This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
File: YDL2P9JhaBpA9zC5eHJR5jMozW4.mft (raw, json)
Hash identifier: Bv26+BE4nJbVMO1rRfGkfWO6JvHNkYC0azxIP2EbptY=
Subject key identifier: 81:4B:80:E7:64:D4:42:98:D3:A0:EB:B1:D5:1E:CD:A6:68:B0:7C:C8
Authority key identifier: 60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
Certificate issuer: /CN=A9155098/serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Certificate serial: 015A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
Manifest number: 0151
Signing time: Wed 21 Jan 2026 03:30:56 +0000
Manifest this update: Wed 21 Jan 2026 03:30:56 +0000
Manifest next update: Wed 28 Jan 2026 03:30:56 +0000
Files and hashes: 1: YDL2P9JhaBpA9zC5eHJR5jMozW4.crl (hash: hMXqm7c8wPEdTiLE1/c0/2vfp0ZFzr9Empu+r8vNib8=)
2: 8A27B986FFB811EFB6E16425C4F9AE02.roa (hash: g20Eco9SaLOp8CUCQLbxBAHWlc3BxmlgHVHA64eMjfs=)
3: 2FA6E74C0E0511F0971F7328C4F9AE02.roa (hash: ZuV1m3RVCFuLNu5PVZ3hMbWj1JgqSl1bBNnQdfczgAE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 03:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 346 (0x15a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155098, serialNumber=6032F63FD261681A40F730B9787251E63328CD6E
Validity
Not Before: Jan 21 03:30:56 2026 GMT
Not After : Jan 28 03:30:56 2026 GMT
Subject: CN=69704870-09b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:4c:80:57:e8:b0:3a:fe:c5:9c:36:3c:21:
2c:4b:63:45:ae:34:dd:e8:90:d0:99:25:bf:15:0b:
77:4a:58:3d:e7:0c:44:76:42:51:32:63:8c:10:3c:
0f:7a:d7:2a:f5:d0:af:39:58:74:be:0b:6e:2e:dd:
95:e7:1e:32:94:e8:20:7d:02:53:02:97:c1:35:92:
fb:42:0b:97:55:bd:81:09:d4:ec:fd:2f:8e:45:68:
6c:a7:09:4a:88:61:88:c4:48:ea:3e:1b:14:0c:4a:
d5:29:65:21:33:a0:43:78:bd:c0:84:eb:f9:2a:d7:
0f:b6:5f:b3:d7:17:1a:36:78:54:98:6e:89:60:9f:
c6:e2:92:1b:64:59:6e:4b:4d:58:70:b0:56:b5:8e:
1d:20:ca:cd:ea:e7:91:3a:13:fb:44:cb:cd:fd:83:
a7:47:49:a9:64:f5:a3:4c:d2:7e:30:f8:42:38:00:
85:8f:83:b5:4b:bd:e7:6b:da:06:06:e4:80:c1:6f:
9d:8d:82:f7:15:4d:c0:00:ce:dc:81:2f:6e:d2:ec:
84:87:8a:21:5c:d8:90:04:67:44:9f:a0:de:47:f4:
57:74:40:a8:80:19:5d:0a:bb:06:d4:85:7a:78:df:
af:92:60:1f:da:2a:84:68:27:ab:db:bb:3d:71:18:
1d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4B:80:E7:64:D4:42:98:D3:A0:EB:B1:D5:1E:CD:A6:68:B0:7C:C8
X509v3 Authority Key Identifier:
keyid:60:32:F6:3F:D2:61:68:1A:40:F7:30:B9:78:72:51:E6:33:28:CD:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YDL2P9JhaBpA9zC5eHJR5jMozW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155098/B2B1A2B8FC7111EEBDCC4B53C4F9AE02/YDL2P9JhaBpA9zC5eHJR5jMozW4.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1e:44:c6:a4:09:7a:06:b1:b0:d4:8f:30:0a:65:bb:31:00:
1c:f4:c6:8d:20:1a:8f:73:71:fc:00:5a:59:97:8e:bc:25:63:
63:bf:73:fa:6b:56:6b:90:fb:e5:95:e4:57:a9:43:6a:88:d5:
07:c9:e3:98:e4:b0:2a:60:c2:6c:37:d1:cd:e5:28:ef:0c:04:
87:70:9a:cb:ff:a0:0d:1e:80:7c:df:7d:6f:ac:63:5d:79:14:
c9:b9:6b:2f:16:b7:39:f2:03:0e:0f:82:a4:60:b2:98:1e:17:
ba:46:c8:a0:ca:eb:33:dd:2f:ec:eb:e6:d1:9c:ff:a7:2e:d3:
00:e5:43:60:28:57:c0:15:7e:f6:bf:1f:b6:b5:e0:5a:9e:89:
66:1c:52:f0:63:01:71:a8:0a:7d:75:d9:cd:48:de:27:49:66:
ee:cb:14:b0:f2:a5:7f:66:b8:67:2b:35:b3:25:1d:b7:25:a8:
4a:41:f4:7f:4f:62:a7:e5:8b:dd:08:b2:8e:34:5b:19:88:a0:
a3:a3:fb:65:17:5e:98:26:f9:28:c1:39:e3:9d:02:d3:ea:4a:
52:6a:41:ab:a0:97:37:e4:de:c2:c6:b7:cc:82:5e:95:59:9d:
77:4b:0a:d4:96:2e:62:de:5e:64:72:07:1e:d5:44:ce:93:cf:
72:93:b9:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTUwOTgxMTAvBgNVBAUTKDYwMzJGNjNGRDI2MTY4MUE0MEY3MzBCOTc4NzI1MUU2
MzMyOENENkUwHhcNMjYwMTIxMDMzMDU2WhcNMjYwMTI4MDMzMDU2WjAYMRYwFAYD
VQQDDA02OTcwNDg3MC0wOWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2FJMgFfosDr+xZw2PCEsS2NFrjTd6JDQmSW/FQt3Slg95wxEdkJRMmOMEDwP
etcq9dCvOVh0vgtuLt2V5x4ylOggfQJTApfBNZL7QguXVb2BCdTs/S+ORWhspwlK
iGGIxEjqPhsUDErVKWUhM6BDeL3AhOv5KtcPtl+z1xcaNnhUmG6JYJ/G4pIbZFlu
S01YcLBWtY4dIMrN6ueROhP7RMvN/YOnR0mpZPWjTNJ+MPhCOACFj4O1S73na9oG
BuSAwW+djYL3FU3AAM7cgS9u0uyEh4ohXNiQBGdEn6DeR/RXdECogBldCrsG1IV6
eN+vkmAf2iqEaCer27s9cRgd/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIFLgOdk
1EKY06DrsdUezaZosHzIMB8GA1UdIwQYMBaAFGAy9j/SYWgaQPcwuXhyUeYzKM1u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTA5OC9CMkIxQTJCOEZD
NzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFCcEE5ekM1ZUhKUjVqTW96
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lETDJQOUpoYUJwQTl6QzVlSEpSNWpNb3pXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTA5OC9CMkIxQTJCOEZDNzExMUVFQkRDQzRCNTNDNEY5QUUwMi9ZREwyUDlKaGFC
cEE5ekM1ZUhKUjVqTW96VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCgHkTGpAl6BrGw1I8wCmW7MQAc9MaNIBqPc3H8AFpZl468JWNjv3P6
a1ZrkPvlleRXqUNqiNUHyeOY5LAqYMJsN9HN5SjvDASHcJrL/6ANHoB8331vrGNd
eRTJuWsvFrc58gMOD4KkYLKYHhe6Rsigyusz3S/s6+bRnP+nLtMA5UNgKFfAFX72
vx+2teBanolmHFLwYwFxqAp9ddnNSN4nSWbuyxSw8qV/ZrhnKzWzJR23JahKQfR/
T2Kn5YvdCLKONFsZiKCjo/tlF16YJvkowTnjnQLT6kpSakGroJc35N7CxrfMgl6V
WZ13SwrUli5i3l5kcgce1UTOk89yk7mp
-----END CERTIFICATE-----
Generated at Thu Jan 22 17:03:19 2026 by rpki-client