This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft
File: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft (raw, json)
Hash identifier: XhkXMJxktUeZQBD3yVUvEVPCxFrTwURDuv1bUD9hvvU=
Subject key identifier: BD:69:BD:FF:00:17:5B:59:F7:1A:96:F1:5D:AD:ED:03:77:A1:65:75
Authority key identifier: CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09
Certificate issuer: /CN=A919B5BB/serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309
Certificate serial: 2150
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft
Manifest number: 2144
Signing time: Sat 24 Jan 2026 15:45:18 +0000
Manifest this update: Sat 24 Jan 2026 15:45:17 +0000
Manifest next update: Sat 31 Jan 2026 15:45:17 +0000
Files and hashes: 1: ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl (hash: fUCwhn+ui3hpE3G4+Y5tpvVMOi6KovvFzxoKeXSAnNs=)
2: C49E2E22FF0111E591C15659C4F9AE02.roa (hash: oBzh3F7vXr0+lbZGHQqiGoRJzyM9Q1R1dON0koDXQXQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl
rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 15:45:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8528 (0x2150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B5BB, serialNumber=CAC4478F0FDD9AE41E24E9FC67F851FF43C33309
Validity
Not Before: Jan 24 15:45:17 2026 GMT
Not After : Jan 31 15:45:17 2026 GMT
Subject: CN=6974e90d-68d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fe:81:b5:8b:2f:d2:0c:b4:b9:c3:79:52:64:
fb:e3:21:a6:dc:c6:77:8a:63:ea:ea:73:47:a4:d9:
d1:18:97:8e:02:9d:a3:07:a7:f3:10:8f:66:40:3c:
70:dc:eb:a9:ad:12:ef:32:31:e3:36:2b:67:01:4b:
82:ee:3b:89:5d:51:f8:0c:9b:a5:6a:c8:91:35:a4:
d5:c7:f2:d0:01:35:0c:1b:d3:c3:c1:cc:11:a0:25:
3c:a0:45:66:00:3a:0c:b5:13:be:cc:bc:d2:d5:24:
b3:08:0b:24:d7:7d:fa:58:0a:66:0d:ad:39:9a:5d:
b0:e3:b8:10:42:37:fb:13:df:c0:0c:4e:91:42:40:
b4:df:da:3e:c8:42:05:69:90:ea:81:72:ac:3f:37:
56:9d:2c:cc:d7:b7:d5:c3:c8:8b:81:0f:90:f2:f4:
aa:a5:97:3a:4f:c9:e5:f1:e1:ec:46:e2:9a:3f:32:
f9:d4:f8:ec:16:21:de:05:ee:93:95:fc:f7:0f:05:
c6:d2:bb:b6:c4:9e:99:fb:1e:34:94:b6:22:07:41:
79:ea:ca:9a:35:a5:ca:3a:6c:49:bb:64:8e:e9:70:
5c:18:cc:bb:a9:55:1c:8a:02:f8:c3:58:f7:f7:95:
9e:4c:0e:fc:4f:ab:eb:99:46:c4:8d:ba:5b:f1:2e:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:69:BD:FF:00:17:5B:59:F7:1A:96:F1:5D:AD:ED:03:77:A1:65:75
X509v3 Authority Key Identifier:
keyid:CA:C4:47:8F:0F:DD:9A:E4:1E:24:E9:FC:67:F8:51:FF:43:C3:33:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B5BB/44BBC14CFF0111E5B1CFB058C4F9AE02/ysRHjw_dmuQeJOn8Z_hR_0PDMwk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:82:d7:3d:58:80:59:f4:f4:03:16:ee:c5:0e:f3:47:cf:76:
26:7a:98:15:20:d9:2e:b1:de:37:06:d7:0c:3c:d7:7e:47:5d:
ff:4c:60:92:e4:ce:a5:93:a9:1c:55:d5:eb:01:12:33:96:ad:
6c:59:81:f6:5e:e1:9c:c1:36:83:36:ae:c8:6f:13:37:a4:4a:
e6:d6:b9:4e:a8:83:7a:99:3f:cc:00:d9:72:80:57:f9:aa:cf:
d6:16:5a:9f:3e:83:2e:e7:65:20:c7:67:68:2f:70:64:c3:b9:
4b:79:82:09:ee:ff:97:3f:2c:6a:d6:12:e5:cf:e0:5a:d5:43:
14:54:39:31:3c:fe:b1:1e:ca:d9:0d:59:8c:4f:de:f3:63:46:
7b:85:a6:dc:e2:74:5d:36:90:09:41:eb:b9:da:a9:e5:d1:79:
fe:f0:97:7a:1d:12:f9:f6:2e:b3:bb:ee:55:d4:51:53:3b:34:
6b:3b:08:a0:92:fc:8c:be:4b:e5:3a:05:4c:be:bc:1d:05:83:
bc:0c:3c:3d:c0:23:32:b2:e5:be:60:68:32:84:21:34:95:1d:
c4:84:31:2c:10:c2:10:61:40:ed:df:2b:7f:d7:ca:c8:41:36:
be:64:a2:36:40:d2:62:12:eb:b5:e7:21:5d:b6:ef:12:47:75:
e6:35:c3:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI1QkIxMTAvBgNVBAUTKENBQzQ0NzhGMEZERDlBRTQxRTI0RTlGQzY3Rjg1MUZG
NDNDMzMzMDkwHhcNMjYwMTI0MTU0NTE3WhcNMjYwMTMxMTU0NTE3WjAYMRYwFAYD
VQQDDA02OTc0ZTkwZC02OGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxf6BtYsv0gy0ucN5UmT74yGm3MZ3imPq6nNHpNnRGJeOAp2jB6fzEI9mQDxw
3OuprRLvMjHjNitnAUuC7juJXVH4DJulasiRNaTVx/LQATUMG9PDwcwRoCU8oEVm
ADoMtRO+zLzS1SSzCAsk1336WApmDa05ml2w47gQQjf7E9/ADE6RQkC039o+yEIF
aZDqgXKsPzdWnSzM17fVw8iLgQ+Q8vSqpZc6T8nl8eHsRuKaPzL51PjsFiHeBe6T
lfz3DwXG0ru2xJ6Z+x40lLYiB0F56sqaNaXKOmxJu2SO6XBcGMy7qVUcigL4w1j3
95WeTA78T6vrmUbEjbpb8S5ujQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1pvf8A
F1tZ9xqW8V2t7QN3oWV1MB8GA1UdIwQYMBaAFMrER48P3ZrkHiTp/Gf4Uf9DwzMJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjVCQi80NEJCQzE0Q0ZG
MDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11UWVKT244Wl9oUl8wUERN
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lzUkhqd19kbXVRZUpPbjhaX2hSXzBQRE13ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QjVCQi80NEJCQzE0Q0ZGMDExMUU1QjFDRkIwNThDNEY5QUUwMi95c1JIandfZG11
UWVKT244Wl9oUl8wUERNd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVgtc9WIBZ9PQDFu7FDvNHz3YmepgVINkusd43BtcMPNd+R13/TGCS
5M6lk6kcVdXrARIzlq1sWYH2XuGcwTaDNq7IbxM3pErm1rlOqIN6mT/MANlygFf5
qs/WFlqfPoMu52Ugx2doL3Bkw7lLeYIJ7v+XPyxq1hLlz+Ba1UMUVDkxPP6xHsrZ
DVmMT97zY0Z7habc4nRdNpAJQeu52qnl0Xn+8Jd6HRL59i6zu+5V1FFTOzRrOwig
kvyMvkvlOgVMvrwdBYO8DDw9wCMysuW+YGgyhCE0lR3EhDEsEMIQYUDt3yt/18rI
QTa+ZKI2QNJiEuu15yFdtu8SR3XmNcMB
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:37 2026 by rpki-client