This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
File: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft (raw, json)
Hash identifier: uVqMKjXvXYc3znRm8x4FLDXfXitcpO744bkmTLP0TNQ=
Subject key identifier: 43:DA:14:0B:91:3B:78:93:32:E3:F1:1F:01:B0:86:CB:59:ED:1E:5C
Authority key identifier: 83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
Certificate issuer: /CN=A9171669/serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Certificate serial: 02F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
Manifest number: 02F1
Signing time: Sun 25 Jan 2026 00:26:53 +0000
Manifest this update: Sun 25 Jan 2026 00:26:52 +0000
Manifest next update: Sun 01 Feb 2026 00:26:52 +0000
Files and hashes: 1: gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl (hash: G/Z2DIjSkqWh9SivTletRkoZ2MREHocqj5wxHD+pzwk=)
2: 91BBC8880D9711ED8F09C27DC4F9AE02.roa (hash: KV+SoYHbA+Q51JP+NigJCe33FcHjWlimMC267ADRQGw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:12:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 757 (0x2f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171669, serialNumber=832FE5614E02D350F886790DE4BDC99F426455E4
Validity
Not Before: Jan 25 00:26:52 2026 GMT
Not After : Feb 1 00:26:52 2026 GMT
Subject: CN=6975634c-9742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:24:99:90:22:30:42:48:69:2a:c3:a5:9e:
35:28:10:de:b0:9b:d5:a5:b5:b7:32:3c:ca:ff:05:
e0:c5:10:a0:2e:c2:dd:27:a1:68:3e:10:e7:ae:ee:
7f:81:89:eb:5f:7a:1f:9f:21:59:9f:75:78:c1:8c:
75:bc:ed:ee:c9:49:8b:5e:c2:97:5d:13:e9:65:6d:
a9:59:d5:6e:bb:cd:cc:88:9e:af:79:0f:ab:ee:56:
bb:1c:9e:33:8a:7a:09:62:ef:e6:c1:62:fc:74:1d:
ba:2f:76:e1:09:b8:de:16:40:a0:e1:0d:ea:6c:bb:
c6:16:1b:1f:cb:d6:57:62:ae:06:56:ac:16:51:d9:
95:4d:1e:95:3c:3c:70:8a:e5:fa:e7:46:d2:27:d2:
73:99:5f:f8:ec:be:1d:9e:5c:99:8b:09:ae:d8:bc:
67:9a:2a:e6:51:35:d4:fc:15:be:af:2c:e4:b1:a5:
02:c1:2b:6e:9e:83:8b:24:2f:98:94:a2:25:b8:20:
8b:61:85:5c:e2:71:2e:90:b8:9a:ff:0c:ff:c1:f9:
f4:0f:f5:d3:a7:e1:e0:e3:6d:9b:8e:b5:e3:8e:af:
87:7d:0b:50:53:5d:61:87:16:c0:b6:19:db:19:77:
09:56:bb:40:54:7b:82:45:03:1d:6c:0d:c4:87:93:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DA:14:0B:91:3B:78:93:32:E3:F1:1F:01:B0:86:CB:59:ED:1E:5C
X509v3 Authority Key Identifier:
keyid:83:2F:E5:61:4E:02:D3:50:F8:86:79:0D:E4:BD:C9:9F:42:64:55:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171669/B558BA060D9411EDA5D4E051C4F9AE02/gy_lYU4C01D4hnkN5L3Jn0JkVeQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:ac:01:23:1e:88:91:41:31:3b:ef:32:53:05:30:4f:de:12:
43:02:26:17:16:c1:52:eb:e2:0a:84:b4:89:ae:8d:b5:b6:40:
4e:d3:66:82:a3:61:ab:31:98:8a:ae:2d:32:4f:93:91:d4:7b:
99:1d:8c:61:3f:d1:4a:c6:8d:2e:f9:f8:fc:61:c1:5f:7a:8b:
1f:63:fa:64:c6:79:eb:d5:80:48:0e:4c:35:94:9e:a0:8f:08:
79:c0:b1:ee:d2:e7:ca:91:6c:6a:d2:72:d2:3b:7c:0f:ea:eb:
d8:8e:79:5c:9a:b6:de:e9:71:0c:2b:bd:45:cb:f0:9c:d4:58:
06:04:14:d8:00:6f:bc:04:04:bc:19:99:ed:ae:01:77:8b:03:
e8:3e:1c:d9:c4:ba:97:c3:36:0a:a8:6f:af:d7:9f:3a:89:75:
76:ce:b4:58:cc:49:2c:46:b4:86:07:87:5f:65:53:9a:7e:15:
06:5d:55:db:92:58:21:dd:6f:65:c5:69:d1:10:07:b6:ab:1e:
b5:0e:21:18:8e:87:f7:f1:c8:b3:5a:76:9b:b1:f7:dd:a5:3f:
a7:c8:d0:0c:ea:fd:aa:0a:90:92:1a:b5:a5:ec:ae:cc:9a:eb:
5f:6d:8f:f6:e4:65:52:31:56:22:3e:54:d7:65:a0:fd:f2:a1:
df:dd:f2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:46 2026 by rpki-client