This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
File: YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft (raw, json)
Hash identifier: VKfNORhdy+i/SbR0I5hf5REG1Iip9pHFodperKiTodQ=
Subject key identifier: 84:90:73:AC:03:0C:C2:DB:E0:75:55:BA:9C:34:8D:F8:67:34:07:33
Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41
Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
Certificate serial: 0860
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
Manifest number: 0855
Signing time: Sat 24 Jan 2026 20:09:44 +0000
Manifest this update: Sat 24 Jan 2026 20:09:43 +0000
Manifest next update: Sat 31 Jan 2026 20:09:43 +0000
Files and hashes: 1: YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl (hash: JF5IxHzfaov1fXOheFkKJPmZGanIRUJPpJPc3ISL5ic=)
2: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (hash: SY9pZakTz+Y+bprs2Qaz2rmG63LM9RAeEr8PBsMxkEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl
rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 20:09:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441
Validity
Not Before: Jan 24 20:09:43 2026 GMT
Not After : Jan 31 20:09:43 2026 GMT
Subject: CN=69752708-0554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:e9:6f:e2:aa:85:d1:b8:c9:14:94:1a:55:
b3:36:16:74:63:37:2c:06:94:ad:16:5f:e5:1e:d1:
6b:a1:d9:55:de:37:ec:2a:70:86:86:f3:2e:a2:54:
1a:91:a7:04:b0:1e:87:bf:66:fa:55:84:8d:9d:56:
77:55:03:cb:fd:c2:63:27:e7:b1:78:0d:35:6d:3b:
09:3f:68:eb:2d:a5:73:b5:41:70:4b:6a:d2:9a:c7:
39:97:cd:9e:42:45:d0:0e:44:86:18:a5:ec:ac:1f:
9e:ad:ba:eb:ed:71:fb:c4:ac:bb:57:d9:22:2d:71:
a5:16:04:a0:ae:ae:f4:c5:07:d4:64:bf:5f:c4:f2:
4c:3f:59:b0:2c:b2:c5:b1:27:c4:f8:82:39:fa:48:
f6:38:78:44:55:88:36:c7:2c:75:a7:5f:ea:f4:7b:
07:17:d5:60:6e:a9:b1:98:a3:9b:70:87:d1:e9:ea:
9f:df:a8:c1:cd:c1:10:36:3d:48:60:2a:95:58:04:
eb:70:f2:03:e3:ab:40:5d:86:3a:0d:8d:fc:35:d1:
43:8c:45:cc:0f:6b:6b:3a:10:62:97:4d:cf:50:ac:
1f:14:96:db:a3:13:86:54:b8:9b:38:21:e8:9a:0b:
68:5c:99:f0:d9:37:42:44:90:0f:23:cc:2a:d3:27:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:90:73:AC:03:0C:C2:DB:E0:75:55:BA:9C:34:8D:F8:67:34:07:33
X509v3 Authority Key Identifier:
keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:32:af:2e:cf:ff:c4:aa:e2:7b:92:8c:e6:0a:b6:ad:32:9a:
87:e5:fb:36:f7:f2:25:de:17:cd:33:dc:d7:78:5d:9d:ed:5f:
fd:ec:24:16:6a:d7:b3:99:01:ba:16:0b:c9:b0:bc:87:48:a2:
4e:25:de:0a:09:b9:a6:4e:29:dd:53:15:1a:03:37:1c:4f:47:
d1:40:bb:89:bd:04:9a:fd:b3:92:97:40:a0:fa:68:75:4b:4b:
ef:e4:84:d6:af:e9:79:94:3c:75:61:8e:1f:20:ce:db:e0:1d:
12:13:36:af:9e:2f:39:37:f5:4e:c0:5c:07:56:13:53:ec:1d:
ca:c3:90:62:5a:dc:a4:4e:3f:ec:97:02:70:f1:56:95:3f:73:
f3:16:e4:3a:34:6f:ff:10:7f:1e:d6:c9:b8:67:5c:cc:7f:38:
f5:26:41:f5:60:5d:75:3d:2d:53:17:2b:0e:49:60:81:c9:3d:
00:31:46:69:93:b1:37:3b:e7:42:1a:71:06:57:da:c6:a0:f8:
53:48:75:9e:6d:1e:1e:db:d4:4c:f4:a9:3b:03:fc:c0:00:93:
48:b4:a5:3f:48:cc:0f:ab:8e:3f:d6:31:04:bb:ba:2e:9d:4f:
07:5f:94:4e:c4:c5:1b:e1:bf:7c:57:ee:2b:f8:3c:04:3c:ca:
1e:ca:e8:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC
RDMyMUI0NDEwHhcNMjYwMTI0MjAwOTQzWhcNMjYwMTMxMjAwOTQzWjAYMRYwFAYD
VQQDDA02OTc1MjcwOC0wNTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwTjpb+KqhdG4yRSUGlWzNhZ0YzcsBpStFl/lHtFrodlV3jfsKnCGhvMuolQa
kacEsB6Hv2b6VYSNnVZ3VQPL/cJjJ+exeA01bTsJP2jrLaVztUFwS2rSmsc5l82e
QkXQDkSGGKXsrB+erbrr7XH7xKy7V9kiLXGlFgSgrq70xQfUZL9fxPJMP1mwLLLF
sSfE+II5+kj2OHhEVYg2xyx1p1/q9HsHF9VgbqmxmKObcIfR6eqf36jBzcEQNj1I
YCqVWATrcPID46tAXYY6DY38NdFDjEXMD2trOhBil03PUKwfFJbboxOGVLibOCHo
mgtoXJnw2TdCRJAPI8wq0yencQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISQc6wD
DMLb4HVVupw0jfhnNAczMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz
MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RjNDNi82MzFDQzE2MEYzMzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpf
eEdTb2xPMUhxZkc5TWh0RUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+Mq8uz//EquJ7kozmCratMpqH5fs29/Il3hfNM9zXeF2d7V/97CQW
atezmQG6FgvJsLyHSKJOJd4KCbmmTindUxUaAzccT0fRQLuJvQSa/bOSl0Cg+mh1
S0vv5ITWr+l5lDx1YY4fIM7b4B0SEzavni85N/VOwFwHVhNT7B3Kw5BiWtykTj/s
lwJw8VaVP3PzFuQ6NG//EH8e1sm4Z1zMfzj1JkH1YF11PS1TFysOSWCByT0AMUZp
k7E3O+dCGnEGV9rGoPhTSHWebR4e29RM9Kk7A/zAAJNItKU/SMwPq44/1jEEu7ou
nU8HX5ROxMUb4b98V+4r+DwEPMoeyuiR
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:23:49 2026 by rpki-client