This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
File: WY9YPfrp_JTaoww3iyFr7JcOM5g.mft (raw, json)
Hash identifier: ozk8fEhXj7M0PYh9uGryEoQ83fu6LVaOwPSTygx76XQ=
Subject key identifier: 62:E1:54:65:86:42:CD:97:76:2C:59:90:62:B0:29:F9:07:3C:A1:76
Authority key identifier: 59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
Certificate issuer: /CN=A91EBD8F/serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Certificate serial: 24
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
Manifest number: 1E
Signing time: Fri 23 Jan 2026 06:54:29 +0000
Manifest this update: Fri 23 Jan 2026 06:54:28 +0000
Manifest next update: Fri 30 Jan 2026 06:54:28 +0000
Files and hashes: 1: WY9YPfrp_JTaoww3iyFr7JcOM5g.crl (hash: hDgZuioS1hU4i6RcLxFfrAtavqWod1vrc2wUCkeB5mg=)
2: 54F9E058D97F11F0B42EB3E75ED3641D.roa (hash: o2JYty/JtJqwDTRIPjLzarf8be5ER57F9WNIKeInhFs=)
3: 53EF3992D97F11F0B42EB3E75ED3641D.roa (hash: oII8tmXgPq+ZILgRsylRdfIHDt2K8RPOFb1KXGYXMrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 06:54:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EBD8F, serialNumber=598F583DFAE9FC94DAA30C378B216BEC970E3398
Validity
Not Before: Jan 23 06:54:28 2026 GMT
Not After : Jan 30 06:54:28 2026 GMT
Subject: CN=69731b25-cb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:97:7f:e9:b1:15:ea:cd:83:d1:b8:3a:91:
1d:92:50:d9:e2:4c:27:a1:ad:31:4b:c5:e7:f9:60:
7b:e3:47:de:9b:bf:bf:b9:f0:42:63:eb:ca:f3:f2:
89:5d:1b:84:d9:78:a5:b9:21:c5:e9:8f:fe:f6:4b:
a9:79:32:d7:0a:73:e0:ef:84:0f:b7:87:e8:40:da:
e3:ce:50:69:68:8e:27:6a:d3:c2:3e:8a:fe:ab:2d:
fb:a1:5d:97:53:07:0d:28:a0:1f:18:b5:ae:04:8c:
0b:4e:9c:cf:54:5c:d2:53:fa:b5:c6:8f:a6:25:10:
46:d1:f2:61:b2:7e:8b:ca:95:e6:d3:1b:5d:e1:5f:
01:8e:da:5e:df:97:24:93:bd:9c:51:e9:7f:2f:9b:
4f:65:c1:d2:63:d9:32:4d:83:3a:c4:62:c0:e3:96:
85:6f:06:2a:4e:f6:a9:2b:68:da:2c:5a:70:1c:7f:
80:f5:78:79:ca:ae:72:c3:d6:bf:7d:ae:1f:0c:17:
6b:ca:1b:cc:c0:f4:75:13:27:54:2b:5b:6e:8f:d3:
29:13:b7:60:13:68:4e:82:ac:0f:2f:c7:dd:37:95:
28:53:52:5d:7a:02:70:aa:53:c4:30:4e:a9:19:b8:
ed:84:1e:e0:ce:b0:a2:29:0e:ac:d3:99:79:87:bd:
fc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E1:54:65:86:42:CD:97:76:2C:59:90:62:B0:29:F9:07:3C:A1:76
X509v3 Authority Key Identifier:
keyid:59:8F:58:3D:FA:E9:FC:94:DA:A3:0C:37:8B:21:6B:EC:97:0E:33:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WY9YPfrp_JTaoww3iyFr7JcOM5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBD8F/A95E9A28D0EA11F0917F7940C4F9AE02/WY9YPfrp_JTaoww3iyFr7JcOM5g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2d:a1:ac:e4:03:90:00:5b:95:a1:f8:db:1e:3a:69:ef:48:
0e:f9:99:97:31:59:84:33:37:a4:41:b2:df:8e:33:52:49:e0:
32:b0:6d:4a:9e:e7:65:3c:50:a8:bd:f6:bf:54:e0:f7:c5:31:
35:01:04:52:fb:68:62:b1:e0:da:d6:1b:db:2f:a3:69:20:f1:
d9:52:55:fc:b9:dc:d7:fd:16:63:5e:d3:72:e4:05:7f:69:92:
1b:37:79:97:c8:42:cb:7d:35:55:63:7d:30:33:33:e1:9b:c9:
dd:06:fa:60:7b:1e:50:61:50:de:ff:48:c7:b4:9e:5b:15:12:
15:1b:42:39:30:23:33:9a:f3:15:e2:81:c1:fe:78:d8:92:cb:
74:b6:f9:bf:75:53:5b:1b:75:db:d6:97:39:46:b7:be:7e:9a:
37:dc:c3:03:38:89:d6:10:df:65:bc:8e:84:fe:f8:e5:c0:f9:
54:88:87:34:df:99:06:69:1b:b9:c6:bc:d7:de:30:6f:25:09:
e5:35:f9:ab:5d:12:74:59:55:df:b7:0a:7a:b9:37:03:f3:9e:
17:8b:6b:8b:b2:64:38:f1:24:d1:30:8e:ce:8f:1b:be:40:e6:
0b:d9:53:29:db:2f:c3:09:70:e9:cd:05:80:52:63:fb:5b:62:
57:01:72:d3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
QkQ4RjExMC8GA1UEBRMoNTk4RjU4M0RGQUU5RkM5NERBQTMwQzM3OEIyMTZCRUM5
NzBFMzM5ODAeFw0yNjAxMjMwNjU0MjhaFw0yNjAxMzAwNjU0MjhaMBgxFjAUBgNV
BAMMDTY5NzMxYjI1LWNiMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC4EZd/6bEV6s2D0bg6kR2SUNniTCehrTFLxef5YHvjR96bv7+58EJj68rz8old
G4TZeKW5IcXpj/72S6l5MtcKc+DvhA+3h+hA2uPOUGlojidq08I+iv6rLfuhXZdT
Bw0ooB8Yta4EjAtOnM9UXNJT+rXGj6YlEEbR8mGyfovKlebTG13hXwGO2l7flyST
vZxR6X8vm09lwdJj2TJNgzrEYsDjloVvBipO9qkraNosWnAcf4D1eHnKrnLD1r99
rh8MF2vKG8zA9HUTJ1QrW26P0ykTt2ATaE6CrA8vx903lShTUl16AnCqU8QwTqkZ
uO2EHuDOsKIpDqzTmXmHvfy7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYuFUZYZC
zZd2LFmQYrAp+Qc8oXYwHwYDVR0jBBgwFoAUWY9YPfrp/JTaoww3iyFr7JcOM5gw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCRDhGL0E5NUU5QTI4RDBF
QTExRjA5MTdGNzk0MEM0RjlBRTAyL1dZOVlQZnJwX0pUYW93dzNpeUZyN0pjT001
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvV1k5WVBmcnBfSlRhb3d3M2l5RnI3SmNPTTVnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC
RDhGL0E5NUU5QTI4RDBFQTExRjA5MTdGNzk0MEM0RjlBRTAyL1dZOVlQZnJwX0pU
YW93dzNpeUZyN0pjT001Zy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAA0toazkA5AAW5Wh+NseOmnvSA75mZcxWYQzN6RBst+OM1JJ4DKwbUqe
52U8UKi99r9U4PfFMTUBBFL7aGKx4NrWG9svo2kg8dlSVfy53Nf9FmNe03LkBX9p
khs3eZfIQst9NVVjfTAzM+Gbyd0G+mB7HlBhUN7/SMe0nlsVEhUbQjkwIzOa8xXi
gcH+eNiSy3S2+b91U1sbddvWlzlGt75+mjfcwwM4idYQ32W8joT++OXA+VSIhzTf
mQZpG7nGvNfeMG8lCeU1+atdEnRZVd+3Cnq5NwPznheLa4uyZDjxJNEwjs6PG75A
5gvZUynbL8MJcOnNBYBSY/tbYlcBctM=
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:53 2026 by rpki-client