This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
File: yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft (raw, json)
Hash identifier: i2OboAX/O8jhKGp4QGEda54Z/CBSFuNAPCPkDLQxVl8=
Subject key identifier: 5F:DF:DE:C4:72:6C:40:46:6E:2B:F3:DF:A9:1D:54:FB:7B:91:01:6E
Authority key identifier: CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B
Certificate issuer: /CN=A916B4B7/serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B
Certificate serial: 0974
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
Manifest number: 096E
Signing time: Sat 24 Jan 2026 19:30:42 +0000
Manifest this update: Sat 24 Jan 2026 19:30:41 +0000
Manifest next update: Sat 31 Jan 2026 19:30:41 +0000
Files and hashes: 1: yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl (hash: ksahfd3nAfzdSpNaSbOqTURiWM3vSuY8AxZnzXm6RjI=)
2: 90798692AA0A11EA89D5161EC4F9AE02.roa (hash: SjfL0z+V8r1mG2yvSd88vw9Fy41PjMV8KGz6ODEkn2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl
rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 19:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2420 (0x974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B4B7, serialNumber=CAA969FF3774BCD9ED602773D29D878BC4E2656B
Validity
Not Before: Jan 24 19:30:41 2026 GMT
Not After : Jan 31 19:30:41 2026 GMT
Subject: CN=69751de2-7b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fa:0d:54:c6:73:43:f8:92:d4:b6:aa:d1:67:
7d:f8:98:30:db:7e:14:93:90:aa:a9:2f:62:da:e9:
31:6d:99:9d:6e:18:a2:72:90:5e:2f:37:83:f3:e6:
e1:20:14:98:18:ed:ae:12:25:b3:8e:be:e2:89:c1:
a5:42:99:a2:cb:c1:c5:6d:3c:fa:62:8f:f1:1c:f0:
11:c3:80:10:35:8c:8b:d0:d5:54:69:32:84:09:3c:
cf:7b:f9:9b:5a:ce:25:0a:73:1a:01:b8:e2:ff:25:
cd:ff:9a:e7:df:ea:5a:b4:37:34:06:64:34:25:a7:
b1:46:f5:7c:f2:54:d0:1b:da:13:31:2d:1c:38:36:
c8:3b:fc:bd:5f:b5:ba:e1:35:53:ef:b4:9f:d4:7e:
48:a9:ff:46:de:f5:24:3c:4c:f4:c7:71:16:68:04:
63:36:36:42:64:b0:98:dd:6a:9b:62:64:dc:3a:d5:
76:62:1d:e7:60:d7:d3:0e:2e:61:f7:24:f0:52:8e:
c0:de:1f:2f:67:57:8e:dc:61:70:0e:03:7e:ee:c8:
bc:cd:42:97:63:26:2e:bf:5f:3c:67:83:6b:3f:3f:
d9:c8:64:b4:13:ce:fa:69:6d:e4:60:0e:20:0b:d2:
6f:d8:09:0a:9e:3d:70:b8:3c:18:62:a5:a9:ef:2a:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DF:DE:C4:72:6C:40:46:6E:2B:F3:DF:A9:1D:54:FB:7B:91:01:6E
X509v3 Authority Key Identifier:
keyid:CA:A9:69:FF:37:74:BC:D9:ED:60:27:73:D2:9D:87:8B:C4:E2:65:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yqlp_zd0vNntYCdz0p2Hi8TiZWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B4B7/0972C740AA0911EA8FE3B61BC4F9AE02/yqlp_zd0vNntYCdz0p2Hi8TiZWs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4a:8a:f7:1b:46:56:55:3c:4d:eb:74:21:4d:d2:37:7b:ef:
55:76:f4:72:8b:b9:3d:4c:15:0d:6e:92:1c:df:03:20:76:27:
76:f2:e8:c0:e1:7e:23:c7:58:ca:b9:7f:45:50:2b:ee:7d:80:
77:b3:49:88:a9:c0:ae:a9:73:10:89:03:0d:2b:a8:83:15:b8:
31:0e:79:06:69:4e:e9:df:b7:ac:cd:1a:de:40:20:8d:70:61:
64:67:ec:bf:26:1d:24:00:2b:e4:ed:4c:26:e8:62:cd:4d:56:
18:f8:c0:37:82:67:25:f5:39:43:0f:55:6b:82:4a:d1:e4:a7:
11:6c:60:e1:49:c9:b7:60:ce:11:1b:ea:b7:fc:5a:07:9a:9a:
fb:ca:7b:82:3e:f6:90:a9:fe:11:8a:d5:de:fa:dc:bf:64:04:
fc:81:bc:d3:e4:54:d7:af:f1:3f:34:1f:0b:72:14:dc:d9:fc:
d0:db:0f:21:e4:22:5d:37:f5:f1:68:bc:3d:3e:34:42:0d:b3:
7c:69:70:92:d6:4c:36:0a:71:d1:f7:72:e4:1a:35:fb:02:d0:
fc:04:21:95:a1:5c:5a:45:cf:98:f5:cb:30:bd:20:c3:12:52:
d4:e5:77:17:e0:63:34:60:0e:52:e2:91:46:50:fc:6d:2e:7d:
d9:2e:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:09:05 2026 by rpki-client