This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
File: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft (raw, json)
Hash identifier: CQU3msNE2pkRJCw3YyGXJjAdYK0mE5czqryHhaEaLWo=
Subject key identifier: E5:6C:41:05:AE:86:6A:A4:53:AD:B7:70:08:82:C3:E4:B1:B2:9A:92
Authority key identifier: CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
Certificate issuer: /CN=A91E0CF5/serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Certificate serial: 011C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
Manifest number: 011A
Signing time: Fri 23 Jan 2026 03:59:37 +0000
Manifest this update: Fri 23 Jan 2026 03:59:37 +0000
Manifest next update: Fri 30 Jan 2026 03:59:37 +0000
Files and hashes: 1: y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl (hash: smMYEtznFhe+zpqxO5lpWItZ1lPstMadUtUeGBxVl6M=)
2: C155660E492B11EF8EF0D04FC4F9AE02.roa (hash: p1Kd4l2BGto3TUE6P+Iwqb8Y4agcHwTbtFw10TWcSis=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 03:59:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 284 (0x11c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0CF5, serialNumber=CBBBBB24B22B435D1CA493A9D63DCA779BE0796A
Validity
Not Before: Jan 23 03:59:37 2026 GMT
Not After : Jan 30 03:59:37 2026 GMT
Subject: CN=6972f229-07aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:59:51:6c:1d:48:2f:f8:6e:ca:cb:a2:b4:
64:21:2c:30:3b:ca:a1:44:1d:2f:8e:5c:83:ff:ac:
2d:0c:a2:40:a4:15:76:3c:40:61:0e:07:b2:fa:38:
6d:72:be:cc:37:e2:68:87:b4:bd:14:d5:12:0e:f4:
b8:60:ea:5d:10:f6:e6:25:55:34:99:b5:e2:af:a9:
06:b8:7e:86:ec:f7:2a:72:b0:91:2d:b7:a0:e8:dd:
ee:63:04:5a:ac:ad:0b:b2:cc:4d:3c:6a:5f:06:71:
63:cc:7c:a5:e6:8a:98:1e:52:33:19:14:b6:70:b5:
b3:bf:33:f0:5c:25:54:9e:b6:9b:fd:6c:7e:48:41:
95:76:f5:10:1b:ec:98:7a:b0:12:0a:b9:c0:dc:71:
70:0a:ad:c2:2b:57:1b:44:18:b6:a5:f0:81:c4:44:
62:c9:c0:4b:17:42:51:00:34:bc:e6:1d:d9:db:e1:
05:db:6c:a6:1f:0f:26:ec:40:aa:7c:8f:a9:c7:8d:
ca:49:d5:ea:4d:a6:f3:03:e0:de:fa:6e:01:1b:4b:
e8:4c:08:07:27:2c:11:a0:8f:88:1c:23:23:92:64:
cd:e1:5b:e4:97:fb:b2:a6:cc:e1:98:b1:b1:82:76:
9a:91:f2:83:80:e3:9b:e7:7a:a6:21:e6:8d:96:65:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:41:05:AE:86:6A:A4:53:AD:B7:70:08:82:C3:E4:B1:B2:9A:92
X509v3 Authority Key Identifier:
keyid:CB:BB:BB:24:B2:2B:43:5D:1C:A4:93:A9:D6:3D:CA:77:9B:E0:79:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CF5/538C1960492B11EFBE10184FC4F9AE02/y7u7JLIrQ10cpJOp1j3Kd5vgeWo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:e4:b7:93:e2:ab:81:7a:b0:a1:a3:4e:f5:97:83:19:20:ac:
dd:24:49:3c:de:28:7c:95:08:e4:7c:cb:0b:0c:04:ec:9b:d8:
bf:bc:d2:f9:8a:77:e7:fe:08:38:fb:d8:e0:0c:18:de:9b:70:
40:67:4c:89:bd:0b:ce:94:ae:61:23:c8:f2:bb:73:27:45:dd:
b5:07:4d:66:86:1d:92:54:6d:13:f0:6f:d9:98:a6:8f:a5:8e:
e0:6b:c7:f9:dc:0d:02:22:ff:09:21:ea:49:cc:62:87:33:d8:
26:65:65:0a:a8:03:cb:12:45:6e:13:d9:7b:8c:96:9f:c0:54:
f7:66:22:11:ec:05:96:03:7d:5a:9c:b9:e8:a2:0d:80:1a:e4:
b6:ea:ff:a5:33:a8:1a:56:b6:2e:1d:c6:38:02:c3:8b:b8:d2:
5e:26:cc:7d:25:47:4d:df:13:60:d5:59:a7:d0:a8:79:f3:8d:
91:0d:12:c2:f3:3a:e0:e8:f0:bc:a5:02:77:9b:9b:27:df:7f:
90:04:06:a3:61:4f:62:76:6c:db:71:c6:af:a2:c8:66:ba:ac:
28:36:b9:7a:42:53:b7:af:c3:6e:6d:1b:17:81:82:bb:cb:ac:
1b:09:c6:21:cb:5b:7f:c7:cc:7b:30:4c:bc:b6:f7:40:c6:f7:
8d:e9:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 02:56:33 2026 by rpki-client