This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
File: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft (raw, json)
Hash identifier: INfatbjcjSS1qEY128RojVHiKsKag9dDcm6Wvk+8aFg=
Subject key identifier: 8C:D7:09:03:E8:DA:F1:4A:2D:15:B1:ED:88:AD:0B:E5:AB:0F:5D:09
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Certificate issuer: /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial: F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
Manifest number: DE
Signing time: Sun 25 Jan 2026 05:05:55 +0000
Manifest this update: Sun 25 Jan 2026 05:05:55 +0000
Manifest next update: Sun 01 Feb 2026 05:05:55 +0000
Files and hashes: 1: YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl (hash: lxs2nU/uvKehCZBeY5GYrG5st4nahaluqRYLl8r2MfE=)
2: E3239FCAD48C11EFA27EEC37C4F9AE02.roa (hash: eDrkrHM6e7G8MkefF8uO0ebeRL2ZiilrSCVyjl1v/78=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240 (0xf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Validity
Not Before: Jan 25 05:05:55 2026 GMT
Not After : Feb 1 05:05:55 2026 GMT
Subject: CN=6975a4b3-e5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:37:74:c3:3d:72:6c:da:be:02:81:20:f6:c8:
12:26:ba:21:6c:3f:e2:24:20:e9:10:87:b4:fb:57:
65:22:2d:06:6d:88:f2:87:6f:24:75:08:d2:f4:1b:
ee:10:de:43:25:99:4f:a1:0c:cb:dd:fc:cb:ac:8f:
11:7d:d2:ef:60:2e:01:91:eb:da:d0:1b:2a:79:c2:
cc:ad:77:f3:9c:ab:b1:a9:52:db:6d:70:4a:ad:af:
f5:62:40:0b:fc:c1:2e:5d:1e:61:21:3d:2b:90:76:
e8:29:f7:21:0d:b8:2f:8e:93:3b:fb:31:f6:44:41:
f3:d6:b9:91:ef:b1:7a:4f:69:d0:fa:87:6a:31:2c:
2b:05:18:33:ef:2b:93:bd:c5:03:1f:9f:c5:f3:6d:
d1:b1:3a:e7:5c:ed:11:f5:0d:6a:00:e4:5a:34:b0:
e5:c5:48:31:8c:a2:fa:bf:6a:80:2a:6a:1f:47:6a:
c5:d4:f6:68:48:5b:cb:4d:9b:af:4c:d5:3f:ed:3f:
23:f5:2d:b6:78:c5:9b:86:e8:cb:c0:15:bc:da:6b:
c8:b0:cd:fd:af:4d:a1:44:4a:9c:82:82:49:c6:e0:
82:15:eb:8a:c7:f1:12:6c:11:51:66:c1:90:ca:a3:
de:80:8d:fe:59:60:a7:3b:3a:b6:8d:2f:b6:78:e8:
bf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D7:09:03:E8:DA:F1:4A:2D:15:B1:ED:88:AD:0B:E5:AB:0F:5D:09
X509v3 Authority Key Identifier:
keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f3:9b:57:84:15:0f:31:e5:9a:f1:33:e2:7c:b8:60:bb:66:
51:15:07:e2:c0:6c:e7:44:be:0f:93:82:5b:6f:aa:56:69:d4:
2e:c4:ba:2d:fb:81:e2:f7:25:8a:43:7f:bd:69:b1:2f:04:ae:
32:d8:a7:44:75:15:fa:d4:fd:89:70:4e:ad:6d:11:f8:a5:0f:
97:d7:6d:1b:0f:10:4c:08:7f:94:cf:a1:48:c3:d2:53:93:f4:
ad:0a:a3:1e:14:49:e7:a2:09:87:60:fd:f8:58:be:20:2a:d0:
f1:88:10:e0:a0:d9:15:be:a4:52:c2:f0:13:1c:e7:39:b5:ab:
c4:5b:6e:5e:6a:b0:ad:f6:0c:f2:f2:2c:71:9b:21:60:fb:9c:
00:83:c8:6d:a1:9a:ed:06:43:fa:ac:ad:0e:9c:d5:8d:0d:93:
19:97:43:b9:d3:0d:82:d8:50:b8:e1:12:74:18:92:c7:fa:22:
30:6f:a3:d0:07:fd:52:c6:6a:21:fd:dd:ce:1b:7e:3c:04:e9:
96:18:a1:7a:ef:70:2c:b3:ee:b8:44:20:6a:e0:26:fb:76:cb:
2b:e4:a9:67:8b:1e:7b:cc:1b:71:54:a0:08:aa:f9:c8:00:ae:
28:ce:14:a1:18:3b:8b:eb:29:96:ec:8c:f8:1c:4d:96:5a:9e:
27:4b:4b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:34:42 2026 by rpki-client