This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
File: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft (raw, json)
Hash identifier: tFbEOKy/8aJu37/9F0vog5rqBuMRa/Cdp15p+nSOj38=
Subject key identifier: 08:FD:CB:75:ED:F1:D6:36:04:4C:3F:44:A4:9F:BF:01:55:2D:AA:01
Authority key identifier: CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4
Certificate issuer: /CN=A91D86BA/serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
Certificate serial: 0324
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
Manifest number: 031F
Signing time: Sun 25 Jan 2026 00:16:45 +0000
Manifest this update: Sun 25 Jan 2026 00:16:45 +0000
Manifest next update: Sun 01 Feb 2026 00:16:45 +0000
Files and hashes: 1: yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl (hash: KTdQruZ1nUl3iM4nbPge4Z653nrhr2K7ABzk2B9Jc9s=)
2: 008702ECFD2511EC813E430BC4F9AE02.roa (hash: oIYSd3WkL7MnVYU9mO5hPC/7Uvpo2x/ypJdb9x+xC2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl
rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 00:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804 (0x324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D86BA, serialNumber=CB2107320EDB392C3B4D6B066D79966E73553DE4
Validity
Not Before: Jan 25 00:16:45 2026 GMT
Not After : Feb 1 00:16:45 2026 GMT
Subject: CN=697560ed-4afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:19:fb:19:d4:b2:50:5b:ed:57:59:60:dd:
91:c2:d2:b9:90:e6:92:5e:2c:da:be:0d:07:38:52:
00:0f:9a:0d:67:18:49:28:23:dd:e2:a5:a0:17:c2:
49:aa:59:12:67:47:5e:3e:b9:43:58:db:95:98:ae:
27:7b:b1:c3:47:4e:c8:3d:50:40:6d:ba:af:21:ba:
ec:1d:98:99:ce:96:45:fe:ee:62:46:2b:a8:dc:db:
7a:a7:b2:1c:d8:dd:b3:d5:f3:7b:ab:f9:97:c6:2a:
44:d2:30:fb:cb:53:1f:46:d1:e1:8a:19:c4:89:28:
fc:42:b9:0f:b0:58:b6:ee:d9:a4:14:80:de:27:05:
56:aa:f1:5e:a2:21:3d:c7:24:99:28:d1:9f:15:36:
36:16:80:4a:fd:7d:60:76:75:97:5b:1f:77:97:12:
95:7e:33:45:92:b3:b4:af:61:14:d9:1d:fe:d1:bf:
ae:fb:d6:85:12:84:66:5d:47:ef:39:67:28:40:de:
5b:45:fc:b5:b4:e9:f5:32:24:b9:d5:75:67:fe:1a:
65:ac:c8:b3:cc:94:b8:37:77:2f:3a:33:a8:25:c7:
0e:c0:9e:54:f6:2e:03:8d:80:cc:0f:33:64:f6:16:
7a:05:dd:e0:0d:8a:b8:ed:6a:e5:9c:d7:bc:bf:6f:
64:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FD:CB:75:ED:F1:D6:36:04:4C:3F:44:A4:9F:BF:01:55:2D:AA:01
X509v3 Authority Key Identifier:
keyid:CB:21:07:32:0E:DB:39:2C:3B:4D:6B:06:6D:79:96:6E:73:55:3D:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D86BA/A57604C8FD2111ECA2C56283C4F9AE02/yyEHMg7bOSw7TWsGbXmWbnNVPeQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:94:5b:e6:8d:94:5e:dc:28:9a:9c:fd:92:4c:50:d9:78:d2:
e6:f3:80:fd:6e:50:dc:f8:0b:49:f3:4e:ed:51:c3:41:fd:7e:
03:a2:d4:28:6d:c1:75:34:03:12:96:36:ae:79:73:c3:2c:59:
98:88:83:d2:38:38:c1:28:d3:34:65:7b:b2:8c:43:15:98:53:
c1:6e:3b:54:a7:4e:6a:df:ca:b1:e1:ce:52:ee:c9:09:73:34:
15:81:3a:bb:04:9f:b8:98:7a:3d:89:77:7b:3b:87:7a:fc:f5:
ae:83:f3:31:21:5f:ca:30:24:82:12:10:5b:34:14:7d:bc:25:
09:cd:ae:b3:1d:1b:2d:e4:ba:9c:0e:3c:74:c4:4b:49:ed:ca:
5a:f2:77:74:30:3c:fe:b7:f7:c2:8a:b5:2b:3c:63:2d:d8:12:
ca:5f:38:ff:52:ca:ef:b7:5b:72:a1:d9:71:3e:d7:b5:39:9c:
12:15:3a:26:bc:c6:d7:72:ae:68:47:d5:c1:6c:93:7d:32:30:
79:22:03:31:09:a2:60:a5:a3:71:12:36:43:17:16:10:c1:18:
33:ca:4c:bd:19:dc:b5:d3:e2:60:1d:69:3e:9c:b6:5c:d9:c7:
de:3c:ba:94:4f:0c:f9:d0:40:e7:6a:5f:ea:b5:f0:da:00:a1:
b4:46:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:29 2026 by rpki-client