This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
File: yod6eu8duwRWSH9h_uaZNjdUHl0.mft (raw, json)
Hash identifier: 3ObGgYE4syIitYTKJsYOK7d6nCUEXXjpb7TreAAxe9s=
Subject key identifier: 69:5A:BB:04:D2:78:D0:70:E5:60:0E:8E:BE:BC:38:D7:35:FD:1E:EB
Authority key identifier: CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
Certificate issuer: /CN=A91AA053/serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Certificate serial: 0122
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
Manifest number: 0120
Signing time: Sat 24 Jan 2026 20:48:09 +0000
Manifest this update: Sat 24 Jan 2026 20:48:08 +0000
Manifest next update: Sat 31 Jan 2026 20:48:08 +0000
Files and hashes: 1: yod6eu8duwRWSH9h_uaZNjdUHl0.crl (hash: SurNQjCnQoKoG2xOvK74AlEWZ5jGUvbJxCFRpsZlNvc=)
2: E098BB864FA311F0B96FBA3DC4F9AE02.roa (hash: p1NZ9NnirQbZI+pUJKRFnk/LQesx95uqpmbnkuNBqak=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA053, serialNumber=CA877A7AEF1DBB0456487F61FEE6993637541E5D
Validity
Not Before: Jan 24 20:48:08 2026 GMT
Not After : Jan 31 20:48:08 2026 GMT
Subject: CN=69753009-9458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:da:bb:c0:7a:65:90:eb:83:2a:c6:4c:fe:63:
9f:44:29:c2:14:db:0c:38:44:3f:45:fc:e0:8d:d1:
f0:56:17:37:0f:5e:07:4c:00:73:41:1a:0c:b6:6c:
a3:df:92:2c:89:3d:7a:5b:a6:f7:ba:b6:ba:e4:d9:
0b:66:db:04:b0:fa:22:87:84:96:27:37:f2:24:34:
83:b4:eb:5d:ef:cf:5d:fa:50:d8:3f:4c:84:a8:b7:
82:17:32:96:80:08:85:95:12:58:81:95:6e:dc:a4:
f0:6d:5d:44:bc:b6:15:72:53:f8:57:41:22:08:b2:
27:3d:50:45:e9:e7:aa:48:27:e7:41:b9:0e:ce:99:
b2:08:4c:cd:2a:c6:62:be:82:44:cf:61:da:5e:81:
46:07:64:bd:24:8c:dc:89:01:eb:26:31:ce:60:49:
3a:1c:f5:53:8d:7c:40:75:0a:70:90:7c:43:49:3a:
4b:07:33:e7:28:c4:6f:bd:6e:46:15:d9:e3:c7:d3:
6f:44:b1:9d:e7:fe:4e:c6:cc:3b:f6:74:42:84:9a:
5a:c0:1d:2c:a3:10:cb:b7:d4:ec:fb:68:04:61:14:
eb:19:d2:91:f3:a7:1f:a7:5f:09:74:5e:d0:cd:45:
09:d5:7d:c7:8f:59:e2:22:aa:9b:92:d3:50:35:02:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5A:BB:04:D2:78:D0:70:E5:60:0E:8E:BE:BC:38:D7:35:FD:1E:EB
X509v3 Authority Key Identifier:
keyid:CA:87:7A:7A:EF:1D:BB:04:56:48:7F:61:FE:E6:99:36:37:54:1E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yod6eu8duwRWSH9h_uaZNjdUHl0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/8720305E449911EFBAC67153C4F9AE02/yod6eu8duwRWSH9h_uaZNjdUHl0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:fa:e8:fd:1e:8a:a4:e1:4c:31:b3:88:3f:e9:d8:c3:d1:f6:
33:9b:2c:36:4b:b9:f4:27:7a:b2:e3:a0:4c:61:ad:ce:5e:7b:
7f:02:87:f8:d4:f8:1c:1e:56:75:86:69:0c:d0:1a:4c:c3:90:
80:28:f3:0b:d3:93:6e:51:f1:e9:9a:9f:42:f6:39:6d:89:c2:
7b:dd:55:47:0d:29:e9:70:3d:f9:6d:1e:e2:a6:c8:a1:e3:8b:
36:14:47:95:f9:df:89:e0:d2:00:88:6f:75:10:91:a5:d2:2e:
b9:38:08:a6:ad:5f:d2:1a:18:42:92:55:91:f1:20:83:8f:48:
f3:24:be:5f:cd:24:3f:19:ad:a9:79:0e:10:de:de:68:e0:ac:
35:7c:84:01:80:5e:4f:8a:2e:40:e1:83:62:f9:8e:e7:fa:66:
43:6e:d0:3e:80:7b:51:3e:97:f3:47:7a:9e:34:70:3d:46:37:
43:3b:62:40:02:45:fe:00:42:bf:5a:84:d3:b4:39:6e:5c:15:
7f:bd:d5:67:7b:50:be:ed:c7:01:a8:80:65:14:5d:7e:30:80:
10:2b:8d:dd:1f:9f:67:71:1d:fb:64:18:7e:b6:97:2d:cb:c8:
1a:e3:4b:ac:3e:75:97:2d:cb:cb:5d:35:f6:fe:36:62:dd:6f:
92:c6:96:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUEwNTMxMTAvBgNVBAUTKENBODc3QTdBRUYxREJCMDQ1NjQ4N0Y2MUZFRTY5OTM2
Mzc1NDFFNUQwHhcNMjYwMTI0MjA0ODA4WhcNMjYwMTMxMjA0ODA4WjAYMRYwFAYD
VQQDDA02OTc1MzAwOS05NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7dq7wHplkOuDKsZM/mOfRCnCFNsMOEQ/RfzgjdHwVhc3D14HTABzQRoMtmyj
35IsiT16W6b3ura65NkLZtsEsPoih4SWJzfyJDSDtOtd789d+lDYP0yEqLeCFzKW
gAiFlRJYgZVu3KTwbV1EvLYVclP4V0EiCLInPVBF6eeqSCfnQbkOzpmyCEzNKsZi
voJEz2HaXoFGB2S9JIzciQHrJjHOYEk6HPVTjXxAdQpwkHxDSTpLBzPnKMRvvW5G
Fdnjx9NvRLGd5/5Oxsw79nRChJpawB0soxDLt9Ts+2gEYRTrGdKR86cfp18JdF7Q
zUUJ1X3Hj1niIqqbktNQNQIxOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGlauwTS
eNBw5WAOjr68ONc1/R7rMB8GA1UdIwQYMBaAFMqHenrvHbsEVkh/Yf7mmTY3VB5d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My84NzIwMzA1RTQ0
OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3UldTSDloX3VhWk5qZFVI
bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3lvZDZldThkdXdSV1NIOWhfdWFaTmpkVUhsMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTA1My84NzIwMzA1RTQ0OTkxMUVGQkFDNjcxNTNDNEY5QUUwMi95b2Q2ZXU4ZHV3
UldTSDloX3VhWk5qZFVIbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAH+uj9Hoqk4Uwxs4g/6djD0fYzmyw2S7n0J3qy46BMYa3OXnt/Aof4
1PgcHlZ1hmkM0BpMw5CAKPML05NuUfHpmp9C9jlticJ73VVHDSnpcD35bR7ipsih
44s2FEeV+d+J4NIAiG91EJGl0i65OAimrV/SGhhCklWR8SCDj0jzJL5fzSQ/Ga2p
eQ4Q3t5o4Kw1fIQBgF5Pii5A4YNi+Y7n+mZDbtA+gHtRPpfzR3qeNHA9RjdDO2JA
AkX+AEK/WoTTtDluXBV/vdVne1C+7ccBqIBlFF1+MIAQK43dH59ncR37ZBh+tpct
y8ga40usPnWXLcvLXTX2/jZi3W+Sxpbv
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:02:59 2026 by rpki-client