1f:80:2f:f4:66:c6:
3d:ad:e7:cf:8f:13:b6:37:da:a4:fb:0b:f3:ee:36:7f:37:53:
1e:d5:ca:af:44:d6:7a:d7:3e:9c:bd:7e:b5:97:35:b0:26:fa:
89:e7:79:26:c4:b5:30:df:f7:d0:12:f8:91:fc:1d:70:20:d0:
2a:1a:5a:f4:da:c7:1e:4c:30:77:fe:97:78:89:c6:fa:da:af:
dd:2b:4e:2a:4a:1e:88:1f:28:b2:45:6e:23:a1:16:4b:53:46:
64:b8:18:78:7b:99:bc:53:64:c3:0e:56:3f:ea:3e:d1:53:e3:
cc:45:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:58 2026 by rpki-client