This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
File: YsQYLAA-_Po43a9O-QT7BP5bVko.mft (raw, json)
Hash identifier: 9XI/65qVHKF9kGERv8vPQ+s48/SrqI2zQULE7XM5FCc=
Subject key identifier: FF:11:FA:46:3A:B6:B0:09:05:32:8C:EF:53:B9:8B:B8:71:61:A7:99
Authority key identifier: 62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
Certificate issuer: /CN=A917CE22/serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Certificate serial: 082B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
Manifest number: 0802
Signing time: Sat 24 Jan 2026 21:17:34 +0000
Manifest this update: Sat 24 Jan 2026 21:17:34 +0000
Manifest next update: Sat 31 Jan 2026 21:17:34 +0000
Files and hashes: 1: YsQYLAA-_Po43a9O-QT7BP5bVko.crl (hash: jW3QwXz5O7aOMx1oTDshwSA2Yoi1THgXby9aD6XxKCk=)
2: CDA6F2D0111611EFAD808A81C4F9AE02.roa (hash: 1x9ZSEO8uOz9PHuh4DhXivDk8BIjn4EvWUek4K4qZg4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2091 (0x82b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917CE22, serialNumber=62C4182C003EFCFA38DDAF4EF904FB04FE5B564A
Validity
Not Before: Jan 24 21:17:34 2026 GMT
Not After : Jan 31 21:17:34 2026 GMT
Subject: CN=697536ee-657f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:08:0f:ce:f9:58:b6:0d:77:15:a3:aa:c6:
94:70:61:0b:17:c5:fe:3a:87:9c:98:74:09:51:31:
f1:4c:20:d8:0a:e4:49:61:e1:33:9d:08:d6:90:f7:
53:88:e5:6b:61:96:ce:d0:b0:11:8a:fc:92:26:0b:
37:51:fd:dc:2d:50:70:48:06:75:4d:08:73:9c:96:
ec:4c:9f:19:cf:14:f8:b0:13:06:9c:99:0a:cb:80:
04:e8:b2:84:2b:e5:48:2e:7f:87:ac:28:a6:37:0a:
b6:6f:6d:23:a0:55:22:4e:4a:95:44:d0:42:32:a2:
f2:d2:e4:29:21:52:de:aa:1e:b4:c8:1b:56:00:a1:
e2:3e:c1:d5:4b:f4:5a:c5:40:ca:d4:b0:93:f7:3b:
60:7b:0f:1d:43:ea:1f:e5:6f:f5:11:54:58:f1:6c:
17:c2:0e:59:03:ee:f5:66:54:84:a2:50:44:4b:49:
e3:5e:82:61:26:6c:81:a7:cd:18:53:59:a3:0c:69:
bc:7b:f5:d3:c8:d1:62:95:7d:a4:ef:7c:62:09:11:
61:57:99:77:46:4d:8e:d8:97:20:b5:28:47:44:a4:
3f:6e:bd:6b:9c:26:fa:be:17:a7:70:83:f5:27:70:
98:26:f6:41:dd:99:38:3f:37:a0:80:cb:4d:d9:5d:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:11:FA:46:3A:B6:B0:09:05:32:8C:EF:53:B9:8B:B8:71:61:A7:99
X509v3 Authority Key Identifier:
keyid:62:C4:18:2C:00:3E:FC:FA:38:DD:AF:4E:F9:04:FB:04:FE:5B:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YsQYLAA-_Po43a9O-QT7BP5bVko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CE22/12FA811A177B11EB84634C36C4F9AE02/YsQYLAA-_Po43a9O-QT7BP5bVko.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:12:1b:8d:83:4a:e3:a6:9c:7d:1f:2f:da:6e:e0:55:e6:4a:
a0:6d:87:7a:1c:69:19:d1:27:dd:76:68:a1:44:c4:6e:5d:28:
c1:4b:e7:eb:8e:69:77:d6:89:38:b5:00:61:36:ba:52:0b:f7:
fe:a4:01:a7:0d:d3:47:70:d5:fd:0b:9c:4c:89:2f:15:f4:0e:
a4:20:fa:3d:39:2e:f6:1a:d4:61:e9:b9:73:fe:54:aa:05:3e:
29:78:8d:a3:b3:76:3b:13:da:08:75:8e:2d:6a:d5:de:37:28:
d3:61:fb:6e:1f:5b:61:69:45:22:56:06:ec:2d:bf:57:00:f6:
8a:07:7f:91:bb:25:73:f7:ab:55:0e:1b:61:5f:da:bc:3c:dc:
c9:50:4c:87:a2:6c:b7:2a:67:c3:3c:a3:64:cf:3a:d1:55:8a:
a1:c5:0f:11:17:c7:c3:4d:70:33:6a:46:74:9f:1b:3d:5e:a3:
f8:67:d4:c9:49:a6:57:3d:4a:5b:11:70:19:b3:dc:00:09:cc:
cc:04:a4:79:c1:2c:f7:70:33:d2:8f:2c:b1:22:53:ef:51:23:
33:d0:4a:29:c9:c9:e9:0c:f4:7c:b1:8e:43:86:40:b5:03:6a:
c3:f6:d8:24:1c:fe:67:bc:c7:cf:4e:29:d5:b4:84:6b:c2:ec:
ab:1e:3b:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
N0NFMjIxMTAvBgNVBAUTKDYyQzQxODJDMDAzRUZDRkEzOEREQUY0RUY5MDRGQjA0
RkU1QjU2NEEwHhcNMjYwMTI0MjExNzM0WhcNMjYwMTMxMjExNzM0WjAYMRYwFAYD
VQQDDA02OTc1MzZlZS02NTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjDsID875WLYNdxWjqsaUcGELF8X+OoecmHQJUTHxTCDYCuRJYeEznQjWkPdT
iOVrYZbO0LARivySJgs3Uf3cLVBwSAZ1TQhznJbsTJ8ZzxT4sBMGnJkKy4AE6LKE
K+VILn+HrCimNwq2b20joFUiTkqVRNBCMqLy0uQpIVLeqh60yBtWAKHiPsHVS/Ra
xUDK1LCT9ztgew8dQ+of5W/1EVRY8WwXwg5ZA+71ZlSEolBES0njXoJhJmyBp80Y
U1mjDGm8e/XTyNFilX2k73xiCRFhV5l3Rk2O2JcgtShHRKQ/br1rnCb6vhencIP1
J3CYJvZB3Zk4PzeggMtN2V3MKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8R+kY6
trAJBTKM71O5i7hxYaeZMB8GA1UdIwQYMBaAFGLEGCwAPvz6ON2vTvkE+wT+W1ZK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0UyMi8xMkZBODExQTE3
N0IxMUVCODQ2MzRDMzZDNEY5QUUwMi9Zc1FZTEFBLV9QbzQzYTlPLVFUN0JQNWJW
a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lzUVlMQUEtX1BvNDNhOU8tUVQ3QlA1YlZrby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Q0UyMi8xMkZBODExQTE3N0IxMUVCODQ2MzRDMzZDNEY5QUUwMi9Zc1FZTEFBLV9Q
bzQzYTlPLVFUN0JQNWJWa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpEhuNg0rjppx9Hy/abuBV5kqgbYd6HGkZ0SfddmihRMRuXSjBS+fr
jml31ok4tQBhNrpSC/f+pAGnDdNHcNX9C5xMiS8V9A6kIPo9OS72GtRh6blz/lSq
BT4peI2js3Y7E9oIdY4tatXeNyjTYftuH1thaUUiVgbsLb9XAPaKB3+RuyVz96tV
DhthX9q8PNzJUEyHomy3KmfDPKNkzzrRVYqhxQ8RF8fDTXAzakZ0nxs9XqP4Z9TJ
SaZXPUpbEXAZs9wACczMBKR5wSz3cDPSjyyxIlPvUSMz0EopycnpDPR8sY5DhkC1
A2rD9tgkHP5nvMfPTinVtIRrwuyrHjuH
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:49:40 2026 by rpki-client