This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
File: y2yF51LVad_PHekEycvnHkg-9fI.mft (raw, json)
Hash identifier: QhlkSUqB/86Up4xIz/L0CktdGp4GP/sSdOnylmx8t0g=
Subject key identifier: CE:45:5B:CD:37:AD:4F:D0:0B:4C:A4:38:57:EF:E0:E6:91:AD:CD:23
Authority key identifier: CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
Certificate issuer: /CN=A91BC039/serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Certificate serial: 0552
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
Manifest number: 054A
Signing time: Sat 24 Jan 2026 22:40:54 +0000
Manifest this update: Sat 24 Jan 2026 22:40:54 +0000
Manifest next update: Sat 31 Jan 2026 22:40:54 +0000
Files and hashes: 1: y2yF51LVad_PHekEycvnHkg-9fI.crl (hash: 00dAfSvfUqyB8tTQcOXbtqraHlpvTG3XbNSlugYT9Ng=)
2: 004A745EDBB011F0904A453A4D641951.roa (hash: AdhWoboxvB3fE2Iwxcb6ADucdBfCgNo/P3RvBt247qE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:40:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1362 (0x552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BC039, serialNumber=CB6C85E752D569DFCF1DE904C9CBE71E483EF5F2
Validity
Not Before: Jan 24 22:40:54 2026 GMT
Not After : Jan 31 22:40:54 2026 GMT
Subject: CN=69754a76-89d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:bf:b1:67:d6:c4:c4:61:96:9a:00:a3:42:
5f:c4:c5:c9:48:8d:ad:00:f5:34:c3:54:e1:a9:55:
6a:c0:a3:4b:1e:29:0c:c0:3a:50:b6:c7:b7:37:98:
f0:ac:af:e6:2a:d1:35:03:ef:ee:47:64:7b:47:ad:
c0:06:c2:2a:6b:78:fd:28:e9:e2:e2:3d:3e:af:1d:
f4:85:32:3b:ea:c1:18:fb:92:d2:46:f0:69:e3:40:
6d:35:38:6a:ce:bc:38:4d:e1:61:fe:e1:de:e3:4b:
c5:7f:86:75:0c:59:79:a4:c3:1b:06:eb:94:25:09:
61:46:4f:34:38:22:9b:58:12:38:06:f8:d5:a6:9d:
eb:ee:3d:00:fd:96:01:7e:fa:5c:a7:da:ee:8c:09:
7d:98:e1:6c:48:96:c8:2e:11:67:ed:12:55:f9:9c:
0e:9e:fd:c6:91:09:05:c6:46:2a:55:af:f6:f8:99:
a5:4c:b8:44:3f:be:0c:90:d5:68:7f:6e:53:5b:2a:
d5:62:97:aa:8f:ee:b5:6a:81:bc:d3:02:7b:36:37:
7f:50:be:9c:36:13:56:0b:ad:46:e7:6c:db:e7:4e:
5d:2b:03:04:4c:4d:2b:58:34:19:f1:f7:04:82:61:
3c:b3:a0:9e:82:f0:f1:38:f7:05:5c:5b:23:67:ee:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:45:5B:CD:37:AD:4F:D0:0B:4C:A4:38:57:EF:E0:E6:91:AD:CD:23
X509v3 Authority Key Identifier:
keyid:CB:6C:85:E7:52:D5:69:DF:CF:1D:E9:04:C9:CB:E7:1E:48:3E:F5:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2yF51LVad_PHekEycvnHkg-9fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC039/BB5323E825C211ECB499D158C4F9AE02/y2yF51LVad_PHekEycvnHkg-9fI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:9a:52:96:37:4b:2c:91:90:b6:31:df:77:b3:62:8a:ed:ad:
25:d5:7e:e8:72:79:b9:ca:30:98:b6:8a:10:13:2a:af:eb:76:
04:2a:29:d0:fb:ba:b4:61:e1:0a:86:1c:a5:2b:08:65:e7:87:
f6:e3:a0:ab:5c:d0:c8:2d:ef:be:e5:62:32:a7:0d:17:44:18:
b4:d9:94:16:af:86:74:1c:19:b8:f5:35:7d:a4:4f:f1:9e:4a:
10:2f:45:8f:88:c1:00:e2:55:34:41:4d:d2:e9:43:54:11:77:
73:38:99:38:fb:ab:d3:95:dc:18:ce:da:e4:4a:e4:ed:84:42:
26:5f:4e:d4:2a:1b:67:bf:25:9a:d9:73:89:ab:2e:f1:23:49:
07:45:79:b0:7a:88:af:07:e0:36:72:36:69:f8:4b:18:36:13:
57:94:6a:41:a2:01:43:18:76:d9:63:f1:b1:0e:31:7c:6b:b1:
77:20:6b:3d:4f:7b:63:ec:3c:ea:01:bd:6f:bd:e5:b4:ff:53:
b8:3a:6c:68:3a:d2:26:d7:ad:7f:30:bc:1e:c3:dd:32:81:39:
ea:2c:d6:21:bd:a0:06:ce:51:d4:ed:ae:cd:2c:a8:b7:e4:cf:
59:df:48:c1:4d:06:1c:75:ba:32:e4:ab:0b:30:da:4a:4c:30:
a6:c7:6c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:58:52 2026 by rpki-client