This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
File: LYC7UpVYC-No2mj7jQPqtI16xss.mft (raw, json)
Hash identifier: sDFib6bh+PNOu1nHC2ZYRUi0CAxgJc2bEteZQwnn71M=
Subject key identifier: FE:FA:21:94:CD:1C:0D:4E:5D:46:D6:E6:41:1A:13:2E:B2:76:5E:C7
Authority key identifier: 2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
Certificate issuer: /CN=A91B7948/serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
Manifest number: 0125
Signing time: Sun 25 Jan 2026 03:53:55 +0000
Manifest this update: Sun 25 Jan 2026 03:53:55 +0000
Manifest next update: Sun 01 Feb 2026 03:53:55 +0000
Files and hashes: 1: LYC7UpVYC-No2mj7jQPqtI16xss.crl (hash: 4pWJzMxRyJ/ANdC/GkB2VJLi2fOg6DfdreoR2xEoLL8=)
2: 70ED9D2837D111EF99A8011CC4F9AE02.roa (hash: ON0MiwZBInBHM7jc0lp0894BhHXsr6LrKE7baf75anU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 03:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7948, serialNumber=2D80BB5295580BE368DA68FB8D03EAB48D7AC6CB
Validity
Not Before: Jan 25 03:53:55 2026 GMT
Not After : Feb 1 03:53:55 2026 GMT
Subject: CN=697593d3-365d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:6e:4b:b9:2b:c4:97:dd:30:da:57:20:2b:
80:12:97:9e:2b:0a:f5:0d:28:1e:a6:16:6f:7f:0a:
ba:50:f1:ba:bf:0f:6b:a0:59:93:56:71:d7:80:b5:
61:3e:d6:48:8d:80:1d:20:85:4a:48:89:1a:10:0e:
5d:3a:5e:1d:97:11:ec:26:74:95:5a:5f:d6:db:79:
0b:2f:b1:75:1f:d6:48:55:ce:58:b1:c2:0b:f8:4e:
ba:ef:36:a2:60:a1:a0:57:46:85:13:da:6b:7f:0d:
4b:ec:fd:58:fd:d5:60:30:e8:65:2a:ef:ba:02:3d:
88:ad:87:dd:b5:13:2e:a2:7f:42:46:4f:6e:b6:5a:
0b:57:17:2f:16:1b:d8:59:96:76:bf:a4:c2:ff:63:
3a:78:9e:ec:d2:b5:aa:a9:01:77:32:06:1b:9a:50:
b0:5b:d8:c5:57:3f:d7:59:96:2d:05:e5:f7:74:71:
93:36:b9:1d:c0:62:ba:e7:be:44:42:3a:07:fe:92:
ea:21:6c:ef:ee:16:ee:f0:a0:e7:c0:d9:a2:74:bb:
b3:dc:a9:f8:ec:7d:79:77:6f:b4:ab:24:4d:00:f6:
d7:83:23:e3:7b:51:bd:36:8f:ff:74:68:9a:b4:01:
7a:53:29:7e:99:35:46:1b:39:94:4b:68:25:16:11:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:21:94:CD:1C:0D:4E:5D:46:D6:E6:41:1A:13:2E:B2:76:5E:C7
X509v3 Authority Key Identifier:
keyid:2D:80:BB:52:95:58:0B:E3:68:DA:68:FB:8D:03:EA:B4:8D:7A:C6:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LYC7UpVYC-No2mj7jQPqtI16xss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7948/46DC6B0A37D011EF8945471AC4F9AE02/LYC7UpVYC-No2mj7jQPqtI16xss.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:08:c5:ce:ee:bd:75:18:a0:d3:12:77:19:78:f0:76:56:6f:
a2:ab:0b:87:92:9c:3e:71:ef:e6:4e:f6:54:f6:e2:28:ad:8b:
68:0d:ef:db:14:57:ed:11:63:37:e2:e6:25:e5:03:82:81:76:
6e:24:ab:a0:fc:6b:8f:68:62:21:59:02:22:c8:c0:a3:dc:5b:
b6:a9:fb:b1:fd:92:4e:2e:84:0e:0b:c9:77:5e:07:ba:18:2c:
54:cb:1c:bc:4a:b9:b5:7f:e9:eb:84:bf:e0:dd:50:45:72:05:
31:c5:d2:9a:2d:d6:34:ff:cd:84:90:f1:83:65:8a:68:fd:a5:
50:33:c3:aa:1e:62:ee:9b:58:20:e8:da:4f:c3:b1:e8:fb:36:
65:5f:86:bc:94:73:1e:e1:e2:ce:dc:8d:b2:83:a4:cf:1e:d7:
bc:6a:0f:01:0b:a5:a9:95:82:b1:19:d6:20:23:86:a2:de:d8:
85:7d:3c:dc:13:96:ec:3a:46:e3:76:79:49:7c:8d:ab:a4:3f:
d1:19:c1:e6:d1:55:f8:74:b0:b4:6e:4e:0c:bc:68:1e:e7:e5:
2b:14:0a:d9:bf:60:04:73:5e:aa:d7:90:e8:71:e2:0e:8c:43:
01:af:f6:b3:27:14:48:e7:89:ff:66:92:11:2a:85:a9:29:aa:
3a:48:38:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:45:53 2026 by rpki-client