This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
File: y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft (raw, json)
Hash identifier: HeZ9Jq62S+q5QiKKN8NdPbXh57itZhIPBP4/Ajr8MpE=
Subject key identifier: 53:6D:1B:9D:69:33:D9:16:DC:6E:F2:79:2F:9E:96:AF:EF:B2:50:83
Authority key identifier: CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
Certificate issuer: /CN=A9159FAF/serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
Certificate serial: 01BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
Manifest number: 01B3
Signing time: Sun 25 Jan 2026 02:33:32 +0000
Manifest this update: Sun 25 Jan 2026 02:33:31 +0000
Manifest next update: Sun 01 Feb 2026 02:33:31 +0000
Files and hashes: 1: y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl (hash: H258pjduvBGbufZYtepJ98IrDCfPx/5McsM11CgFjnA=)
2: A910F37297CE11F0885B0A30C4F9AE02.roa (hash: PlR30ksHSNfLp/gWtvUHS9sP0PqXQBRKPusZSoRc4ts=)
3: B752E03A97CE11F0ADE43030C4F9AE02.roa (hash: fA7kfQVBTBKrtEPGAYiNkI953mdLopFQC3a6EUyWltk=)
4: 6A0C1182CA9D11F084B0E810C4F9AE02.roa (hash: ZgibkZw6KFun5X8zhtn1GD/qxM6O7UKHr3rrMpoNNTw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl
rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159FAF, serialNumber=CBEC6F183905487521C7947B4F7BFD6CB78DA479
Validity
Not Before: Jan 25 02:33:31 2026 GMT
Not After : Feb 1 02:33:31 2026 GMT
Subject: CN=697580fb-7c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a0:5a:ac:80:8b:98:52:06:4b:19:93:40:b7:
41:d9:a0:7c:6c:96:74:da:9c:b3:ab:0c:51:ac:8b:
24:b8:9a:f4:f6:f3:b3:bb:2e:4b:f8:ed:8b:1d:cd:
aa:02:d0:6d:78:90:7c:c7:4b:5b:86:9c:70:37:ed:
ee:4c:9a:b4:fd:b8:48:9f:8f:a6:0a:43:62:14:52:
34:f5:6f:e9:0a:68:ce:86:d0:d8:41:95:f5:7d:16:
c9:d4:da:d1:34:62:a4:88:be:b3:55:0f:b4:ac:07:
40:a2:99:15:0c:ee:ce:ab:e9:52:7f:52:e8:4d:45:
68:a4:4a:60:e1:66:df:60:dc:1a:9a:2f:81:d4:0d:
5c:4a:52:6b:97:b5:5d:53:b6:48:21:4a:72:00:22:
2d:26:05:a8:68:f0:44:e3:5d:13:32:6c:6b:2b:72:
72:ed:2b:5d:bb:f3:04:6e:97:db:4d:92:72:0e:14:
78:57:5d:28:ff:5b:6d:11:ed:d7:f0:5b:3e:d5:35:
5a:6a:82:3e:c2:c4:2b:6a:fb:ed:d6:15:7e:28:e4:
8d:08:c9:e4:1c:33:47:e9:07:45:b3:43:9d:bc:88:
85:87:9f:ee:db:f8:6d:df:6c:84:79:27:cc:f4:94:
b9:6a:19:f6:27:a0:de:a3:8a:49:45:f5:ee:b8:11:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6D:1B:9D:69:33:D9:16:DC:6E:F2:79:2F:9E:96:AF:EF:B2:50:83
X509v3 Authority Key Identifier:
keyid:CB:EC:6F:18:39:05:48:75:21:C7:94:7B:4F:7B:FD:6C:B7:8D:A4:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-xvGDkFSHUhx5R7T3v9bLeNpHk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159FAF/129575C46E4211EEAB4C9C6CC4F9AE02/y-xvGDkFSHUhx5R7T3v9bLeNpHk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2e:fa:c4:cc:2f:f6:93:38:d3:07:c8:f3:45:37:8a:10:ed:
01:5b:3a:23:72:64:24:a1:67:ae:8b:39:36:4f:16:91:7b:90:
8d:b7:b7:81:a9:8d:dc:e6:65:bc:61:d8:e4:81:8b:f1:30:27:
ab:ba:8f:d3:11:a2:10:6c:ed:8e:1e:d5:66:cc:d2:64:60:28:
a5:bc:6b:8e:67:4e:10:8a:4e:85:6c:89:d0:6e:5c:de:de:d0:
d8:be:97:dc:59:27:07:81:06:8e:ad:0f:28:5b:6e:7b:5f:53:
c2:b1:5a:3b:ae:3b:c8:20:8f:84:c3:8e:51:85:1c:7b:26:59:
0d:77:b8:c1:c3:5f:7a:9d:97:93:7f:6f:6c:95:09:f4:c4:ac:
0e:d5:71:72:66:bc:5c:fe:47:79:27:f1:e2:cb:f0:4a:b9:61:
98:d6:e3:67:7e:23:c3:98:6e:9b:02:3a:2f:ef:84:83:e8:73:
dd:82:2d:c6:1f:1d:d1:08:c9:37:03:f0:6e:5b:4b:66:cf:a9:
76:94:b0:3d:bd:7c:1e:9b:96:f8:1d:a5:8f:ea:c7:39:08:e4:
0d:77:19:70:e9:e7:26:2b:c6:a3:c7:e9:be:98:d7:e5:86:cf:
6a:a9:e4:6b:96:78:59:d1:43:b9:08:79:4f:8f:e8:33:a8:cc:
a6:21:ed:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:47 2026 by rpki-client