This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft
File: y1McHsaSJfDcrkTOyl41mAzpwPI.mft (raw, json)
Hash identifier: 2nPxvfCbHjTrS3x4hyCQGBHQmkNr5pftLi6rdVs9Nwc=
Subject key identifier: FC:B2:D1:9C:CF:88:FB:04:B7:4C:25:81:89:D4:06:1F:DE:37:D7:F7
Authority key identifier: CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2
Certificate issuer: /CN=A91CFFCB/serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2
Certificate serial: 7A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft
Manifest number: 79
Signing time: Sun 25 Jan 2026 05:54:49 +0000
Manifest this update: Sun 25 Jan 2026 05:54:48 +0000
Manifest next update: Sun 01 Feb 2026 05:54:48 +0000
Files and hashes: 1: y1McHsaSJfDcrkTOyl41mAzpwPI.crl (hash: rV3WLgBMq1dAsQJIQnQTVUKVIAMQ+QbF412TSEHMqY4=)
2: BB8F3118497B11F096DCA14EC4F9AE02.roa (hash: n0pGyYXueEy9F7Jw89IAbICySxf38MqDCZugETeFEBQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl
rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122 (0x7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFFCB, serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2
Validity
Not Before: Jan 25 05:54:48 2026 GMT
Not After : Feb 1 05:54:48 2026 GMT
Subject: CN=6975b029-2c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:62:40:e5:63:37:6b:99:f6:1e:8c:d6:b6:d4:
a1:4c:d8:e1:e6:5a:b0:18:4b:b9:89:d7:59:be:14:
de:d4:60:be:74:fb:73:3a:22:5b:cc:0e:44:bc:3e:
29:00:94:69:d4:59:d2:85:02:7e:cd:0e:ba:fc:c0:
25:43:9c:a0:e0:c3:41:3b:7b:9d:0a:50:cf:fc:e3:
7f:3a:2e:61:c2:03:fa:16:24:2d:e8:99:ad:fd:4e:
ef:2b:31:86:d8:d7:20:d5:38:a4:49:6c:78:d2:d1:
b1:11:07:b4:f8:46:5c:bf:f7:0f:3b:be:18:49:9f:
fd:ac:1b:44:2f:16:a6:01:41:0d:26:7a:3e:bb:c2:
b0:cf:ad:ff:1e:20:42:8f:a0:9e:a3:8f:72:d9:82:
0d:9b:3c:8e:93:7f:a1:02:35:5c:d6:4c:a6:4f:a2:
cb:3d:de:e3:8e:21:fd:5d:c8:eb:53:82:fc:9a:c3:
64:8f:ba:34:5d:bb:13:26:10:18:eb:6d:0d:94:b4:
13:bb:f6:76:9f:c7:69:a5:8f:4e:ff:de:ba:a4:3c:
b6:73:f9:29:0e:73:94:c3:64:b3:51:66:bb:cf:66:
03:f3:6e:e1:79:f9:3f:cb:ee:b6:ce:bc:82:b6:6f:
c2:cd:6d:8d:42:d8:b6:28:74:aa:5b:1f:57:65:9c:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B2:D1:9C:CF:88:FB:04:B7:4C:25:81:89:D4:06:1F:DE:37:D7:F7
X509v3 Authority Key Identifier:
keyid:CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d4:06:54:ca:21:56:10:c4:bc:71:e1:93:ac:73:9a:67:52:
1d:8b:8b:d9:9d:0c:b8:7a:5c:4c:8b:4a:35:62:ba:85:9d:96:
c2:9a:e6:f7:0f:c2:46:0a:d7:64:c7:65:15:e3:92:cb:45:52:
5e:2e:00:a3:38:2f:53:9f:dc:0f:bb:29:29:5f:74:48:93:bf:
14:ed:01:a1:43:5b:a2:20:e6:4f:65:e7:41:ee:a8:05:a5:70:
23:97:41:01:62:b5:6f:36:db:0a:32:ff:3b:02:57:17:3e:b4:
73:27:27:8e:2d:ae:d4:6a:3e:9e:f1:8d:b2:37:5a:a9:54:55:
35:b5:af:ac:ac:03:39:27:4d:07:ef:13:80:7b:f2:bb:49:32:
03:f7:ae:6a:ed:24:75:fa:af:fa:6a:fc:37:3d:4e:db:d9:75:
e6:b0:9f:ac:66:a7:d7:ca:ef:c5:63:03:17:67:b6:4e:51:fd:
62:91:06:19:a7:cd:2b:f9:25:30:9c:3e:44:f2:28:a7:4c:bd:
ca:2c:c7:cd:9c:08:3f:b0:7e:0d:b2:b5:c4:c7:97:18:6f:33:
6a:20:c3:d7:7a:ee:8b:6f:5d:74:55:9b:0b:2d:9a:76:f9:39:
1d:86:10:0e:e4:6a:76:24:58:0b:0a:17:5b:69:01:85:2a:0a:
76:96:9e:12
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RkZDQjExMC8GA1UEBRMoQ0I1MzFDMUVDNjkyMjVGMERDQUU0NENFQ0E1RTM1OTgw
Q0U5QzBGMjAeFw0yNjAxMjUwNTU0NDhaFw0yNjAyMDEwNTU0NDhaMBgxFjAUBgNV
BAMMDTY5NzViMDI5LTJjNWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCVYkDlYzdrmfYejNa21KFM2OHmWrAYS7mJ11m+FN7UYL50+3M6IlvMDkS8PikA
lGnUWdKFAn7NDrr8wCVDnKDgw0E7e50KUM/84386LmHCA/oWJC3oma39Tu8rMYbY
1yDVOKRJbHjS0bERB7T4Rly/9w87vhhJn/2sG0QvFqYBQQ0mej67wrDPrf8eIEKP
oJ6jj3LZgg2bPI6Tf6ECNVzWTKZPoss93uOOIf1dyOtTgvyaw2SPujRduxMmEBjr
bQ2UtBO79nafx2mlj07/3rqkPLZz+SkOc5TDZLNRZrvPZgPzbuF5+T/L7rbOvIK2
b8LNbY1C2LYodKpbH1dlnJ0vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/LLRnM+I
+wS3TCWBidQGH9431/cwHwYDVR0jBBgwFoAUy1McHsaSJfDcrkTOyl41mAzpwPIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRkNCL0Y1REI3QTE2NDIw
NTExRjBCRjdBODcxMUM0RjlBRTAyL3kxTWNIc2FTSmZEY3JrVE95bDQxbUF6cHdQ
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveTFNY0hzYVNKZkRjcmtUT3lsNDFtQXpwd1BJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNG
RkNCL0Y1REI3QTE2NDIwNTExRjBCRjdBODcxMUM0RjlBRTAyL3kxTWNIc2FTSmZE
Y3JrVE95bDQxbUF6cHdQSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFrUBlTKIVYQxLxx4ZOsc5pnUh2Li9mdDLh6XEyLSjViuoWdlsKa5vcP
wkYK12THZRXjkstFUl4uAKM4L1Of3A+7KSlfdEiTvxTtAaFDW6Ig5k9l50HuqAWl
cCOXQQFitW822woy/zsCVxc+tHMnJ44trtRqPp7xjbI3WqlUVTW1r6ysAzknTQfv
E4B78rtJMgP3rmrtJHX6r/pq/Dc9TtvZdeawn6xmp9fK78VjAxdntk5R/WKRBhmn
zSv5JTCcPkTyKKdMvcosx82cCD+wfg2ytcTHlxhvM2ogw9d67otvXXRVmwstmnb5
OR2GEA7kanYkWAsKF1tpAYUqCnaWnhI=
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:31:13 2026 by rpki-client