This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
File: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft (raw, json)
Hash identifier: 9SSxNR8o72/JF34FZrrh7Ixoc7Frz4ydAKgLsXYMvc4=
Subject key identifier: 66:0E:3D:5C:EE:7A:72:6D:57:35:E5:9C:C9:81:52:50:7F:AD:DC:33
Authority key identifier: 63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
Certificate issuer: /CN=A91F428C/serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Certificate serial: 3508
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
Manifest number: 3503
Signing time: Sat 24 Jan 2026 14:57:41 +0000
Manifest this update: Sat 24 Jan 2026 14:57:40 +0000
Manifest next update: Sat 31 Jan 2026 14:57:40 +0000
Files and hashes: 1: YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl (hash: 5G5rOhvr83mxyzQcB+Nx/v/EZqSSviS2Q5l7PnveATQ=)
2: 8852DDDEBED411ECBA66025BC4F9AE02.roa (hash: 3hsbI0PrBL5LI5VaCiCNQ0sMN2EIkZA6LenSvD9t9yA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 14:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13576 (0x3508)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F428C, serialNumber=632C8DE0220B8C10B41FF49BFF8B432CF8FFD254
Validity
Not Before: Jan 24 14:57:40 2026 GMT
Not After : Jan 31 14:57:40 2026 GMT
Subject: CN=6974dde4-1dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:b6:c6:8c:bc:35:9c:8c:77:e4:4a:c2:23:
49:45:c8:32:70:9f:bc:f7:44:2d:db:a7:08:e3:22:
9e:a2:98:66:f9:03:2e:7a:15:86:22:36:ce:16:4a:
90:5d:26:23:c5:80:75:2f:12:c1:b5:97:89:dc:70:
9d:84:ea:1b:f7:84:00:11:1f:9b:71:78:7f:8a:67:
40:6e:c0:6a:01:05:34:40:8d:84:b4:16:7b:53:49:
d6:ac:9f:72:dd:90:40:39:68:39:db:3a:4a:26:11:
ac:fa:13:68:01:8e:6f:7d:10:90:c1:90:e9:b1:80:
c8:a9:43:91:c4:d5:d6:85:8f:02:a7:f7:2b:e9:cf:
cc:16:2f:6d:c8:7a:7c:3e:7a:31:25:ee:5f:49:81:
79:7b:b6:53:d9:d0:11:87:58:bd:b5:ec:b1:4a:c3:
50:a4:c6:67:7b:9a:01:f4:13:72:2f:74:c8:53:df:
6b:19:7a:c2:ec:ed:86:45:cf:c1:54:56:db:62:c6:
5a:bc:27:0d:dc:9d:b3:24:c4:52:19:43:8c:e4:0a:
9a:c6:66:46:55:ee:7b:f9:2a:ca:60:cb:50:b0:98:
e0:55:a4:b3:a2:75:2c:13:87:3f:23:63:e9:dc:58:
07:f2:df:93:6a:61:7a:25:07:db:6f:85:51:59:42:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:3D:5C:EE:7A:72:6D:57:35:E5:9C:C9:81:52:50:7F:AD:DC:33
X509v3 Authority Key Identifier:
keyid:63:2C:8D:E0:22:0B:8C:10:B4:1F:F4:9B:FF:8B:43:2C:F8:FF:D2:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F428C/449BA5061DA011E2B6D8709108B02CD2/YyyN4CILjBC0H_Sb_4tDLPj_0lQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:9f:34:a1:54:88:86:b5:62:e9:8f:c2:9a:eb:63:ff:9e:4b:
33:42:06:d9:25:e8:8e:13:66:81:39:7c:f0:6b:37:00:b4:af:
48:bb:0f:08:2a:f2:f4:a3:5f:86:a5:6f:16:c7:cb:5a:23:d2:
95:79:60:22:6a:87:0b:9b:92:ee:33:af:46:b5:9d:8b:d4:33:
0c:9e:c4:0c:4d:09:58:ba:33:3c:e5:cc:54:f8:b8:dd:2c:7e:
36:58:7c:fb:d0:b7:be:04:31:c9:c4:9b:ee:c1:46:cb:8e:27:
97:3f:c2:cf:9a:50:cb:54:df:d9:fc:3d:df:02:3c:96:a4:9d:
11:82:83:72:b8:ad:65:37:ea:e8:1d:33:69:00:49:28:29:8b:
ee:48:4d:2e:d4:2c:b3:67:49:09:97:5b:90:a8:63:a4:d0:08:
2b:ff:f6:5e:87:10:86:f5:7b:e7:ba:b7:9c:1d:85:11:7a:47:
88:66:33:e9:30:f6:62:25:42:db:e3:75:ac:52:7d:d5:05:98:
b1:e3:6b:d9:27:68:f4:62:72:18:3a:d8:d1:bc:41:b9:38:da:
60:cf:c2:82:47:43:62:c9:55:0a:03:7e:ac:e3:29:24:b5:ec:
c6:e5:6b:84:4a:3c:a3:bb:f2:58:b7:93:b2:7b:d8:bc:7e:ab:
09:be:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:31:38 2026 by rpki-client