This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
File: yvogqQGAldIp8KxDkg3NQ6Zr61I.mft (raw, json)
Hash identifier: CW1lh1ANg5YB4mTIbwLwRhDf1Bn1mCpkkZaf6APWJm8=
Subject key identifier: 24:CB:FA:B2:8C:72:20:0C:9C:E1:74:F2:42:F8:EB:98:D8:75:4C:F7
Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Certificate serial: 11F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
Manifest number: 11CB
Signing time: Sat 24 Jan 2026 16:54:26 +0000
Manifest this update: Sat 24 Jan 2026 16:54:25 +0000
Manifest next update: Sat 31 Jan 2026 16:54:25 +0000
Files and hashes: 1: yvogqQGAldIp8KxDkg3NQ6Zr61I.crl (hash: WNJP9g7g2HuLLRnDfjVL4Ajb4Qf2/4RNUUXRoPPXUNk=)
2: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (hash: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=)
3: F6609DDAAD3C11EA95DFF369C4F9AE02.roa (hash: RU5uDzdAkRAS9qZ8SwVPWAXrYZQRzn4OHSyBtdDYzzE=)
4: B9F821D4462D11EC93DFE63CC4F9AE02.roa (hash: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=)
5: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (hash: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=)
6: D3258BFA7AE711EFB4F5E235C4F9AE02.roa (hash: IqcKshpk+qASTKe+nVLkoXyik/TGszfm7PEMyL1PxRk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 16:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4593 (0x11f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FB5, serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Validity
Not Before: Jan 24 16:54:25 2026 GMT
Not After : Jan 31 16:54:25 2026 GMT
Subject: CN=6974f942-6c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:d8:70:6a:8e:74:e0:a6:c6:bf:4b:ec:4f:
65:86:50:86:34:54:66:00:bb:46:68:0b:32:bd:6e:
23:03:52:64:e3:ae:cf:ef:68:8f:8f:6e:f8:7a:dc:
13:99:2b:36:ba:d4:41:70:dc:a2:3e:c8:63:77:e1:
5c:a6:fd:41:e4:29:da:4c:d4:8d:c4:30:e5:80:42:
2f:e6:2c:e3:b3:b4:81:d7:d3:bf:d5:f9:c3:5f:b9:
a7:51:c7:b9:0a:8e:2e:40:2f:ae:13:86:d1:3f:19:
81:16:29:80:75:f7:49:e8:07:8f:9e:bb:74:08:77:
5a:8f:86:55:33:72:00:22:11:de:27:f3:53:6b:6e:
0e:d6:f0:59:b9:39:1d:cd:5d:42:ed:ef:ca:75:35:
8d:1c:11:b7:b1:41:3e:33:b0:d4:54:b3:cd:8f:b2:
4c:03:fc:aa:50:37:cd:f5:1c:a3:c7:2a:1c:7b:f6:
a4:fc:17:81:90:07:48:70:84:55:ac:4c:ea:54:ac:
2a:65:83:3e:2b:3b:3d:46:f2:e1:0b:52:bb:78:e4:
5e:27:bd:d5:e1:b5:86:db:f3:22:14:34:67:c6:23:
04:7e:0b:58:42:fa:64:26:97:24:dd:92:7c:24:fb:
41:54:c4:9e:a9:d5:d4:ef:11:9a:a3:a2:5a:2e:68:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CB:FA:B2:8C:72:20:0C:9C:E1:74:F2:42:F8:EB:98:D8:75:4C:F7
X509v3 Authority Key Identifier:
keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9e:0c:40:e8:8c:45:09:ff:d8:81:64:7f:af:8e:90:10:a8:
27:31:39:1b:59:07:4b:38:c5:1d:5f:40:6c:bc:9c:bf:79:92:
8c:70:c9:84:90:17:4a:75:72:11:0b:7f:39:67:75:fb:af:a9:
2a:ee:91:8e:6f:27:cc:94:a4:a1:d8:27:e5:9f:0a:98:77:e2:
d0:a4:d2:a1:dd:33:36:28:87:6b:70:a9:8b:c6:3a:50:a9:82:
6e:4b:92:43:da:64:5e:e9:b0:6c:77:12:53:69:1b:e0:7d:16:
83:6e:ad:5e:06:e6:79:6d:b4:5c:9a:3b:ee:0c:9d:be:f5:09:
e5:b7:35:a3:33:16:24:9d:38:63:5f:1c:2c:00:46:9e:7c:df:
09:11:0a:57:65:e7:14:fa:4b:eb:ad:49:e7:dc:fb:e3:5f:19:
15:35:7f:41:98:1b:4c:91:97:a3:0a:68:20:7a:5c:db:ab:f4:
1d:d2:70:73:be:14:00:4b:a2:f3:37:b0:0f:05:f1:25:56:7a:
22:38:f3:81:57:25:1c:c7:0d:ab:00:ce:d9:83:d7:f2:39:a9:
e3:3f:67:df:e6:21:ef:03:10:15:49:77:20:66:c5:9c:2e:f3:
a3:74:89:03:c3:36:d9:11:f5:56:33:0e:29:a3:fa:e5:7e:87:
32:2e:8c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:15:01 2026 by rpki-client