This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
File: yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft (raw, json)
Hash identifier: o78Wfo+nsiWPSN6JWCTc1ZRt/xTtoVrCjWdWSG3xTzs=
Subject key identifier: 57:9F:04:5D:12:C8:96:27:C3:44:27:EA:47:9D:94:B9:75:E0:76:14
Authority key identifier: C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
Certificate issuer: /CN=A91B49F2/serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Certificate serial: 0ECA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
Manifest number: 0EB4
Signing time: Sat 24 Jan 2026 17:22:47 +0000
Manifest this update: Sat 24 Jan 2026 17:22:46 +0000
Manifest next update: Sat 31 Jan 2026 17:22:46 +0000
Files and hashes: 1: yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl (hash: y5SP/SzQYKudiZcSimceJSTxD9CQ4LVsAOyMaifz7EQ=)
2: BB0AA59C0A3D11EB82ECEA4BC4F9AE02.roa (hash: ecUYAzKP1VHNDV8/DURQ3XmWYJTnzDR9mLUMMYKH7wE=)
3: 79395BE68EB311EF9A8DFC3CC4F9AE02.roa (hash: RU2Bp78eGDXSscZxxDiygRwZ64V3JmS10+rUng9roo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 17:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3786 (0xeca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B49F2, serialNumber=C873BB610B913C3ECDC708A265A74B1141A76F54
Validity
Not Before: Jan 24 17:22:46 2026 GMT
Not After : Jan 31 17:22:46 2026 GMT
Subject: CN=6974ffe6-0526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:46:b7:42:fa:c0:5f:1d:92:96:e5:65:4e:d9:
e8:7f:f0:1b:62:51:96:8f:ba:15:dd:80:61:6d:3d:
51:58:a3:3b:07:2a:ac:96:09:4c:f1:d2:40:99:b1:
f6:67:42:71:79:e3:71:9e:1c:0d:b2:3e:89:50:9f:
1f:4d:00:69:40:14:88:4d:53:bb:08:bf:0a:3f:d2:
d3:57:51:f1:f3:b6:9c:db:e8:c3:23:06:c7:73:03:
82:f5:8b:18:f5:c9:e4:50:b4:1d:74:61:10:66:26:
63:69:a7:c2:04:85:0d:b3:8e:88:a6:b0:58:ca:b0:
db:f5:31:06:cf:62:af:79:fd:f5:51:7d:03:68:93:
a4:68:43:5e:7f:73:88:e4:29:c3:85:7f:00:bb:b2:
30:4f:3d:b6:96:b1:43:b8:c6:48:d3:ad:91:a3:c1:
a3:1a:7e:f7:cd:54:9c:dd:b3:0b:38:f6:c5:51:31:
d6:97:e2:a3:9f:41:84:ae:e1:cd:8c:0c:28:f9:da:
98:83:89:09:cb:78:a5:15:21:73:a9:b5:c8:18:54:
8c:36:b5:d6:73:de:f5:f5:84:ce:75:47:25:ea:65:
b9:87:e8:3c:db:ef:e7:21:a6:c7:e4:21:61:a1:f3:
26:c2:ad:5d:c7:81:b6:0b:da:18:de:c9:2c:f3:ce:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9F:04:5D:12:C8:96:27:C3:44:27:EA:47:9D:94:B9:75:E0:76:14
X509v3 Authority Key Identifier:
keyid:C8:73:BB:61:0B:91:3C:3E:CD:C7:08:A2:65:A7:4B:11:41:A7:6F:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yHO7YQuRPD7NxwiiZadLEUGnb1Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B49F2/82E4C2A0A6EE11E985F3B011C4F9AE02/yHO7YQuRPD7NxwiiZadLEUGnb1Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:9d:81:13:24:3f:70:9e:ac:1c:2f:6a:12:01:e7:f5:30:58:
0e:f6:4a:75:f0:bb:80:cc:c7:f7:93:7d:d9:0c:cf:bb:ba:a3:
dd:f9:b5:de:7a:d9:17:56:22:d4:a2:3c:5f:fc:0b:75:55:88:
2b:1e:7f:4c:0b:da:99:7a:4b:2d:07:59:c5:0d:6d:c0:b5:62:
2f:2c:a1:f8:20:45:2e:4e:cb:3c:4b:b2:10:a7:6d:10:89:c6:
8e:bc:4f:23:6d:7b:76:59:be:c9:a3:5d:a5:de:42:2b:cf:9b:
89:37:64:49:cd:ed:69:ae:7e:93:a0:ba:2b:2a:a4:c6:93:7f:
6a:6c:e2:3a:c2:64:3b:4c:92:a6:40:76:75:c1:29:88:74:3d:
f1:36:a0:a5:92:22:14:3c:74:6c:d5:fe:3a:7c:66:96:f1:db:
3f:29:6a:bf:82:42:40:19:2d:b8:90:66:12:cf:18:96:3d:a6:
12:7b:96:03:3f:cb:d7:a8:a0:b8:e2:39:33:c2:7e:89:6b:5c:
40:39:bd:d3:44:9f:27:b2:94:8e:40:27:22:3c:0a:06:26:93:
5a:a6:28:43:1b:92:df:72:8f:54:80:09:ad:17:9d:ce:94:87:
33:a5:82:7c:7a:f4:59:e3:cf:f8:59:ed:0e:29:0f:0a:a3:f8:
02:c1:55:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:32:51 2026 by rpki-client