This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json)
Hash identifier: h/UcpYQRoPSNViSUFVSdtZhZPz4kOuNkqw0UDrlUJHE=
Subject key identifier: 85:17:82:EB:10:98:03:48:67:8B:00:EF:C1:DC:76:5E:F7:8A:53:84
Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Certificate serial: 7C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
Manifest number: 7A
Signing time: Sun 25 Jan 2026 05:53:53 +0000
Manifest this update: Sun 25 Jan 2026 05:53:52 +0000
Manifest next update: Sun 01 Feb 2026 05:53:52 +0000
Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: aoGnFYzCnarQ5KvP6cFCAmcWNr7QDZEICfKmAiQOYrQ=)
2: 5B118C12986011F0A5423187C4F9AE02.roa (hash: OXXb1y44b21RuXCm0yOOerFNyOFngqcHwK/xrGzNLmQ=)
3: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: WkC734Z9YLqp46ED9zzrP9DX1ES2VdVVIimzvDKW6/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 04:58:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124 (0x7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC
Validity
Not Before: Jan 25 05:53:52 2026 GMT
Not After : Feb 1 05:53:52 2026 GMT
Subject: CN=6975aff1-55eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0c:87:ff:29:d5:af:14:99:3a:f8:ed:59:01:
5c:7b:0c:8d:43:16:c3:cb:0e:8f:dc:48:58:b3:d8:
c6:cd:3b:e1:b8:75:64:ea:fa:c7:00:87:5d:c2:e5:
98:35:a9:d6:98:f4:ee:0c:25:6b:ea:ab:75:b3:f5:
7c:00:2f:8a:93:8e:98:09:47:c6:b8:c2:6b:4b:95:
95:59:15:ee:df:35:1b:af:01:85:90:ec:2a:0d:06:
05:32:ef:02:35:eb:5e:9b:61:4c:ca:cf:9e:5c:3e:
50:81:a9:8b:15:17:44:2e:81:0f:3d:48:e5:ef:21:
a0:1d:c8:cb:79:09:32:1d:62:80:c2:ca:f4:ba:61:
84:b9:21:17:53:08:7d:83:c1:b6:38:52:c1:f4:e2:
e7:2e:e2:dd:1f:8d:a3:47:20:07:58:46:dc:00:5c:
30:aa:dc:c9:b3:55:77:cc:45:20:c3:58:8e:b2:ab:
1a:16:64:0e:60:65:70:a1:68:a6:72:3a:bf:2d:27:
82:9f:f1:ac:3e:cc:18:46:fb:a0:9e:d4:df:7e:c4:
89:ef:50:2a:35:c4:91:2a:f0:9f:1f:07:1b:4c:95:
02:c0:1b:85:03:0f:63:e7:33:b9:02:b1:c3:ea:8a:
05:37:56:c4:fd:85:d1:71:27:cd:20:e9:01:16:5a:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:17:82:EB:10:98:03:48:67:8B:00:EF:C1:DC:76:5E:F7:8A:53:84
X509v3 Authority Key Identifier:
keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e9:1a:b7:07:6b:e6:b8:01:37:39:a7:03:34:f7:0a:7b:b6:
04:ea:f6:85:53:d0:6e:b0:71:f2:b1:97:bb:ee:8b:9f:d3:90:
22:7b:92:ed:3c:a9:31:76:67:ea:a2:27:12:fd:a8:a4:e4:08:
af:9b:4e:c3:1b:ac:8c:0a:65:df:96:ed:bf:72:85:1b:09:5c:
b8:59:b4:6e:4c:c3:e9:02:9a:a7:8c:4a:9f:64:d0:be:b5:bf:
61:c2:0e:8e:f9:56:51:16:3e:4e:1c:c3:62:22:db:2a:ed:41:
90:d0:1a:2f:ff:93:e2:04:49:6f:4c:c6:48:5f:72:ce:eb:fa:
7c:7f:71:89:be:3e:73:19:42:01:ce:5c:73:bd:fd:1d:c5:6d:
ea:d3:46:ea:e6:92:2d:38:bf:ca:09:cd:9e:a4:5a:c1:c5:fa:
7a:22:61:f8:4e:8b:51:fc:84:a3:ca:e2:87:3b:ca:00:6f:9e:
94:9a:94:a1:61:3c:65:78:a9:a3:ac:a2:57:b7:25:95:03:26:
ad:56:df:3d:20:db:de:69:f9:c9:5d:2c:57:d5:d4:d1:55:e2:
33:3c:1c:ac:8b:7e:f1:08:6f:94:93:33:c8:83:1b:56:f8:2e:
4b:d2:b2:43:2c:e7:02:44:e1:fc:69:72:3b:e5:65:0b:35:9a:
61:ee:9b:85
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NEM3QTExMC8GA1UEBRMoQTU4QURBQ0VGOUQyNDU1M0E1NTY0NkI1QTZFQkNDRUFC
MTlGMkZCQzAeFw0yNjAxMjUwNTUzNTJaFw0yNjAyMDEwNTUzNTJaMBgxFjAUBgNV
BAMMDTY5NzVhZmYxLTU1ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCPDIf/KdWvFJk6+O1ZAVx7DI1DFsPLDo/cSFiz2MbNO+G4dWTq+scAh13C5Zg1
qdaY9O4MJWvqq3Wz9XwAL4qTjpgJR8a4wmtLlZVZFe7fNRuvAYWQ7CoNBgUy7wI1
616bYUzKz55cPlCBqYsVF0QugQ89SOXvIaAdyMt5CTIdYoDCyvS6YYS5IRdTCH2D
wbY4UsH04ucu4t0fjaNHIAdYRtwAXDCq3MmzVXfMRSDDWI6yqxoWZA5gZXChaKZy
Or8tJ4Kf8aw+zBhG+6Ce1N9+xInvUCo1xJEq8J8fBxtMlQLAG4UDD2PnM7kCscPq
igU3VsT9hdFxJ80g6QEWWsT1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhReC6xCY
A0hniwDvwdx2XveKU4QwHwYDVR0jBBgwFoAUpYrazvnSRVOlVka1puvM6rGfL7ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0QzdBLzQ0RjE0QUZDNDA0
NjExRjA5QkYwRDg0RkM0RjlBRTAyL3BZcmF6dm5TUlZPbFZrYTFwdXZNNnJHZkw3
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcFlyYXp2blNSVk9sVmthMXB1dk02ckdmTDd3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0
QzdBLzQ0RjE0QUZDNDA0NjExRjA5QkYwRDg0RkM0RjlBRTAyL3BZcmF6dm5TUlZP
bFZrYTFwdXZNNnJHZkw3dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAF/pGrcHa+a4ATc5pwM09wp7tgTq9oVT0G6wcfKxl7vui5/TkCJ7ku08
qTF2Z+qiJxL9qKTkCK+bTsMbrIwKZd+W7b9yhRsJXLhZtG5Mw+kCmqeMSp9k0L61
v2HCDo75VlEWPk4cw2Ii2yrtQZDQGi//k+IESW9Mxkhfcs7r+nx/cYm+PnMZQgHO
XHO9/R3FberTRurmki04v8oJzZ6kWsHF+noiYfhOi1H8hKPK4oc7ygBvnpSalKFh
PGV4qaOsole3JZUDJq1W3z0g295p+cldLFfV1NFV4jM8HKyLfvEIb5STM8iDG1b4
LkvSskMs5wJE4fxpcjvlZQs1mmHum4U=
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:15:33 2026 by rpki-client