This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
File: ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft (raw, json)
Hash identifier: qrX9dQbQG6qfn8zgmypg04xKrIxP8eYNhFx1NT5K9no=
Subject key identifier: D7:64:EB:CD:E4:04:9F:A8:8A:5D:B4:9E:8D:0F:F5:9E:9B:D9:13:5A
Authority key identifier: C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
Certificate issuer: /CN=A91597E8/serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Certificate serial: 3514
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
Manifest number: 350E
Signing time: Sat 24 Jan 2026 14:41:09 +0000
Manifest this update: Sat 24 Jan 2026 14:41:09 +0000
Manifest next update: Sat 31 Jan 2026 14:41:09 +0000
Files and hashes: 1: ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl (hash: 32PkYVMBzAwuHtfntkBzsu2MYwkpkeCIURQ0vezyjWA=)
2: 4821776AD9A211F092913C6268D3641D.roa (hash: cKf3TaoYAlPwDB+K3qIkWpJNLCSUjbzcobiZY86mFj8=)
3: 5D8B2B06D90B11F0A960BEC67CD3641D.roa (hash: azYdkvf28Hm+el5cCXE3/Bju5Cb90/2fU/85uVO1sCM=)
4: 4731AAD2D9A211F092913C6268D3641D.roa (hash: 9I/aQr6sgxc6dIwQzYUlc8auTinO+9HPObIlo6LbZHs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13588 (0x3514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91597E8, serialNumber=C9C28F990B627412C97C2DCEC7C906E61AD325AC
Validity
Not Before: Jan 24 14:41:09 2026 GMT
Not After : Jan 31 14:41:09 2026 GMT
Subject: CN=6974da05-35b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:2d:a6:55:3e:82:4b:c0:fd:55:68:1d:63:
12:53:ed:88:fc:91:93:c1:53:ba:3a:58:a2:03:e3:
81:13:ea:07:50:bf:d8:3f:ee:bf:06:93:9a:4e:32:
8c:c0:f8:98:f8:fa:6c:5b:34:50:dd:65:4f:c9:8d:
dd:f6:64:6f:19:4a:55:a0:15:e4:46:5c:b4:ca:4a:
ef:77:ca:d7:93:f1:7d:87:c2:ad:51:73:71:17:c1:
b8:31:c7:71:c5:59:5c:1d:5b:99:10:0c:e6:20:47:
b1:bc:5e:6e:21:8c:2d:f8:8a:f1:31:81:14:03:40:
4f:f1:01:29:13:e4:91:0a:4b:5e:17:43:d2:de:8a:
c5:5d:95:51:b6:77:7d:69:0b:3a:86:3e:a7:60:33:
53:6e:72:6b:02:d5:d3:ff:6a:48:38:b6:5e:6a:26:
5e:b7:21:e5:51:eb:32:be:13:2c:f7:5b:08:08:74:
35:58:9e:19:5c:17:9f:5a:e0:c3:59:30:70:fd:f8:
5e:5d:20:27:fd:6b:af:22:6a:cf:65:5b:7f:e2:b2:
95:72:e1:26:4c:4d:3d:7f:2a:d2:dd:e2:64:b0:5a:
ab:9f:04:e0:43:4e:c1:30:5a:f7:f2:b3:da:be:9b:
3e:4d:5c:b9:2d:63:14:4d:b5:b7:41:25:60:4f:59:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:64:EB:CD:E4:04:9F:A8:8A:5D:B4:9E:8D:0F:F5:9E:9B:D9:13:5A
X509v3 Authority Key Identifier:
keyid:C9:C2:8F:99:0B:62:74:12:C9:7C:2D:CE:C7:C9:06:E6:1A:D3:25:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91597E8/7A0FE7FA1D9211E2B5BC74F508B02CD2/ycKPmQtidBLJfC3Ox8kG5hrTJaw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:ea:e3:86:f0:86:4b:df:f6:2f:0b:da:f2:fa:8a:18:31:34:
7f:7a:fc:13:b3:39:1c:c4:fc:7d:0c:4c:ef:f6:51:2e:94:77:
b5:29:2c:7c:21:cb:58:b1:f2:2c:a7:6e:f6:75:fa:56:01:2e:
1c:47:69:0b:bc:28:5d:bd:b5:33:a1:c0:58:12:41:fe:bf:e9:
59:ed:ba:98:92:eb:b9:80:22:54:a4:7d:61:26:67:13:05:1e:
9e:53:d4:18:ca:a7:07:35:01:b4:39:47:8c:5b:23:32:91:54:
e7:3e:79:1d:33:c3:20:5d:f3:56:db:ab:87:58:be:9f:c3:60:
f9:06:d6:23:2a:af:95:e2:45:b6:82:76:29:ea:62:90:74:4b:
36:bc:a4:83:a1:f0:a8:cc:4a:8c:07:5e:e5:d0:ca:33:5b:9f:
1e:52:e7:be:9b:e1:7a:d5:a4:e5:4e:62:7a:17:40:b0:44:ec:
17:c9:bb:c3:4e:fe:4e:a5:16:28:7d:18:88:4e:cc:d4:37:bf:
5a:8d:d0:aa:3b:9a:0a:69:34:3d:de:87:a0:7b:e8:7d:a7:56:
12:1f:d2:4a:d2:a5:e8:c3:64:bb:8f:42:0f:3b:02:40:1b:4e:
b2:eb:ec:34:13:d0:b0:04:0d:43:d4:ec:1c:2b:f5:3a:33:2c:
94:05:45:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:35:58 2026 by rpki-client