This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft File: -YvpQtnreFakMNG8KUc7xN1nf-o.mft (raw, json) Hash identifier: tlRSdVL8DobxsfbdSnxRXfCbbzWSVgDsH19JUqzv8y4= Subject key identifier: 9D:0C:34:16:55:C6:BC:D0:97:3E:45:2E:95:70:6B:31:E0:53:E5:69 Authority key identifier: F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA Certificate issuer: /CN=A91949C1/serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft Manifest number: 012B Signing time: Sun 25 Jan 2026 03:48:56 +0000 Manifest this update: Sun 25 Jan 2026 03:48:55 +0000 Manifest next update: Sun 01 Feb 2026 03:48:55 +0000 Files and hashes: 1: -YvpQtnreFakMNG8KUc7xN1nf-o.crl (hash: BAHZ5nPAstrTvS18oVZ2Fe2+7vPoGJuH49VP0M7fbTU=) 2: 5E1227E22DD511EF9AFE395EC4F9AE02.roa (hash: //CtK2APwvuKqYfNGso7I/JYlqJyjoNEWh980lWprcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 03:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91949C1, serialNumber=F98BE942D9EB7856A430D1BC29473BC4DD677FEA Validity Not Before: Jan 25 03:48:55 2026 GMT Not After : Feb 1 03:48:55 2026 GMT Subject: CN=697592a8-ea10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:33:ba:48:85:01:7b:6b:9a:58:0e:66:1c: 90:c9:2e:eb:5d:0a:92:a3:ee:6b:ed:22:73:db:19: ed:ec:2f:84:4b:7e:13:de:23:69:61:f3:15:93:c1: 69:92:cb:de:83:66:3f:9e:d9:cd:fa:0a:8e:f1:d3: 99:97:81:3e:08:4f:2b:a6:53:4b:50:a3:41:01:ef: fe:52:71:3e:b0:3f:0e:3c:18:c0:e4:97:78:6e:69: 9c:49:b6:94:5d:c6:c9:43:c9:00:6d:ad:51:10:b6: 4c:28:cb:9d:80:78:6c:16:36:71:1a:66:aa:e8:49: 19:00:c3:18:79:2e:90:56:3f:82:fc:91:4f:96:0c: c2:04:ce:92:ce:34:2a:65:d9:93:24:d2:5b:fb:c1: 08:32:8e:3a:48:ec:c1:03:3a:8d:61:e4:3b:cd:f9: 16:42:e3:e4:52:97:f4:7b:75:fe:85:13:ec:4a:d9: eb:d6:2c:49:c8:0d:93:c6:e7:6c:1d:44:31:0e:9f: 6c:8c:8d:33:b1:cc:05:b1:b3:2a:71:3e:0d:83:aa: 10:69:f9:93:b2:9b:bf:9e:a2:4f:e8:7a:7f:c1:bf: 86:2f:4c:d0:e9:6f:96:93:b7:8a:de:4f:0b:bb:f1: 10:ba:e0:00:74:33:92:03:7d:34:f0:1f:65:d8:ae: 62:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0C:34:16:55:C6:BC:D0:97:3E:45:2E:95:70:6B:31:E0:53:E5:69 X509v3 Authority Key Identifier: keyid:F9:8B:E9:42:D9:EB:78:56:A4:30:D1:BC:29:47:3B:C4:DD:67:7F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-YvpQtnreFakMNG8KUc7xN1nf-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91949C1/09F52B142DD511EF9E505E5DC4F9AE02/-YvpQtnreFakMNG8KUc7xN1nf-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:74:6b:8a:0d:a0:d7:39:26:50:6c:2a:37:93:83:6e:7f:4a: e8:b5:b1:60:af:30:88:14:2a:37:67:1b:e9:8e:cc:31:d2:d6: d0:f2:22:41:81:1b:f0:2a:1c:a1:c7:8f:75:ab:27:e6:d3:0d: fd:d7:c9:e9:a3:b2:b7:cc:af:a7:ed:a7:01:0c:a8:13:b7:24: 5e:96:52:07:b9:5a:2d:19:1b:2b:52:b1:70:93:37:63:e9:7c: 25:26:b2:2b:57:c4:73:29:25:2c:4a:38:8a:df:ee:ce:d6:8d: 90:59:0e:89:d9:69:3a:8f:c9:5a:5b:e8:93:30:53:23:7e:23: e2:e5:27:fb:3b:aa:d1:7f:c7:6f:4c:da:95:94:a5:44:d1:03: 92:b9:2c:29:38:be:0c:72:e0:79:73:79:e9:80:41:ea:35:6b: 36:b9:b9:12:b3:f8:e1:12:25:38:75:9b:7b:63:ef:1f:6e:46: c0:af:0d:07:c0:c3:dd:e9:21:38:50:2d:0b:56:e1:5e:39:55: 6c:c3:be:90:f5:fc:37:ac:2e:69:05:45:b1:b7:8b:03:cf:d1: a6:72:23:09:c0:1a:bf:c0:ee:c3:92:7e:2b:a1:11:a2:f9:9e: 31:88:06:28:7a:6c:a0:c2:73:3b:41:1a:88:cf:93:90:90:d8: 23:d3:96:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ5QzExMTAvBgNVBAUTKEY5OEJFOTQyRDlFQjc4NTZBNDMwRDFCQzI5NDczQkM0 REQ2NzdGRUEwHhcNMjYwMTI1MDM0ODU1WhcNMjYwMjAxMDM0ODU1WjAYMRYwFAYD VQQDDA02OTc1OTJhOC1lYTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtwIzukiFAXtrmlgOZhyQyS7rXQqSo+5r7SJz2xnt7C+ES34T3iNpYfMVk8Fp ksveg2Y/ntnN+gqO8dOZl4E+CE8rplNLUKNBAe/+UnE+sD8OPBjA5Jd4bmmcSbaU XcbJQ8kAba1RELZMKMudgHhsFjZxGmaq6EkZAMMYeS6QVj+C/JFPlgzCBM6SzjQq ZdmTJNJb+8EIMo46SOzBAzqNYeQ7zfkWQuPkUpf0e3X+hRPsStnr1ixJyA2Txuds HUQxDp9sjI0zscwFsbMqcT4Ng6oQafmTspu/nqJP6Hp/wb+GL0zQ6W+Wk7eK3k8L u/EQuuAAdDOSA3008B9l2K5iGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0MNBZV xrzQlz5FLpVwazHgU+VpMB8GA1UdIwQYMBaAFPmL6ULZ63hWpDDRvClHO8TdZ3/q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDlDMS8wOUY1MkIxNDJE RDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVGYWtNTkc4S1VjN3hOMW5m LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ZdnBRdG5yZUZha01ORzhLVWM3eE4xbmYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDlDMS8wOUY1MkIxNDJERDUxMUVGOUU1MDVFNURDNEY5QUUwMi8tWXZwUXRucmVG YWtNTkc4S1VjN3hOMW5mLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgdGuKDaDXOSZQbCo3k4Nuf0rotbFgrzCIFCo3Zxvpjswx0tbQ8iJB gRvwKhyhx491qyfm0w3918npo7K3zK+n7acBDKgTtyRellIHuVotGRsrUrFwkzdj 6XwlJrIrV8RzKSUsSjiK3+7O1o2QWQ6J2Wk6j8laW+iTMFMjfiPi5Sf7O6rRf8dv TNqVlKVE0QOSuSwpOL4McuB5c3npgEHqNWs2ubkSs/jhEiU4dZt7Y+8fbkbArw0H wMPd6SE4UC0LVuFeOVVsw76Q9fw3rC5pBUWxt4sDz9GmciMJwBq/wO7Dkn4roRGi +Z4xiAYoemygwnM7QRqIz5OQkNgj05Y0 -----END CERTIFICATE-----Generated at Sun Jan 25 11:01:25 2026 by rpki-client