This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
File: Yg05s6GDeXO9EyafKwasmyc4gg0.mft (raw, json)
Hash identifier: V72hiNz1ieNsAAy/GLmRFqNAVY8E01cqFfU4QxYki5M=
Subject key identifier: A9:AF:9B:DC:79:71:79:45:A3:10:49:DF:DC:65:0E:C8:53:6B:25:69
Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
Manifest number: C4
Signing time: Sun 25 Jan 2026 05:12:00 +0000
Manifest this update: Sun 25 Jan 2026 05:12:00 +0000
Manifest next update: Sun 01 Feb 2026 05:12:00 +0000
Files and hashes: 1: Yg05s6GDeXO9EyafKwasmyc4gg0.crl (hash: iCPE8nvvHUIX/cB1fLyLNMSDF59tuhgH3L+xmGS2ZiE=)
2: F2CD19D6E96011EF8940367DC4F9AE02.roa (hash: ++9L+NGOaw5DrKySyO8La0vQc8M3tYnN6EhjONDGSUQ=)
3: E454FEF2689311F09107C42BC4F9AE02.roa (hash: GyGMKgS9X/eYqbsrmXREtsm2FLIobZJ8M53ERZyQ3yc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl
rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6F68, serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D
Validity
Not Before: Jan 25 05:12:00 2026 GMT
Not After : Feb 1 05:12:00 2026 GMT
Subject: CN=6975a620-4be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:b6:54:94:57:53:06:c0:a9:5a:f6:88:b9:
50:06:23:e5:07:28:32:e4:2b:55:53:0e:d3:2a:ee:
1c:d7:77:5b:a3:2e:cf:c4:d2:8a:60:94:3d:7b:b1:
a7:5b:0c:eb:82:28:7b:1f:79:e9:b4:e1:05:2b:e3:
4e:ff:e9:bd:42:41:47:33:e2:54:ff:8b:a1:85:a4:
1d:44:05:2c:f0:ae:cf:ec:48:2e:22:50:bb:0f:77:
c2:7e:37:e1:c7:95:1e:b3:f3:8a:3f:ba:b5:e9:62:
72:1d:ac:5b:1e:e6:5b:f2:84:43:01:00:ef:64:7c:
44:a4:38:cb:0e:85:bd:2b:8d:86:25:c8:da:fc:60:
0c:bf:b6:56:6f:bd:65:7a:7b:08:c1:88:ef:3f:c5:
ed:d0:c9:df:05:83:94:a9:ab:f0:f7:b5:62:ad:9b:
f9:fa:96:8d:3f:03:7e:48:7e:38:b6:5d:71:f5:2c:
7b:6a:1e:4c:fa:b9:23:55:a7:b3:a7:0c:e0:52:f1:
60:51:86:6b:92:37:a4:1e:dd:e6:70:01:0d:e8:47:
68:2c:76:f0:af:4a:53:97:b4:7c:51:b1:c8:f1:f6:
8d:eb:5b:f7:d3:d1:26:f4:37:33:b8:b7:72:6e:f0:
a4:d4:33:1e:0c:df:6b:1a:b6:df:c7:0c:96:1a:61:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AF:9B:DC:79:71:79:45:A3:10:49:DF:DC:65:0E:C8:53:6B:25:69
X509v3 Authority Key Identifier:
keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:71:36:f9:a4:42:87:c3:39:92:a1:a1:b0:4b:75:10:72:82:
2d:79:9e:2b:c0:18:89:a2:48:9a:06:8c:51:31:7e:45:2b:34:
6a:4e:0e:0c:b2:42:32:39:6c:66:04:40:1e:be:61:db:40:77:
5c:59:34:f8:65:80:3f:7f:32:fd:ab:26:7b:f3:40:d5:53:61:
68:8c:0a:a6:93:47:7a:65:91:cf:4d:34:20:aa:6b:e6:2a:fe:
28:90:5c:6e:eb:d2:84:6c:2e:a5:2b:d0:69:c2:51:a6:11:26:
08:d9:4b:5e:78:a8:96:80:ca:d2:3b:bb:63:84:37:ec:d4:38:
eb:01:70:91:d2:b2:43:c4:6f:f4:14:fc:81:c2:7f:75:86:2d:
a0:be:7d:8d:42:4b:75:6f:23:0e:80:d2:67:3a:b0:e1:a2:eb:
54:b2:63:46:18:d9:2a:c2:d1:8f:e6:df:cf:cb:84:6b:e5:29:
c6:9b:7e:c0:a2:0c:49:b4:04:2f:8d:6d:6e:9c:d5:dd:0f:1c:
0e:22:c8:1e:93:df:e2:d6:b5:f9:1f:a5:5c:60:41:23:83:77:
3e:f1:15:78:bb:6f:d9:80:35:95:c7:52:fc:48:17:49:be:47:
4f:bd:8d:18:c3:1a:02:8c:40:bc:ef:e1:73:77:da:c1:4a:4d:
37:20:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:47:25 2026 by rpki-client