This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json)
Hash identifier: L8hykTzDl/fdfmwpNm2HN3ZGF7Z45JHmpP7TWofFDqo=
Subject key identifier: 2B:7C:1C:E2:7E:F2:EE:92:0A:AE:6E:CB:E7:7D:AF:61:79:8D:05:B6
Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Certificate serial: 0219
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
Manifest number: 0215
Signing time: Fri 23 Jan 2026 01:25:45 +0000
Manifest this update: Fri 23 Jan 2026 01:25:45 +0000
Manifest next update: Fri 30 Jan 2026 01:25:45 +0000
Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: pAG5TRZdDa4by2qMhu8hdtfEET742HJ+H3f98Cc0cTM=)
2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: c6BodR5dfNjZNrckNbO0cz92rFo/n6093hWBqJQxy5A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Jan 2026 01:25:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 537 (0x219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F
Validity
Not Before: Jan 23 01:25:45 2026 GMT
Not After : Jan 30 01:25:45 2026 GMT
Subject: CN=6972ce19-e8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:26:31:13:37:06:49:61:31:8a:19:17:c3:
52:38:ce:f7:93:8e:4a:29:ec:23:d9:81:8a:bc:60:
aa:e6:77:56:60:7e:a8:79:4f:52:c9:13:c3:94:42:
12:c4:35:cf:7c:2a:86:c0:c3:80:da:2d:d1:8d:00:
71:96:d6:38:e9:be:b8:a2:53:e0:7d:01:99:4a:1f:
d2:c9:b8:c4:cb:39:41:da:77:55:e3:19:17:1b:9d:
9f:5b:42:0d:5d:74:cd:55:15:6e:98:3d:47:2e:bd:
be:bc:5d:5e:2c:68:cb:f9:37:37:79:7c:95:20:ef:
a0:8f:10:cc:5e:21:42:41:5b:85:f2:84:f8:e2:20:
22:b4:80:62:e0:42:da:0c:c2:c4:d9:9a:5f:67:1c:
0a:c4:41:70:ea:c9:1a:69:bc:b4:10:88:07:a9:29:
62:99:8b:90:e6:b8:58:de:8c:0c:2f:60:eb:95:71:
ef:0c:50:4d:85:8e:9e:6e:8a:6e:24:37:f8:93:5e:
41:82:b9:d7:ce:b5:ba:2d:49:57:b4:73:84:f6:23:
6b:eb:0b:fc:5b:07:a6:84:1c:e8:d9:05:f4:cc:84:
1e:59:e5:b7:76:44:6e:ae:28:1e:89:3d:ed:b2:fd:
9d:ef:a4:d6:17:1f:8b:16:30:bc:32:ad:4c:67:f6:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7C:1C:E2:7E:F2:EE:92:0A:AE:6E:CB:E7:7D:AF:61:79:8D:05:B6
X509v3 Authority Key Identifier:
keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a7:53:84:6a:99:20:ba:2d:dd:4c:fd:ee:0a:9d:5b:22:4e:
03:b8:c3:39:30:da:30:fa:49:20:82:6d:2e:8d:ac:9f:84:5a:
be:81:68:f6:55:89:62:f7:55:93:4e:08:56:aa:3c:4b:ea:ed:
3b:63:01:a4:80:c1:20:c1:b4:0f:5f:22:6e:d5:0b:40:19:7a:
07:15:db:58:33:16:c3:3b:c8:c2:3f:08:03:43:1f:a3:9e:d4:
08:5d:58:97:2b:91:c3:3d:f9:6a:ef:58:44:b9:e4:b8:a5:60:
d3:a6:2a:4b:91:43:cc:c1:d5:04:9a:38:ba:cc:c9:df:aa:3d:
ee:21:34:ec:f4:14:3c:8f:a7:92:90:31:42:69:ce:1b:26:27:
30:3a:e7:f1:fe:e4:02:f3:ce:96:b2:8e:88:31:b8:34:be:34:
20:f5:95:af:77:2c:73:26:d4:0e:7c:5d:a7:97:61:f2:6e:20:
36:e0:e2:7a:27:04:ff:ab:d7:a1:fe:4a:54:b7:09:07:ff:d1:
3e:58:f4:59:ea:06:f1:9d:49:71:f6:e6:ad:31:bd:49:c6:53:
d1:05:8d:07:20:79:bb:a0:59:c6:03:ff:aa:04:88:99:4b:73:
58:7d:23:fc:b8:14:d7:c3:0d:01:04:61:a4:a6:3a:c0:ae:36:
0c:86:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 03:03:43 2026 by rpki-client