This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
File: vY9TgeGI5FgPskcsJxoFQp4tXCI.mft (raw, json)
Hash identifier: C5kx+KXLTA7UvoK0dXr0g5Ob1Y5g7wfB2fZLj8SY07c=
Subject key identifier: 5F:06:12:7A:4D:AB:BD:9A:A5:7A:CB:1B:B7:4A:57:06:10:07:07:2A
Authority key identifier: BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22
Certificate issuer: /CN=A915D66D/serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
Certificate serial: 1B78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
Manifest number: 1B6D
Signing time: Sat 24 Jan 2026 16:03:29 +0000
Manifest this update: Sat 24 Jan 2026 16:03:28 +0000
Manifest next update: Sat 31 Jan 2026 16:03:28 +0000
Files and hashes: 1: vY9TgeGI5FgPskcsJxoFQp4tXCI.crl (hash: WRRSYGkmUo3sYmnQvWYzdyigyHAQFKyXMcjDLBJR20o=)
2: 59029A32233A11E78D48837AC4F9AE02.roa (hash: XfYeKxfatX6id5bBv2XHc88RkA9A8XtPbM07HmC0bY4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl
rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7032 (0x1b78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D66D, serialNumber=BD8F5381E188E4580FB2472C271A05429E2D5C22
Validity
Not Before: Jan 24 16:03:28 2026 GMT
Not After : Jan 31 16:03:28 2026 GMT
Subject: CN=6974ed51-02cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:07:56:8e:06:96:7b:08:39:71:c3:81:26:
70:a3:e6:a2:79:e3:38:de:81:4d:6d:3a:7f:22:49:
f9:50:4e:9e:3a:86:05:da:ca:f6:0c:0b:c1:e6:d3:
b5:c7:68:59:34:8a:0a:85:04:6a:a7:4b:13:6a:da:
68:c7:74:48:e7:2d:fe:58:e0:92:97:4c:8b:2a:36:
a3:a4:d7:9e:c1:f6:2b:e9:95:03:44:46:68:fd:c5:
d7:fa:17:e7:88:ca:7e:71:8f:74:35:e4:dc:8c:05:
ee:30:da:d6:9a:00:86:9e:8a:ae:f0:bd:74:a3:a6:
77:8e:9b:10:b9:53:ba:ed:41:35:55:c3:52:c1:98:
a3:07:7b:ce:3f:dc:a7:b3:17:5e:18:01:7d:6e:b1:
0f:7b:b6:3b:be:bc:7d:9d:03:09:a5:d3:bf:ae:49:
8b:c6:1a:15:aa:c6:3e:62:72:ca:4a:de:09:86:b7:
39:bf:4a:b7:70:13:c5:9d:bf:dd:65:4c:8c:f0:1e:
85:c4:ba:f7:7e:3a:f0:eb:41:5b:49:6e:ba:ef:38:
12:08:72:1b:dd:bd:7b:67:64:d6:c7:ef:45:38:c1:
e0:99:88:af:fa:da:dd:82:7d:4a:32:97:30:46:94:
5d:7f:8d:9e:a5:8b:48:2c:27:a9:81:01:94:90:b1:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:06:12:7A:4D:AB:BD:9A:A5:7A:CB:1B:B7:4A:57:06:10:07:07:2A
X509v3 Authority Key Identifier:
keyid:BD:8F:53:81:E1:88:E4:58:0F:B2:47:2C:27:1A:05:42:9E:2D:5C:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vY9TgeGI5FgPskcsJxoFQp4tXCI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D66D/1EB09254233911E7A06B2579C4F9AE02/vY9TgeGI5FgPskcsJxoFQp4tXCI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:bd:5c:d1:28:84:59:b8:c5:d1:aa:4e:53:5f:3a:1d:31:23:
88:80:70:c9:79:e2:4d:b6:3c:97:dd:49:ac:44:a0:5a:5e:b7:
98:ca:18:57:1a:7a:f7:60:87:04:c2:7d:bd:c0:6f:c1:ba:58:
5f:2c:cf:8a:40:8f:79:33:fd:f5:58:c8:0d:52:84:2f:14:35:
9f:d6:c1:4b:bb:41:1d:8b:1b:99:63:ab:79:ed:ec:0c:ce:71:
0d:0b:4d:4a:d9:39:fe:b4:8e:76:eb:41:ef:6c:e1:b1:d0:6c:
de:ed:fb:c4:f6:61:b4:bb:77:05:e1:81:82:3c:57:68:ab:00:
61:d6:bb:80:df:50:49:eb:48:bf:fd:8e:af:34:b5:4a:d3:a1:
b1:ef:d8:d3:73:6c:02:e7:e8:a5:03:7d:28:0c:b2:4a:3d:e5:
ae:db:0d:63:9f:9c:03:00:e6:e1:73:d0:b1:f8:7d:e9:22:b0:
48:5e:33:31:20:fb:83:98:a8:eb:09:04:02:b4:69:7c:6a:4c:
7e:a8:91:bf:8e:13:da:ea:54:2d:48:ba:e1:29:34:e4:cf:67:
86:5a:90:25:eb:97:6c:2d:c9:31:df:56:75:7c:4d:ba:56:5b:
d8:b2:15:2a:41:78:16:1f:72:5a:06:a6:e8:d1:97:8d:2d:89:
f7:c9:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:14:47 2026 by rpki-client