This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
File: YDHQYB1cLYetZiNh5jv_2R4EBzM.mft (raw, json)
Hash identifier: 3o77chE3h5RZZpEUAGxQvepXlNSf7E5By7vzBzzPBAM=
Subject key identifier: 7C:C2:B8:0C:C7:CD:0A:05:5B:21:CE:BD:D5:84:7F:9E:81:51:AF:BF
Authority key identifier: 60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
Certificate issuer: /CN=A91E8103/serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Certificate serial: C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
Manifest number: BF
Signing time: Sun 25 Jan 2026 05:11:42 +0000
Manifest this update: Sun 25 Jan 2026 05:11:42 +0000
Manifest next update: Sun 01 Feb 2026 05:11:42 +0000
Files and hashes: 1: YDHQYB1cLYetZiNh5jv_2R4EBzM.crl (hash: X786/+1Lf9fhrm92ilCOxQ7d9X5utMvHdkseffaex/I=)
2: 6FFDB6E4A30C11F0ABE46042C4F9AE02.roa (hash: d6uVF1i6ZT73+dk+Mk43in2noeNbthxeD9nGk9TeUo8=)
3: 9A616002DE0411EFA80D3B34C4F9AE02.roa (hash: SyODw+cJwyZ2yJekBzL0vGtZJRWwofo8zfujkPhkBig=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 196 (0xc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8103, serialNumber=6031D0601D5C2D87AD662361E63BFFD91E040733
Validity
Not Before: Jan 25 05:11:42 2026 GMT
Not After : Feb 1 05:11:42 2026 GMT
Subject: CN=6975a60e-a8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:20:60:ae:bc:94:18:0c:86:03:19:ba:86:
00:fb:a1:bc:9e:3f:88:06:82:83:d9:85:70:e6:bb:
e3:28:bc:31:f2:ca:eb:72:66:a7:3c:41:e8:cc:a6:
7e:47:df:4b:8e:7a:92:00:56:09:46:93:1a:0d:87:
6d:84:60:a5:6c:ef:63:0c:3b:36:1b:14:1b:49:64:
11:7c:ee:0c:f6:5e:5e:f9:03:82:c8:10:87:bc:93:
aa:ba:f9:05:8f:2a:e9:22:e1:7b:0d:f2:15:33:3b:
65:a6:5c:17:36:f9:bb:d2:54:67:95:fe:0c:65:c9:
14:10:1e:1b:a0:01:a0:02:b8:31:a7:b4:e1:2c:13:
20:cc:a7:44:4f:42:e5:3c:f6:c6:8a:6a:8c:1e:7f:
a4:09:cf:f0:b9:2d:88:15:77:40:ec:b2:8b:d1:ff:
69:3f:b6:62:57:fb:36:c3:0f:5b:2e:9f:13:f5:d4:
bf:55:84:b9:98:9d:23:d8:0c:05:a1:ae:27:28:87:
ba:fe:2e:59:22:87:7c:b9:c2:e1:cb:e6:21:99:6e:
77:58:15:c0:89:50:7c:e1:d9:e6:df:8d:9f:70:ff:
37:9f:be:8b:81:9a:c6:a6:a0:30:d7:d2:cd:99:e6:
7a:79:0c:c9:87:ac:a2:6e:a7:5b:e3:f6:43:d4:f8:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C2:B8:0C:C7:CD:0A:05:5B:21:CE:BD:D5:84:7F:9E:81:51:AF:BF
X509v3 Authority Key Identifier:
keyid:60:31:D0:60:1D:5C:2D:87:AD:66:23:61:E6:3B:FF:D9:1E:04:07:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDHQYB1cLYetZiNh5jv_2R4EBzM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8103/93DC754EDE0111EF93335F0BC4F9AE02/YDHQYB1cLYetZiNh5jv_2R4EBzM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:06:48:eb:62:d5:83:ce:b9:6a:45:b7:92:86:85:64:a0:d4:
37:b9:0e:21:75:78:fd:6f:55:04:bc:84:ab:b8:2e:70:7d:21:
62:68:17:8c:87:52:09:24:99:71:55:15:c3:81:ed:18:5a:07:
9c:8e:22:01:f9:42:45:05:1d:01:be:0d:5e:c6:b5:38:cc:e6:
a2:4d:e7:07:e9:62:b5:5b:df:06:71:27:a7:e1:a8:5f:93:58:
09:ad:32:4a:af:73:44:c1:f4:12:06:cd:a5:79:4e:c5:ef:48:
7a:41:a7:72:4d:cf:34:1d:4e:9d:54:47:d6:ec:3a:6e:c9:39:
1b:27:46:92:1c:52:3a:96:e4:2b:97:3b:21:a0:75:93:04:7d:
f8:81:40:ed:76:5d:80:cc:e4:5a:11:a8:01:6f:b6:9e:5a:c3:
4f:4c:c2:6e:0d:0f:74:38:ba:fd:00:74:4d:49:b1:60:66:59:
42:c8:8c:ad:44:49:a7:60:35:d5:d3:a1:a8:af:85:c1:f4:62:
ac:c5:42:f4:4b:1d:63:4f:c2:58:57:5e:a3:fd:b8:98:fc:bd:
23:b0:5f:bd:6c:b8:07:a7:06:81:e8:34:c0:8a:b7:18:70:f0:
26:63:1b:04:ec:a5:65:1a:8e:85:20:dd:1a:aa:db:34:cd:20:
be:dd:38:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgxMDMxMTAvBgNVBAUTKDYwMzFEMDYwMUQ1QzJEODdBRDY2MjM2MUU2M0JGRkQ5
MUUwNDA3MzMwHhcNMjYwMTI1MDUxMTQyWhcNMjYwMjAxMDUxMTQyWjAYMRYwFAYD
VQQDDA02OTc1YTYwZS1hOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApKQgYK68lBgMhgMZuoYA+6G8nj+IBoKD2YVw5rvjKLwx8srrcmanPEHozKZ+
R99LjnqSAFYJRpMaDYdthGClbO9jDDs2GxQbSWQRfO4M9l5e+QOCyBCHvJOquvkF
jyrpIuF7DfIVMztlplwXNvm70lRnlf4MZckUEB4boAGgArgxp7ThLBMgzKdET0Ll
PPbGimqMHn+kCc/wuS2IFXdA7LKL0f9pP7ZiV/s2ww9bLp8T9dS/VYS5mJ0j2AwF
oa4nKIe6/i5ZIod8ucLhy+YhmW53WBXAiVB84dnm342fcP83n76LgZrGpqAw19LN
meZ6eQzJh6yibqdb4/ZD1PihrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzCuAzH
zQoFWyHOvdWEf56BUa+/MB8GA1UdIwQYMBaAFGAx0GAdXC2HrWYjYeY7/9keBAcz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODEwMy85M0RDNzU0RURF
MDExMUVGOTMzMzVGMEJDNEY5QUUwMi9ZREhRWUIxY0xZZXRaaU5oNWp2XzJSNEVC
ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lESFFZQjFjTFlldFppTmg1anZfMlI0RUJ6TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODEwMy85M0RDNzU0RURFMDExMUVGOTMzMzVGMEJDNEY5QUUwMi9ZREhRWUIxY0xZ
ZXRaaU5oNWp2XzJSNEVCek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCABkjrYtWDzrlqRbeShoVkoNQ3uQ4hdXj9b1UEvISruC5wfSFiaBeM
h1IJJJlxVRXDge0YWgecjiIB+UJFBR0Bvg1exrU4zOaiTecH6WK1W98GcSen4ahf
k1gJrTJKr3NEwfQSBs2leU7F70h6QadyTc80HU6dVEfW7DpuyTkbJ0aSHFI6luQr
lzshoHWTBH34gUDtdl2AzORaEagBb7aeWsNPTMJuDQ90OLr9AHRNSbFgZllCyIyt
REmnYDXV06Gor4XB9GKsxUL0Sx1jT8JYV16j/biY/L0jsF+9bLgHpwaB6DTAircY
cPAmYxsE7KVlGo6FIN0aqts0zSC+3TjO
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:28:48 2026 by rpki-client