This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
File: YG6ylYJUrJi2M26qQayAstyxnG4.mft (raw, json)
Hash identifier: QObgGn/Ck1YapIxDP/CtJl732cNL5dFizhlnfty5MU8=
Subject key identifier: 03:E4:51:E2:7E:F8:92:7F:82:1D:8F:D7:2C:53:23:32:A2:F6:E1:36
Authority key identifier: 60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E
Certificate issuer: /CN=A9170D3E/serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
Manifest number: E2
Signing time: Sun 25 Jan 2026 04:42:57 +0000
Manifest this update: Sun 25 Jan 2026 04:42:56 +0000
Manifest next update: Sun 01 Feb 2026 04:42:56 +0000
Files and hashes: 1: YG6ylYJUrJi2M26qQayAstyxnG4.crl (hash: OD+e6XtKCOSeEd5bEn0yYDjDRe1bTTp8KRDyNzFKFYQ=)
2: 181772049FD811EF8680B438C4F9AE02.roa (hash: FFWUbGnms+i/c0gm1QQvD9Feo8hsjiALxIcD96+R4sA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl
rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:42:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170D3E, serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E
Validity
Not Before: Jan 25 04:42:56 2026 GMT
Not After : Feb 1 04:42:56 2026 GMT
Subject: CN=69759f50-503d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:eb:3d:ac:3b:2f:d5:20:75:67:b8:60:21:
e7:27:d3:15:39:ab:af:1b:66:b7:eb:a7:86:5f:60:
8f:11:79:51:ea:60:51:f9:46:e6:3d:a9:f2:68:6e:
3c:9c:3d:2c:47:0a:1f:87:79:67:4f:cf:a0:1b:94:
9f:e6:b0:53:5c:9e:70:51:f9:5a:a1:3f:0b:c4:d1:
99:8f:c9:50:29:1e:87:d9:ae:2e:24:bd:8b:ec:f1:
bc:11:b6:76:c3:e9:e5:45:df:35:13:20:45:08:7f:
89:1f:78:6b:88:29:0f:6c:30:cd:fb:74:b2:59:75:
99:92:b0:93:8c:ed:03:1c:9c:76:cd:fc:69:02:7c:
ec:45:03:01:9c:b1:5b:5a:63:98:45:1c:cc:92:5c:
a6:14:99:f5:f0:31:e3:56:8f:27:36:56:63:17:85:
18:ee:e5:97:c5:8e:a5:78:21:79:1e:a9:ae:c8:8d:
66:21:12:8e:16:8d:8d:a9:01:01:49:5c:8c:29:ec:
f9:83:83:aa:2a:46:35:a2:12:72:a8:9e:e8:00:3e:
08:85:0d:16:35:3b:38:50:aa:44:06:1a:8f:ac:5b:
23:e4:2f:57:d8:0a:cc:7f:b0:d3:da:06:52:88:b5:
71:16:33:3f:6e:06:e4:31:db:50:7b:b9:db:c6:d0:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E4:51:E2:7E:F8:92:7F:82:1D:8F:D7:2C:53:23:32:A2:F6:E1:36
X509v3 Authority Key Identifier:
keyid:60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:32:7e:33:fd:d6:3d:e1:cc:f4:a8:a3:85:4b:5c:e0:f6:92:
6e:5a:08:1c:e8:7b:d7:83:3d:77:20:af:6e:ee:24:08:3b:00:
56:3f:c0:42:39:cc:31:2f:0e:cc:9c:53:2e:33:ea:e5:3c:d5:
ff:82:1c:67:ac:3a:16:16:1e:f7:32:0e:f0:47:84:31:0d:27:
37:80:56:e7:85:54:12:c2:8e:e2:18:c5:26:a8:62:7a:4e:1d:
17:73:52:86:fc:df:7f:50:59:c7:f7:64:df:85:d1:17:cb:9c:
72:c0:fe:2e:fe:76:3c:4c:30:4e:3b:92:63:32:3f:14:8b:6c:
78:a6:27:04:27:a7:e0:1d:74:f2:3b:d8:f0:c2:f1:d8:86:f9:
4d:18:a0:0d:6f:e7:bc:8a:08:a2:3c:c3:3c:11:e1:72:b1:f9:
dc:f3:e6:26:e4:c5:89:0e:c2:57:65:94:a3:04:ac:55:2a:fa:
aa:30:dc:e6:78:3a:1c:87:43:53:09:b5:55:97:d3:07:3a:18:
0e:df:4e:f2:81:35:c4:15:6a:7d:da:85:f7:d3:c2:17:e3:c6:
bc:34:8b:f1:2d:36:fa:58:f1:9b:f1:12:cf:21:59:3b:4c:4d:
09:ae:1b:48:9a:b9:ee:d8:e3:13:a8:3c:67:8e:43:e3:60:e5:
e6:59:6b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:46:03 2026 by rpki-client