This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
File: s1py5W8JAsfhuNgSxdg2VBHdox0.mft (raw, json)
Hash identifier: CaXYKIgY8mExuwS82EZq6LNK4nQegsRyw/QEHL71bRY=
Subject key identifier: 1F:B5:2C:B9:6C:59:92:46:3A:F2:09:20:89:CD:71:0C:76:4A:2F:70
Authority key identifier: B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D
Certificate issuer: /CN=A9150B91/serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
Certificate serial: 1546
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
Manifest number: 153C
Signing time: Sat 24 Jan 2026 16:32:51 +0000
Manifest this update: Sat 24 Jan 2026 16:32:50 +0000
Manifest next update: Sat 31 Jan 2026 16:32:50 +0000
Files and hashes: 1: s1py5W8JAsfhuNgSxdg2VBHdox0.crl (hash: FBqKsmZeD6uiCj+9aLOLo18ZQDdJ9dD5sALsyB4A2ME=)
2: 4674A74E5DB211E8A30DF983C4F9AE02.roa (hash: N2bOeXWWMqXx3Cr2oJVAhS+4yD+JJsp3ikRjUaNFufQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl
rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5446 (0x1546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150B91, serialNumber=B35A72E56F0902C7E1B8D812C5D8365411DDA31D
Validity
Not Before: Jan 24 16:32:50 2026 GMT
Not After : Jan 31 16:32:50 2026 GMT
Subject: CN=6974f433-2fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:c5:f0:f8:1d:be:d1:e7:4a:53:7d:c4:e1:
f8:f2:1b:4c:52:0a:2f:4f:a7:c7:b2:a3:f9:87:9d:
dc:16:ad:82:10:84:71:32:5f:81:18:6f:88:26:d0:
24:d3:ae:13:93:84:f7:3b:ef:6b:17:42:33:79:d8:
00:6e:33:d9:b3:c7:53:17:ba:31:5e:a0:14:e8:44:
4a:37:9d:3a:8f:41:fd:26:0d:c6:56:e3:64:40:22:
8e:de:00:5a:ee:2f:f5:86:80:fc:92:b3:5b:51:3b:
5e:4a:77:cd:91:6b:70:57:02:15:d3:cc:71:45:b6:
27:7e:07:7e:2f:f7:9f:ca:d9:76:6a:71:d1:34:42:
a1:6c:5e:d4:d6:d8:58:2d:67:d6:47:f4:48:fd:21:
96:86:35:9e:60:06:87:dc:e5:84:30:10:d4:2d:68:
f0:5b:19:54:4f:ea:d4:27:f6:39:39:41:1d:14:97:
0a:75:d0:f1:21:2d:00:8a:44:3e:2c:d4:66:eb:3c:
01:34:e6:f1:69:f9:41:53:89:68:5a:89:9e:2d:d7:
ca:5c:b5:91:60:f1:ab:47:53:2f:77:7b:39:02:54:
d5:4a:c3:dd:7b:a5:6f:50:13:ab:66:94:22:dd:9e:
d6:b1:f1:22:73:c3:19:87:b6:d0:25:31:b1:3d:a0:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B5:2C:B9:6C:59:92:46:3A:F2:09:20:89:CD:71:0C:76:4A:2F:70
X509v3 Authority Key Identifier:
keyid:B3:5A:72:E5:6F:09:02:C7:E1:B8:D8:12:C5:D8:36:54:11:DD:A3:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s1py5W8JAsfhuNgSxdg2VBHdox0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150B91/76304A785A9311E8B7C2161FC4F9AE02/s1py5W8JAsfhuNgSxdg2VBHdox0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:a8:88:46:98:ea:31:3b:f7:c8:5e:af:d8:bc:77:68:56:d4:
af:b9:64:e1:0b:cc:d3:04:68:53:91:64:3b:38:d3:b1:6f:5f:
d3:c2:b3:c3:3f:ee:e4:00:92:51:1e:25:8e:0c:4e:37:80:71:
3d:64:4b:3e:2b:72:3a:ca:63:b8:16:7f:e1:b6:1c:40:34:4d:
f3:e1:2d:e0:67:f8:da:48:ac:42:f0:75:22:62:df:37:6d:b4:
5a:86:e4:33:a5:c0:49:43:7f:70:ad:f6:b1:a2:d2:d8:30:af:
f7:2d:aa:c6:64:ce:bb:0e:94:b7:80:5e:c0:98:51:70:43:1b:
1f:fa:a7:9e:b2:85:b2:ac:9c:73:37:71:fe:ed:db:98:22:ef:
41:0a:77:2b:08:a0:f7:e6:ff:f1:00:bd:aa:95:5d:be:65:e1:
f5:7d:86:d5:1b:50:9b:ed:1a:74:98:ac:28:50:0c:5f:0d:8d:
95:d2:45:2e:7f:c1:87:cb:9c:16:3d:a0:03:bc:fa:7f:b7:5f:
a4:f8:27:f6:5c:f9:b0:ec:e3:9d:0f:fa:f3:ac:1b:14:09:bd:
10:a8:39:3d:08:53:6d:e0:07:3d:7d:f6:84:b7:2f:56:de:ee:
d4:35:eb:01:1c:5b:ed:f3:b8:ff:3d:89:bf:5a:e7:a2:ec:f7:
63:fa:36:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:34:29 2026 by rpki-client