This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
File: YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft (raw, json)
Hash identifier: pXHH8wBeJgFkKcBngXCJgF6K2uub1AC5RlsbpyLUV7A=
Subject key identifier: B6:13:1C:72:DC:BB:78:5F:56:B5:E4:17:1B:70:55:86:BB:70:7B:FD
Authority key identifier: 60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
Certificate issuer: /CN=A91ABC49/serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
Certificate serial: 0801
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
Manifest number: 0801
Signing time: Sat 24 Jan 2026 20:25:32 +0000
Manifest this update: Sat 24 Jan 2026 20:25:32 +0000
Manifest next update: Sat 31 Jan 2026 20:25:32 +0000
Files and hashes: 1: YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl (hash: 9V3kEiBXF8jlBR3Apgayp75n7sZ7HSKC4iYhVVUz8LY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl
rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2049 (0x801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ABC49, serialNumber=60355C0D99726FEE9EE47AB6FAE6DF0E9F381F12
Validity
Not Before: Jan 24 20:25:32 2026 GMT
Not After : Jan 31 20:25:32 2026 GMT
Subject: CN=69752abc-33e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:21:6b:6b:7b:eb:ee:09:65:f7:2d:1f:e5:
37:4f:af:62:1d:d7:51:63:49:aa:ed:81:af:6b:48:
84:28:4a:08:3a:1c:08:ac:b1:77:b6:62:8e:16:1d:
d6:aa:27:71:8e:ba:df:17:35:5d:62:a5:55:fb:ec:
d4:4a:a4:3b:93:b9:56:0c:20:89:72:f1:af:4e:5c:
f8:a4:0f:ac:35:b8:98:2c:b0:81:52:f3:34:68:e2:
08:b3:60:b9:4d:7c:fc:d9:3a:d6:b1:d2:c0:1a:70:
37:9b:56:57:e9:cf:bb:cc:94:b3:a3:61:87:74:66:
08:88:cf:a1:df:d6:83:fb:0a:a7:7c:95:ff:01:3e:
f0:ab:09:13:dc:3a:73:c9:a1:a3:41:83:5c:3f:7f:
ce:7e:c3:fe:e9:20:d0:31:d1:4d:ba:36:14:76:7d:
c0:5b:79:67:97:94:83:9e:7c:e1:1e:26:02:39:fc:
0e:29:a8:53:60:1f:18:8c:c2:19:e3:62:bb:4a:bc:
e7:56:ec:cc:b0:60:aa:0d:07:ed:76:0c:45:d1:ba:
1f:59:4c:92:b2:02:ef:9f:4d:71:c4:2e:bc:f6:89:
8d:72:b0:b4:9b:cd:99:f3:7a:5e:eb:ca:37:fd:a8:
a7:8e:bb:d7:47:8a:16:be:7c:c8:6c:60:f1:67:d9:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:13:1C:72:DC:BB:78:5F:56:B5:E4:17:1B:70:55:86:BB:70:7B:FD
X509v3 Authority Key Identifier:
keyid:60:35:5C:0D:99:72:6F:EE:9E:E4:7A:B6:FA:E6:DF:0E:9F:38:1F:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YDVcDZlyb-6e5Hq2-ubfDp84HxI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABC49/E55237EC0D7711EBB53AEA40C4F9AE02/YDVcDZlyb-6e5Hq2-ubfDp84HxI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2f:4b:76:aa:4e:e7:3d:7e:3f:63:9d:c5:2e:37:12:47:67:
70:0f:03:90:cc:0b:98:9f:eb:85:b8:a8:66:71:ce:99:d6:d5:
13:d1:41:02:9b:82:e7:d4:99:01:30:7d:21:18:bd:7a:46:51:
99:cb:51:a3:6c:b8:c5:18:0b:92:a7:d2:85:54:cd:d7:3a:24:
16:93:77:2a:e5:de:34:34:d9:f1:ff:74:ac:18:e8:4d:f8:7f:
14:c3:78:9e:9f:41:a0:3f:02:eb:9b:c5:e0:86:a0:e1:68:c7:
36:b5:0c:e7:5b:86:fe:5c:76:c9:28:ca:2a:6e:19:f4:40:77:
85:34:0b:03:32:99:00:4e:7a:6d:e7:e3:b3:da:ab:92:55:47:
04:09:61:1e:ef:3d:7d:ff:53:3f:a6:dc:c5:2c:58:42:b5:6c:
8d:3a:6e:7c:7e:94:04:8c:74:f2:dc:c6:b9:a5:a9:3c:82:10:
ed:7e:47:64:9d:40:1e:d4:9f:0c:6b:89:c7:ee:da:63:d5:3c:
a5:43:c9:f7:c8:6f:6f:7b:f9:20:fa:e9:f5:b5:f6:af:3b:bc:
eb:e4:ac:a9:8f:95:e3:88:79:41:68:7e:56:e2:54:64:a5:cb:
64:e4:59:ad:4e:31:fc:24:b5:7f:a1:0e:c4:0a:be:18:02:cb:
a9:10:0d:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCAEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJDNDkxMTAvBgNVBAUTKDYwMzU1QzBEOTk3MjZGRUU5RUU0N0FCNkZBRTZERjBF
OUYzODFGMTIwHhcNMjYwMTI0MjAyNTMyWhcNMjYwMTMxMjAyNTMyWjAYMRYwFAYD
VQQDDA02OTc1MmFiYy0zM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlLAha2t76+4JZfctH+U3T69iHddRY0mq7YGva0iEKEoIOhwIrLF3tmKOFh3W
qidxjrrfFzVdYqVV++zUSqQ7k7lWDCCJcvGvTlz4pA+sNbiYLLCBUvM0aOIIs2C5
TXz82TrWsdLAGnA3m1ZX6c+7zJSzo2GHdGYIiM+h39aD+wqnfJX/AT7wqwkT3Dpz
yaGjQYNcP3/OfsP+6SDQMdFNujYUdn3AW3lnl5SDnnzhHiYCOfwOKahTYB8YjMIZ
42K7SrznVuzMsGCqDQftdgxF0bofWUySsgLvn01xxC689omNcrC0m82Z83pe68o3
/ainjrvXR4oWvnzIbGDxZ9n9mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYTHHLc
u3hfVrXkFxtwVYa7cHv9MB8GA1UdIwQYMBaAFGA1XA2Zcm/unuR6tvrm3w6fOB8S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkM0OS9FNTUyMzdFQzBE
NzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWItNmU1SHEyLXViZkRwODRI
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1lEVmNEWmx5Yi02ZTVIcTItdWJmRHA4NEh4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkM0OS9FNTUyMzdFQzBENzcxMUVCQjUzQUVBNDBDNEY5QUUwMi9ZRFZjRFpseWIt
NmU1SHEyLXViZkRwODRIeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC6L0t2qk7nPX4/Y53FLjcSR2dwDwOQzAuYn+uFuKhmcc6Z1tUT0UEC
m4Ln1JkBMH0hGL16RlGZy1GjbLjFGAuSp9KFVM3XOiQWk3cq5d40NNnx/3SsGOhN
+H8Uw3ien0GgPwLrm8XghqDhaMc2tQznW4b+XHbJKMoqbhn0QHeFNAsDMpkATnpt
5+Oz2quSVUcECWEe7z19/1M/ptzFLFhCtWyNOm58fpQEjHTy3Ma5pak8ghDtfkdk
nUAe1J8Ma4nH7tpj1TylQ8n3yG9ve/kg+un1tfavO7zr5Kypj5XjiHlBaH5W4lRk
pctk5FmtTjH8JLV/oQ7ECr4YAsupEA1Y
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:46:32 2026 by rpki-client