This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
File: YC_0-oCgAKxh5tSrL3L72Wph-II.mft (raw, json)
Hash identifier: AVUtFkRYZ9HCj2808bgkz1o1JD8o3DJEaeUEm5+tFk4=
Subject key identifier: 68:04:B4:82:3B:3B:7D:62:83:5B:51:86:34:F7:F8:DC:04:85:47:6F
Authority key identifier: 60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82
Certificate issuer: /CN=A91B9293/serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882
Certificate serial: 02E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
Manifest number: 02E2
Signing time: Sun 25 Jan 2026 00:30:41 +0000
Manifest this update: Sun 25 Jan 2026 00:30:41 +0000
Manifest next update: Sun 01 Feb 2026 00:30:41 +0000
Files and hashes: 1: YC_0-oCgAKxh5tSrL3L72Wph-II.crl (hash: rU0FoqMgtWLvpunedYSUaVXkz+dteTwXG8NehK7MCDA=)
2: 008C0876148311ED856EF438C4F9AE02.roa (hash: P+roK1MWVCeuqJ3VqTzxEcvXNnpNsDkqcE1YQV3b+P8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl
rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 744 (0x2e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9293, serialNumber=602FF4FA80A000AC61E6D4AB2F72FBD96A61F882
Validity
Not Before: Jan 25 00:30:41 2026 GMT
Not After : Feb 1 00:30:41 2026 GMT
Subject: CN=69756431-2a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:4e:0b:f6:7e:a6:a1:84:3a:89:d7:cf:11:
9e:f2:5d:c3:5e:5b:ae:0b:59:28:44:0c:27:83:4a:
4b:32:9c:29:67:bd:de:28:bc:73:1a:4a:0d:43:52:
61:a7:27:d8:f2:87:eb:bd:e7:a1:1e:36:46:94:3f:
91:0e:8b:3b:f6:27:da:db:f1:f7:31:a9:65:64:e0:
ed:8b:56:ee:34:d1:5d:ba:e1:43:02:0b:8a:61:8a:
fd:35:57:a2:82:50:76:64:07:57:48:85:d8:f9:01:
80:ec:43:fa:05:52:d4:15:e0:0d:2a:ba:0a:f3:16:
9f:97:64:36:ad:71:a1:32:7f:f1:09:c2:2b:52:41:
78:9d:7e:63:68:af:19:48:52:e1:18:a2:88:d8:30:
44:96:b5:27:4d:df:a7:a6:d9:12:c1:28:a3:1d:b9:
6b:7a:69:cb:e7:68:b5:9c:58:ba:b2:27:c3:56:5f:
12:9f:97:47:8f:0d:b0:47:87:98:da:3a:27:73:4b:
54:7f:34:0e:83:8e:1b:56:0b:00:f0:43:d1:2f:0f:
d3:fa:a2:e4:20:03:5b:49:7e:f3:e2:9a:dc:9c:0e:
c0:d2:98:6b:96:c8:d8:34:6c:5f:19:f5:e5:c8:a3:
0e:f0:6f:4e:4e:93:ef:79:bb:be:f7:1f:de:66:60:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:04:B4:82:3B:3B:7D:62:83:5B:51:86:34:F7:F8:DC:04:85:47:6F
X509v3 Authority Key Identifier:
keyid:60:2F:F4:FA:80:A0:00:AC:61:E6:D4:AB:2F:72:FB:D9:6A:61:F8:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YC_0-oCgAKxh5tSrL3L72Wph-II.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9293/A9A38BBE147E11EDA02FDB19C4F9AE02/YC_0-oCgAKxh5tSrL3L72Wph-II.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:fb:64:d4:3b:12:f9:02:6e:31:a9:e9:8a:06:72:01:bc:b4:
8e:b8:a8:b4:54:31:36:2c:22:37:0d:9e:b7:9c:7e:c8:c4:93:
53:5b:39:d2:71:fd:0b:c4:90:20:5a:34:5d:2c:6c:73:5a:22:
f6:6e:95:a3:94:9a:8d:bc:81:3c:14:35:e2:cf:e8:f1:5d:ae:
84:31:ed:71:70:59:a8:20:c3:0c:ea:4b:4a:51:ec:cf:d6:35:
31:8c:7f:ae:4c:3b:8a:b1:39:c2:6a:b2:d9:f1:50:f0:73:50:
76:91:d4:c6:da:21:79:d6:b8:de:c1:bb:df:6e:96:0b:30:73:
c6:04:50:00:05:59:9d:06:f0:dd:45:00:a8:9d:5b:7c:b4:a0:
a1:4d:c4:0b:5f:41:4f:e6:1d:c3:53:48:f0:27:ae:b6:6b:b6:
53:49:4e:c4:79:dc:cc:67:2e:15:0d:1a:55:37:97:a7:39:58:
9f:cb:97:36:02:a8:bd:e4:e5:3d:2d:4a:2d:11:89:27:44:8a:
fd:13:f1:6a:6a:87:35:cd:5e:e8:df:db:a8:2f:a6:74:c6:27:
0f:3d:ae:e2:2d:4f:12:17:c4:1d:9f:55:61:5b:a9:e2:bf:ad:
0b:ce:a9:24:d8:12:bf:52:86:32:7d:9d:06:ca:99:10:5a:a8:
33:dd:0d:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjkyOTMxMTAvBgNVBAUTKDYwMkZGNEZBODBBMDAwQUM2MUU2RDRBQjJGNzJGQkQ5
NkE2MUY4ODIwHhcNMjYwMTI1MDAzMDQxWhcNMjYwMjAxMDAzMDQxWjAYMRYwFAYD
VQQDDA02OTc1NjQzMS0yYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAun5OC/Z+pqGEOonXzxGe8l3DXluuC1koRAwng0pLMpwpZ73eKLxzGkoNQ1Jh
pyfY8ofrveehHjZGlD+RDos79ifa2/H3MallZODti1buNNFduuFDAguKYYr9NVei
glB2ZAdXSIXY+QGA7EP6BVLUFeANKroK8xafl2Q2rXGhMn/xCcIrUkF4nX5jaK8Z
SFLhGKKI2DBElrUnTd+nptkSwSijHblremnL52i1nFi6sifDVl8Sn5dHjw2wR4eY
2jonc0tUfzQOg44bVgsA8EPRLw/T+qLkIANbSX7z4prcnA7A0phrlsjYNGxfGfXl
yKMO8G9OTpPvebu+9x/eZmDk8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgEtII7
O31ig1tRhjT3+NwEhUdvMB8GA1UdIwQYMBaAFGAv9PqAoACsYebUqy9y+9lqYfiC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTI5My9BOUEzOEJCRTE0
N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FLeGg1dFNyTDNMNzJXcGgt
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lDXzAtb0NnQUt4aDV0U3JMM0w3MldwaC1JSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OTI5My9BOUEzOEJCRTE0N0UxMUVEQTAyRkRCMTlDNEY5QUUwMi9ZQ18wLW9DZ0FL
eGg1dFNyTDNMNzJXcGgtSUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAp+2TUOxL5Am4xqemKBnIBvLSOuKi0VDE2LCI3DZ63nH7IxJNTWznS
cf0LxJAgWjRdLGxzWiL2bpWjlJqNvIE8FDXiz+jxXa6EMe1xcFmoIMMM6ktKUezP
1jUxjH+uTDuKsTnCarLZ8VDwc1B2kdTG2iF51rjewbvfbpYLMHPGBFAABVmdBvDd
RQConVt8tKChTcQLX0FP5h3DU0jwJ662a7ZTSU7EedzMZy4VDRpVN5enOVify5c2
Aqi95OU9LUotEYknRIr9E/Fqaoc1zV7o39uoL6Z0xicPPa7iLU8SF8Qdn1VhW6ni
v60Lzqkk2BK/UoYyfZ0GypkQWqgz3Q0l
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:51:32 2026 by rpki-client