This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
File: YHa9C6TbeXpypo_v-b-1WMRDmLI.mft (raw, json)
Hash identifier: spwwNtVcctbhJ7Q6nPYutVWc6mE6YF5GjTS68Gyjagk=
Subject key identifier: 8E:BF:35:B0:1B:F9:AB:21:28:ED:56:18:D5:8F:04:F2:1B:64:85:36
Authority key identifier: 60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
Certificate issuer: /CN=A9162EE1/serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Certificate serial: 0499
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
Manifest number: 046F
Signing time: Sat 24 Jan 2026 23:30:28 +0000
Manifest this update: Sat 24 Jan 2026 23:30:27 +0000
Manifest next update: Sat 31 Jan 2026 23:30:27 +0000
Files and hashes: 1: YHa9C6TbeXpypo_v-b-1WMRDmLI.crl (hash: 3YT9gQd1U28e5cp7pTS8x5qMH2HgJLSSsgx7YFLhP5s=)
2: 844EFBDA766C11EF8CE33A86C4F9AE02.roa (hash: atopwMMKiv9hmzF2MWT9t/O+WABZDOgoXI2TZZKE0sM=)
3: B283BDAACF7C11F084EB1044C4F9AE02.roa (hash: WdQNREngzkkQGmItz4QAR4neKJoj1ZQOtux3fkTnadQ=)
4: 260D3330758A11EFAE7A8A39C4F9AE02.roa (hash: 8VvyEs0cT5gb0Pa9QyQkLFctUkO2J8xm2GTLEwroWxk=)
5: ED1A0478799811EF8437F77EC4F9AE02.roa (hash: cKCBs+iXK9mKTKUEcpQQ6Sz2FB2iRN0G07D7yQIwB0A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 23:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162EE1, serialNumber=6076BD0BA4DB797A72A68FEFF9BFB558C44398B2
Validity
Not Before: Jan 24 23:30:27 2026 GMT
Not After : Jan 31 23:30:27 2026 GMT
Subject: CN=69755613-5b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:5a:cb:8e:57:ac:cf:9c:61:d4:18:96:ef:
d0:08:ff:2e:f7:81:c5:da:61:7d:57:2f:83:71:8f:
79:54:e7:2b:e5:6c:b2:c0:f1:64:94:bc:fd:70:8b:
43:2b:82:3f:7f:8d:36:de:6d:d0:94:1a:ec:6f:3a:
ad:72:b8:fb:9a:a5:c5:64:75:db:72:1b:c7:0b:e4:
7b:a3:6f:24:95:ca:66:2f:21:fb:87:d5:df:74:de:
26:12:9c:e6:ed:dd:80:8f:8e:a3:53:e1:a9:60:b8:
f1:a3:3d:3f:20:a0:10:df:cd:37:6d:14:7f:2d:17:
86:be:ad:49:78:be:13:36:a2:0d:5b:93:b3:a5:ed:
ce:b8:c7:27:51:cc:80:b1:a1:6c:61:8c:36:d9:f6:
eb:1f:75:30:dd:54:9d:95:83:e7:db:35:b0:80:a6:
7e:43:08:64:83:3f:dc:36:2e:a1:48:14:2c:0f:5c:
98:2d:da:da:1a:5c:c4:08:2b:64:d5:77:2a:36:08:
60:e3:9b:45:05:65:f0:2d:4c:df:c6:9a:3a:21:fb:
ce:37:4b:c1:e0:4d:74:fb:65:6c:dc:fd:e3:b5:0d:
e2:a9:db:8f:e5:37:54:d4:dd:e5:05:01:92:3f:88:
96:ef:dc:87:20:ff:12:6e:31:fe:33:91:0f:6b:ca:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:35:B0:1B:F9:AB:21:28:ED:56:18:D5:8F:04:F2:1B:64:85:36
X509v3 Authority Key Identifier:
keyid:60:76:BD:0B:A4:DB:79:7A:72:A6:8F:EF:F9:BF:B5:58:C4:43:98:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YHa9C6TbeXpypo_v-b-1WMRDmLI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162EE1/752D42E88FD211EC948A937EC4F9AE02/YHa9C6TbeXpypo_v-b-1WMRDmLI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:22:b7:5d:3a:13:9c:97:dc:3f:43:36:05:6b:8e:e2:f9:9e:
c8:5e:e3:fe:a7:8f:8a:62:bd:6d:80:77:7c:42:89:c8:17:47:
3d:3c:d8:d9:e4:de:57:cc:1c:39:d4:f8:39:55:30:ef:c7:1d:
56:99:f3:f6:22:5a:ce:d1:0e:2c:4a:bf:24:0a:51:54:a9:af:
38:c5:58:be:aa:6f:2a:ad:3c:e7:fe:ec:d1:fd:05:ff:46:09:
c2:15:06:b3:da:c0:c1:a9:e1:73:d1:66:6a:94:d1:24:96:5f:
18:f2:5c:9b:61:4d:fd:57:a8:6a:5b:60:d9:a9:ad:17:ed:9f:
c5:14:3e:7e:c4:06:1b:81:52:20:be:09:ba:ea:9f:02:b7:81:
b9:1d:f5:6d:0c:f4:33:16:2e:31:6b:40:a3:1a:32:ee:05:04:
4c:41:32:03:29:ef:ea:9d:10:2a:8a:d9:99:51:de:ff:b9:c3:
67:07:d7:0e:38:2a:94:5c:81:13:fa:27:e2:ec:6b:9d:0b:de:
31:86:0f:d0:da:df:85:f0:c6:73:84:9e:6e:25:9b:a9:bb:5f:
16:6e:5b:1a:e1:03:4b:bd:b5:e6:25:be:80:37:2a:74:ca:50:
cf:90:47:ba:c9:86:c6:92:98:f5:b7:98:7b:63:dd:2b:9b:f9:
25:14:da:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjJFRTExMTAvBgNVBAUTKDYwNzZCRDBCQTREQjc5N0E3MkE2OEZFRkY5QkZCNTU4
QzQ0Mzk4QjIwHhcNMjYwMTI0MjMzMDI3WhcNMjYwMTMxMjMzMDI3WjAYMRYwFAYD
VQQDDA02OTc1NTYxMy01YjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5Jay45XrM+cYdQYlu/QCP8u94HF2mF9Vy+DcY95VOcr5WyywPFklLz9cItD
K4I/f4023m3QlBrsbzqtcrj7mqXFZHXbchvHC+R7o28klcpmLyH7h9XfdN4mEpzm
7d2Aj46jU+GpYLjxoz0/IKAQ3803bRR/LReGvq1JeL4TNqINW5Ozpe3OuMcnUcyA
saFsYYw22fbrH3Uw3VSdlYPn2zWwgKZ+Qwhkgz/cNi6hSBQsD1yYLdraGlzECCtk
1XcqNghg45tFBWXwLUzfxpo6IfvON0vB4E10+2Vs3P3jtQ3iqduP5TdU1N3lBQGS
P4iW79yHIP8SbjH+M5EPa8p7ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6/NbAb
+ashKO1WGNWPBPIbZIU2MB8GA1UdIwQYMBaAFGB2vQuk23l6cqaP7/m/tVjEQ5iy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkVFMS83NTJENDJFODhG
RDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVYcHlwb192LWItMVdNUkRt
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lIYTlDNlRiZVhweXBvX3YtYi0xV01SRG1MSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MkVFMS83NTJENDJFODhGRDIxMUVDOTQ4QTkzN0VDNEY5QUUwMi9ZSGE5QzZUYmVY
cHlwb192LWItMVdNUkRtTEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBbIrddOhOcl9w/QzYFa47i+Z7IXuP+p4+KYr1tgHd8QonIF0c9PNjZ
5N5XzBw51Pg5VTDvxx1WmfP2IlrO0Q4sSr8kClFUqa84xVi+qm8qrTzn/uzR/QX/
RgnCFQaz2sDBqeFz0WZqlNEkll8Y8lybYU39V6hqW2DZqa0X7Z/FFD5+xAYbgVIg
vgm66p8Ct4G5HfVtDPQzFi4xa0CjGjLuBQRMQTIDKe/qnRAqitmZUd7/ucNnB9cO
OCqUXIET+ifi7GudC94xhg/Q2t+F8MZzhJ5uJZupu18Wblsa4QNLvbXmJb6ANyp0
ylDPkEe6yYbGkpj1t5h7Y90rm/klFNo1
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:08:05 2026 by rpki-client