This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
File: Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft (raw, json)
Hash identifier: 1G7JxsxuCEe6+Pv+CerLbXGMmzWTZNAaFd3p0a700mY=
Subject key identifier: C6:4E:19:D2:97:92:39:99:B9:63:E1:27:F0:6D:C6:63:21:2D:46:E9
Authority key identifier: 63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
Certificate issuer: /CN=A91A935D/serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Certificate serial: 06CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
Manifest number: 06C6
Signing time: Sat 24 Jan 2026 21:30:20 +0000
Manifest this update: Sat 24 Jan 2026 21:30:19 +0000
Manifest next update: Sat 31 Jan 2026 21:30:19 +0000
Files and hashes: 1: Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl (hash: dob1PwWlzQjflCaS0kG0VkuCLvZcElAZHn9ZE4Fcoak=)
2: 47EB76428ABA11EB8A85C01BC4F9AE02.roa (hash: Aj09uU6MhDmU5Pp5fUZKM/VJnCnWU68ZEpcYdjejU1M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1742 (0x6ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A935D, serialNumber=6359309EF49B445F6EB5331BDF0A94C5C6EFC37B
Validity
Not Before: Jan 24 21:30:19 2026 GMT
Not After : Jan 31 21:30:19 2026 GMT
Subject: CN=697539eb-01da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:e5:23:8e:0a:97:0b:ac:9b:c3:73:d0:96:
f9:8c:1e:b1:b7:c5:c4:a1:8b:0c:2e:82:b6:2f:82:
d5:4b:5f:f9:0b:8d:01:a9:cf:1d:51:b1:95:88:d5:
db:52:0d:94:cd:44:12:81:c2:0f:8e:c0:87:47:ce:
25:68:fd:c4:35:55:3d:24:3c:9d:a2:c4:12:5e:fc:
d1:11:9b:08:8f:33:54:00:ae:3f:fe:82:75:9a:22:
5a:4f:0b:9e:e9:14:29:71:26:d3:14:ba:14:3b:ed:
37:da:0f:91:4f:d5:69:18:3b:bc:56:ea:c5:f3:e2:
bd:90:02:14:df:56:80:9a:e9:14:73:97:d6:44:15:
b6:32:de:80:b7:57:76:b5:38:f4:4e:d4:5c:68:9a:
93:c2:78:e6:e6:1b:a6:2a:c4:29:7e:11:c8:fe:06:
3a:9d:e7:11:c6:82:e0:4f:8d:56:76:5e:54:d4:52:
b3:84:45:ed:38:15:d3:85:d7:65:c4:d4:d1:02:be:
35:3a:b8:6a:14:4b:18:95:4e:50:29:c0:fb:54:3f:
14:33:b4:aa:2a:c3:8a:f1:0b:9e:82:1f:75:29:3b:
3d:be:d3:00:78:fa:ef:97:c6:4b:20:d6:8c:e3:b3:
54:c8:56:5d:23:ba:49:24:37:85:89:15:e0:33:4c:
47:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4E:19:D2:97:92:39:99:B9:63:E1:27:F0:6D:C6:63:21:2D:46:E9
X509v3 Authority Key Identifier:
keyid:63:59:30:9E:F4:9B:44:5F:6E:B5:33:1B:DF:0A:94:C5:C6:EF:C3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y1kwnvSbRF9utTMb3wqUxcbvw3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A935D/F500F7288AB811EB8707E11AC4F9AE02/Y1kwnvSbRF9utTMb3wqUxcbvw3s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:b9:c0:64:6f:48:2c:f6:8b:d8:ee:47:3f:e9:40:a2:f1:e2:
e4:48:24:ef:66:81:6c:7f:e7:77:cd:ee:9f:e0:83:ea:ac:c4:
7b:94:f6:ef:de:99:93:dd:8c:a4:06:66:7d:10:dd:bf:92:c3:
d9:d9:37:e5:41:45:43:29:83:2e:e2:c6:11:c6:ff:53:0e:d1:
ac:62:c7:bb:60:67:85:c4:30:d4:1b:51:d0:d8:89:97:d0:d5:
60:08:04:de:a3:bc:9a:86:97:3a:a2:f1:3e:a8:85:8e:b3:fc:
47:02:af:25:c5:d9:fc:66:f8:a7:88:49:b4:0e:bc:83:45:11:
6f:28:33:cf:22:19:29:cc:58:db:4a:13:66:39:dd:fb:9f:4c:
01:e3:2d:32:f1:ae:ea:6a:85:7e:ff:82:3e:19:f8:32:e1:e7:
1b:70:7d:80:e2:d6:08:99:ca:b1:5c:58:d3:1d:02:13:79:c6:
34:58:e3:59:e8:c6:1f:5f:52:26:29:a4:51:66:65:b5:ab:d0:
66:b4:0d:e5:b5:4c:f4:3e:ee:0a:00:d8:17:04:ae:66:63:30:
47:02:0e:58:8d:50:d2:db:29:25:bb:63:80:b9:18:55:22:f3:
ec:01:23:55:6a:ef:d4:59:6e:a3:63:bd:88:16:81:1b:d4:40:
67:b5:42:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:13:26 2026 by rpki-client