This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
File: y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json)
Hash identifier: VEwcKcfLQkk8NE326aRAY08T/NGJ9YmBjU5WFgbTuSo=
Subject key identifier: 1A:16:4D:E7:88:7D:64:00:44:71:78:50:48:D3:40:43:13:5A:31:8D
Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88
Certificate issuer: /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
Certificate serial: 07F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
Manifest number: 0FFC
Signing time: Sat 24 Jan 2026 20:28:17 +0000
Manifest this update: Sat 24 Jan 2026 20:28:16 +0000
Manifest next update: Sat 31 Jan 2026 20:28:16 +0000
Files and hashes: 1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: mSLXN+vCbcv2n9dRJDSZ330lSkiqRoNcAfSiJ/8MOE8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl
rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2041 (0x7f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186CDF, serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
Validity
Not Before: Jan 24 20:28:16 2026 GMT
Not After : Jan 31 20:28:16 2026 GMT
Subject: CN=69752b60-45a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:aa:a0:b3:04:7b:98:51:32:0a:62:39:e1:99:
dd:b0:9c:46:5d:e8:86:0a:97:48:11:93:e8:a8:fe:
31:68:e7:c5:89:8a:64:0b:69:55:56:45:f7:cb:8b:
94:f8:b7:9e:cc:0b:00:70:3e:b3:7b:d7:4e:9e:f3:
d7:f4:00:c1:23:f7:f6:40:02:e4:7a:46:b7:89:4b:
b1:a8:8c:be:2e:66:f7:63:80:cf:3b:38:d1:25:a7:
5b:76:01:c0:93:94:ee:20:bc:70:c8:54:80:02:6e:
c4:13:83:44:73:a7:f4:81:86:cf:a7:42:b8:35:93:
21:2b:42:3d:a3:4d:85:31:0b:20:15:71:62:8f:db:
82:60:5c:37:9c:96:a6:a0:46:6a:c1:92:a1:0b:4b:
8c:9a:e9:6d:9c:d9:19:16:6a:b5:27:b8:4f:1b:f0:
c9:e8:0b:ae:56:e9:f6:1c:42:cb:35:67:d5:c4:88:
70:29:3c:99:b4:58:45:9b:2a:2f:d4:a6:52:0d:39:
cc:87:c8:ac:d9:a9:89:aa:d1:31:13:de:b7:5f:ce:
a0:40:c5:6e:cb:9c:7a:d6:47:a7:4d:25:b0:96:f7:
1e:5f:65:14:13:74:b9:5f:62:e3:ab:57:4b:44:86:
3e:d9:f1:5b:f4:04:54:47:65:64:c4:53:f5:d1:88:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:16:4D:E7:88:7D:64:00:44:71:78:50:48:D3:40:43:13:5A:31:8D
X509v3 Authority Key Identifier:
keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:91:8f:69:96:6e:7d:6d:62:86:ce:3b:70:37:11:c8:dd:d4:
bb:7c:6d:66:7c:c5:ff:cc:87:2f:71:c8:90:33:94:3e:c4:0d:
92:d2:8a:be:56:22:e6:77:7a:f5:1f:42:63:cb:2e:36:eb:dc:
09:10:75:cb:0e:79:eb:5c:ea:c2:0f:1b:a5:78:79:15:af:83:
96:8c:6b:5e:3c:4b:d2:11:5f:2b:a6:a6:62:e8:d9:c5:15:19:
2e:9b:24:78:0f:5e:7a:6d:58:9a:1c:bc:26:01:9a:6e:c8:99:
9a:ac:b1:4c:6d:f6:25:b9:18:a5:4b:a4:d0:33:73:ee:18:34:
54:0f:8d:46:0d:d9:81:8a:04:57:4d:aa:4f:99:ba:69:d7:f3:
55:86:ac:eb:9e:cb:9d:1e:0e:36:d9:f0:dd:88:dd:23:78:f1:
57:24:d6:8d:ca:28:cc:55:ea:0f:7f:55:28:13:e3:76:a3:2d:
1b:00:90:54:99:55:b8:3c:e6:59:20:2c:24:79:b0:e5:80:ec:
d2:41:16:64:b9:e0:0e:9e:e8:4f:21:db:fb:fe:81:70:83:dd:
20:1c:f8:0b:6b:22:9f:da:04:03:c7:ed:c1:fd:8d:9f:a1:9f:
d1:e5:3d:7b:3c:8b:a6:88:ba:31:f1:30:99:16:f7:ed:52:5f:
ed:05:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:11:40 2026 by rpki-client