This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft File: yyk1oUeLT4tEYxANsulbBlRAZ3M.mft (raw, json) Hash identifier: EBxkAjbhROiADbCTjsomo07M2prbOOb4tFwfKoQLHgk= Subject key identifier: A0:FB:16:62:6C:2F:19:AF:79:33:56:A3:1E:7D:0E:45:1C:C4:F6:0E Authority key identifier: CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 Certificate issuer: /CN=A9156F14/serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft Manifest number: 013A Signing time: Sun 25 Jan 2026 03:44:08 +0000 Manifest this update: Sun 25 Jan 2026 03:44:07 +0000 Manifest next update: Sun 01 Feb 2026 03:44:07 +0000 Files and hashes: 1: yyk1oUeLT4tEYxANsulbBlRAZ3M.crl (hash: GiXBsRQQkm31Zg/A77rlwlIvQE+zvi/B3XcPx0E3xJg=) 2: 680D797023E611EF8165F17BC4F9AE02.roa (hash: oa8frv8vlg1vBn275l50HRx0PnZyi1FiU/lJjWPqNdo=) 3: 0A7FC90CEED311F096B1F0A4736F56BC.roa (hash: MU+74pbROGh0G5SQ3mKmPm976frHJpyRzJDnMyrQKEw=) 4: 75E10ADA23E611EF92A9097CC4F9AE02.roa (hash: iGJZ5nKtqdpr8XQ5xRp8ABn+d8XHdqoNNsqJjwgQg3Y=) 5: 76601C1C23E611EF92A9097CC4F9AE02.roa (hash: bUpgZDyaaNx2o4Iq2csQK5MMpOoGsf0d7wS0X/AlYLQ=) 6: D14D6710936711EFB8A6457CC4F9AE02.roa (hash: sopaYIQ7VXvlTBIzsDAOnSetWGJ3UTk1u9wD33/qnLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156F14, serialNumber=CB2935A1478B4F8B4463100DB2E95B0654406773 Validity Not Before: Jan 25 03:44:07 2026 GMT Not After : Feb 1 03:44:07 2026 GMT Subject: CN=69759187-d5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:28:e7:3e:75:de:68:e3:fd:f4:4d:9e:51:25: 15:28:74:b6:c6:b0:f6:15:d7:86:df:0d:a1:4e:a7: bb:9c:37:a4:0a:d8:4f:fb:f0:21:fc:f4:f3:b9:e5: 72:e3:da:e8:55:7e:e8:9d:a1:c9:30:85:4e:ea:17: b3:7a:d1:7f:c8:29:84:5c:aa:82:e3:f1:29:0f:81: db:c3:ea:68:1b:92:5d:d9:ed:91:d7:ad:6b:36:4d: f0:47:d6:8c:89:a9:1f:86:c9:a3:42:db:f8:3d:41: 61:10:83:bf:33:68:8f:7a:a3:2d:7d:9b:b0:52:b3: 05:b3:ba:5e:b2:40:7b:3c:0d:18:21:6a:bd:92:db: 93:26:16:71:21:f4:cd:0c:25:a8:a5:4d:2d:f7:a3: c2:9d:ce:ec:40:70:00:c8:e1:15:3e:0e:d8:29:6e: fb:9c:e7:c4:97:46:08:85:fd:d4:8b:c6:4a:eb:77: 41:75:88:d1:0c:85:f1:ee:44:75:76:b2:3e:40:2c: 64:99:74:72:ef:98:49:60:eb:da:2a:09:42:19:db: 96:63:2c:94:77:47:83:23:fe:93:a4:a3:fd:c4:4b: b3:5c:b5:6f:a6:a9:fd:91:b0:6b:93:42:46:ee:19: d0:da:72:9d:7c:e8:73:64:8a:89:b0:76:e4:fb:c5: 4c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FB:16:62:6C:2F:19:AF:79:33:56:A3:1E:7D:0E:45:1C:C4:F6:0E X509v3 Authority Key Identifier: keyid:CB:29:35:A1:47:8B:4F:8B:44:63:10:0D:B2:E9:5B:06:54:40:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyk1oUeLT4tEYxANsulbBlRAZ3M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156F14/3F1288621FDB11EFA751F747C4F9AE02/yyk1oUeLT4tEYxANsulbBlRAZ3M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:cd:39:79:6d:4f:09:cf:9e:aa:a7:1e:7d:65:5f:74:92:5d: 82:e1:c3:fd:85:e4:55:bb:cc:bd:e8:bf:aa:8f:54:c1:91:58: 39:91:dc:75:a2:be:eb:10:67:2b:76:df:7d:4c:4d:06:80:32: 85:3d:b8:11:1e:a6:6a:96:e2:86:0d:aa:58:c2:7b:54:05:4e: 5d:92:ad:77:79:52:3b:42:e6:64:37:2a:3e:d4:bb:ec:72:a3: 98:f8:4c:89:0f:8b:7c:99:4b:c5:ca:0d:18:d8:b9:43:7a:da: 3d:fd:4f:0e:8b:59:ed:4d:ed:61:9a:de:12:d2:ec:3c:51:35: e5:1e:49:bb:a3:b7:d1:1c:7e:b8:5c:7f:80:2d:51:b7:06:60: c7:7b:e0:fb:9c:89:e9:78:26:ee:2b:93:96:06:4e:c8:ed:e1: e9:bd:6a:02:d2:c3:fe:20:a5:98:c2:fc:79:63:bd:0b:85:96: 0c:25:32:20:d0:ee:72:7b:df:47:92:59:54:6f:a7:c6:d2:2a: f6:ff:cd:9f:56:6b:f2:18:b0:15:2b:50:c5:90:d8:98:7a:88: b8:39:0f:86:01:eb:77:3c:d4:cf:bb:43:6f:2c:b8:25:e4:1a: b2:20:f4:1a:0a:3d:18:7d:a4:3d:04:7b:bc:e2:c1:aa:cf:20: bc:94:fc:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZGMTQxMTAvBgNVBAUTKENCMjkzNUExNDc4QjRGOEI0NDYzMTAwREIyRTk1QjA2 NTQ0MDY3NzMwHhcNMjYwMTI1MDM0NDA3WhcNMjYwMjAxMDM0NDA3WjAYMRYwFAYD VQQDDA02OTc1OTE4Ny1kNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1CjnPnXeaOP99E2eUSUVKHS2xrD2FdeG3w2hTqe7nDekCthP+/Ah/PTzueVy 49roVX7onaHJMIVO6hezetF/yCmEXKqC4/EpD4Hbw+poG5Jd2e2R161rNk3wR9aM iakfhsmjQtv4PUFhEIO/M2iPeqMtfZuwUrMFs7peskB7PA0YIWq9ktuTJhZxIfTN DCWopU0t96PCnc7sQHAAyOEVPg7YKW77nOfEl0YIhf3Ui8ZK63dBdYjRDIXx7kR1 drI+QCxkmXRy75hJYOvaKglCGduWYyyUd0eDI/6TpKP9xEuzXLVvpqn9kbBrk0JG 7hnQ2nKdfOhzZIqJsHbk+8VMYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKD7FmJs LxmveTNWox59DkUcxPYOMB8GA1UdIwQYMBaAFMspNaFHi0+LRGMQDbLpWwZUQGdz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkYxNC8zRjEyODg2MjFG REIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0dEVZeEFOc3VsYkJsUkFa M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3l5azFvVWVMVDR0RVl4QU5zdWxiQmxSQVozTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkYxNC8zRjEyODg2MjFGREIxMUVGQTc1MUY3NDdDNEY5QUUwMi95eWsxb1VlTFQ0 dEVZeEFOc3VsYkJsUkFaM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDzTl5bU8Jz56qpx59ZV90kl2C4cP9heRVu8y96L+qj1TBkVg5kdx1 or7rEGcrdt99TE0GgDKFPbgRHqZqluKGDapYwntUBU5dkq13eVI7QuZkNyo+1Lvs cqOY+EyJD4t8mUvFyg0Y2LlDeto9/U8Oi1ntTe1hmt4S0uw8UTXlHkm7o7fRHH64 XH+ALVG3BmDHe+D7nInpeCbuK5OWBk7I7eHpvWoC0sP+IKWYwvx5Y70LhZYMJTIg 0O5ye99HkllUb6fG0ir2/82fVmvyGLAVK1DFkNiYeoi4OQ+GAet3PNTPu0NvLLgl 5BqyIPQaCj0YfaQ9BHu84sGqzyC8lPwF -----END CERTIFICATE-----Generated at Sun Jan 25 09:29:12 2026 by rpki-client