This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
File: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft (raw, json)
Hash identifier: iLRizfHgJn6KS3Sz+STYyDjW2J93rTKAjN4DPHhktKM=
Subject key identifier: 1B:FD:9A:BA:6B:D7:7B:C2:56:7C:51:5C:EB:8A:6F:09:10:67:1B:EB
Authority key identifier: C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17
Certificate issuer: /CN=A91F277D/serialNumber=C88D55B7BFD54388B610206AA411D2E199779017
Certificate serial: 06F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
Manifest number: 06F8
Signing time: Sat 24 Jan 2026 21:14:24 +0000
Manifest this update: Sat 24 Jan 2026 21:14:23 +0000
Manifest next update: Sat 31 Jan 2026 21:14:23 +0000
Files and hashes: 1: yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl (hash: jmypS/BQiY8thLBmnH5Q2EWJ5umB3VoTZnRoIZWSdpo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl
rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 21:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1784 (0x6f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F277D, serialNumber=C88D55B7BFD54388B610206AA411D2E199779017
Validity
Not Before: Jan 24 21:14:23 2026 GMT
Not After : Jan 31 21:14:23 2026 GMT
Subject: CN=69753630-2ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e1:c2:df:52:23:c3:9b:4f:61:75:87:c5:24:
72:db:72:9a:2c:73:6f:06:5e:0a:e1:b6:ca:80:8b:
dd:0b:25:b4:84:56:2a:d2:93:76:f5:2d:c0:88:f7:
21:70:24:b5:1b:9a:85:9c:85:22:bf:26:2c:50:0c:
07:4c:3b:25:2f:0a:c3:d3:50:07:7c:cb:ec:cc:4f:
3b:b9:c3:b3:5c:24:56:1b:b2:81:4c:b1:92:50:f8:
d2:09:0f:f5:ba:a0:dc:e0:bc:83:92:4d:35:8e:fe:
90:5b:d5:ec:6d:ef:d1:65:0f:37:58:47:2c:0d:95:
1b:b4:3a:5b:0b:e0:dd:d8:95:f5:74:45:25:60:1a:
7b:b9:e0:00:9f:7a:26:49:2b:50:2d:d8:6c:06:bc:
0c:46:09:04:35:60:48:ba:a3:4b:16:b1:90:7b:3e:
a7:9d:04:6b:8f:c1:87:a4:8a:26:47:85:65:8a:2e:
a8:e4:c7:89:fe:ad:3a:d1:f6:45:bd:0e:cf:ed:9f:
7b:a5:4c:fb:9b:74:61:8d:5f:10:9c:1c:2e:90:61:
a9:23:0f:a4:42:17:9c:6a:cc:e9:c7:91:f0:3b:26:
d4:bb:20:5c:e0:0f:d5:bb:87:9b:bd:5b:19:98:a9:
e1:be:df:3a:39:fc:61:19:9b:39:ff:cc:7f:ef:87:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FD:9A:BA:6B:D7:7B:C2:56:7C:51:5C:EB:8A:6F:09:10:67:1B:EB
X509v3 Authority Key Identifier:
keyid:C8:8D:55:B7:BF:D5:43:88:B6:10:20:6A:A4:11:D2:E1:99:77:90:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/1B88D2A074F011EB8CE3F71CC4F9AE02/yI1Vt7_VQ4i2ECBqpBHS4Zl3kBc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:29:46:f2:a5:a8:5e:94:49:24:c9:dd:1d:16:32:4e:59:d6:
db:b9:05:30:4e:39:45:97:6a:cc:7b:7b:af:f8:51:fe:24:ee:
10:0c:f0:c7:3d:03:1f:d4:ce:8f:9e:8d:33:fc:5d:1f:31:41:
f8:af:d5:08:01:8b:2a:d3:fd:a9:97:1f:63:a6:7e:51:a2:d0:
05:49:e3:2e:f8:6f:75:6b:53:30:74:ed:bf:06:cb:58:56:f7:
98:f9:54:b0:cb:7e:14:ec:7e:92:16:e9:76:a7:4a:97:e1:d3:
72:16:de:59:0d:6c:20:22:c8:50:5c:56:80:9f:b0:78:7a:1b:
eb:76:46:84:7c:c9:20:95:16:61:be:9d:0c:9f:b3:14:f4:44:
ce:8e:0f:d5:04:31:70:78:db:81:bd:03:3f:05:dc:20:3b:97:
a5:5a:af:99:21:ab:df:b3:f7:b4:f4:7f:f8:f3:6b:e8:6c:87:
7f:ce:fc:b9:7f:4a:55:fa:62:f4:60:14:df:c1:ce:57:a7:0f:
59:98:78:31:61:a1:b4:cc:32:2a:cd:e0:0f:fd:a5:16:83:df:
8c:32:3c:db:b6:38:c1:0a:42:e7:e0:e9:66:cf:e2:bf:99:02:
f0:40:a3:e0:03:18:0f:e6:7a:99:c9:3c:17:70:cd:f9:de:03:
c6:b1:be:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:01:46 2026 by rpki-client