This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
File: ry1FO-u_318ptjrBZ1THjRsPy4g.mft (raw, json)
Hash identifier: XTLg36l56Arm0BXb4lhBUy1vEY1iD3P4JsWLj7DMO/w=
Subject key identifier: 97:EB:86:95:E9:B6:F5:1C:70:73:D0:19:02:01:1A:6E:67:EF:AD:B9
Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Certificate serial: 0CC8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
Manifest number: 0CBE
Signing time: Fri 16 Jan 2026 17:53:46 +0000
Manifest this update: Fri 16 Jan 2026 17:53:45 +0000
Manifest next update: Fri 23 Jan 2026 17:53:45 +0000
Files and hashes: 1: ry1FO-u_318ptjrBZ1THjRsPy4g.crl (hash: m33uHcZyu2qb17kkIxYHDcQmyweY+O1EE9g9Am/Od7I=)
2: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (hash: QXDdzYa6iyzovy5Z9ik5QXaJEcfXc3NGsSzn/V3Ryt4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Jan 2026 17:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3272 (0xcc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88
Validity
Not Before: Jan 16 17:53:45 2026 GMT
Not After : Jan 23 17:53:45 2026 GMT
Subject: CN=696a7b2a-8348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:35:52:e3:47:ad:14:cc:ae:5d:f8:9e:1a:
1a:2f:0d:c5:64:c1:67:a0:5a:c1:f1:9a:12:64:3e:
82:eb:41:17:97:25:99:9d:48:6a:85:5d:53:88:89:
de:f6:1c:07:00:d8:8a:75:ea:42:9c:48:bd:f8:c5:
8f:47:b9:d2:e4:0e:60:2a:8c:1a:85:13:3a:5a:ce:
1b:5d:97:45:9f:fe:96:32:d4:a3:06:b7:90:7a:10:
42:52:d1:95:e2:bf:86:49:63:17:e7:df:6d:ec:c2:
6e:06:73:a5:cb:c6:e5:91:23:bf:57:5b:e3:71:7f:
1a:fc:74:e6:91:6d:97:76:14:58:c0:dd:ab:ef:ab:
3c:f2:bf:4a:d7:dc:aa:a7:3e:03:6b:e9:2d:c2:71:
7b:48:5b:04:a2:6f:6a:9f:d7:23:ec:21:08:13:4b:
5c:37:71:1a:74:3b:4a:b5:8b:f4:98:5a:53:95:a3:
8e:f4:76:b4:f6:1d:db:db:3c:cd:d2:f1:88:26:9b:
af:93:68:92:6e:e6:9a:8c:85:a0:81:ae:e3:f7:3e:
e8:d8:38:d5:c7:d4:23:98:6c:34:da:62:48:3d:7b:
43:50:78:66:5d:ca:28:30:bb:27:ff:f6:66:69:a0:
46:cc:ae:c4:61:1d:52:19:bf:e0:e2:76:de:d5:3b:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EB:86:95:E9:B6:F5:1C:70:73:D0:19:02:01:1A:6E:67:EF:AD:B9
X509v3 Authority Key Identifier:
keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1f:d8:f1:a7:b0:23:36:81:29:90:0c:f1:73:3d:98:28:1b:
72:17:83:d9:da:6c:30:47:20:8d:d3:7a:7b:c6:5f:db:b9:56:
3b:50:c4:96:2a:8e:a8:65:b0:ff:9f:b3:55:49:a5:19:ff:5b:
bc:d0:66:f7:c0:3b:51:92:62:04:59:f4:08:6a:ed:0e:93:ba:
61:5b:ac:94:e7:66:0a:90:b2:cc:4d:a2:cb:26:a1:89:dc:e7:
1a:3f:52:36:16:78:6e:65:b7:d5:a5:a1:85:46:cd:17:f1:31:
f9:f8:ca:7f:43:18:8a:ad:a2:e0:4e:f5:d4:1c:d3:28:f1:c1:
40:72:c2:15:f8:ff:d2:ba:29:77:30:e4:43:14:cc:d3:fb:fa:
e2:8b:ed:2a:f0:88:0b:b9:ef:a5:dc:0f:ac:fd:72:d7:0c:e7:
74:3e:01:0c:de:d3:1d:ca:82:80:7c:73:73:de:7d:7d:15:e4:
da:4b:d6:04:1a:54:be:a4:7a:62:97:e4:29:b3:69:9d:07:b5:
88:57:d3:a5:67:e7:bc:d1:43:be:e2:b3:7f:97:54:1e:ca:2c:
19:bf:4a:41:84:77:40:02:ce:75:38:99:04:3f:6b:28:1b:81:
3a:ca:2e:c0:9d:bf:f2:a4:1c:4f:4e:7b:e9:83:1e:0c:23:ef:
28:10:0d:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU3QkExMTAvBgNVBAUTKEFGMkQ0NTNCRUJCRkRGNUYyOUI2M0FDMTY3NTRDNzhE
MUIwRkNCODgwHhcNMjYwMTE2MTc1MzQ1WhcNMjYwMTIzMTc1MzQ1WjAYMRYwFAYD
VQQDDA02OTZhN2IyYS04MzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsus1UuNHrRTMrl34nhoaLw3FZMFnoFrB8ZoSZD6C60EXlyWZnUhqhV1TiIne
9hwHANiKdepCnEi9+MWPR7nS5A5gKowahRM6Ws4bXZdFn/6WMtSjBreQehBCUtGV
4r+GSWMX599t7MJuBnOly8blkSO/V1vjcX8a/HTmkW2XdhRYwN2r76s88r9K19yq
pz4Da+ktwnF7SFsEom9qn9cj7CEIE0tcN3EadDtKtYv0mFpTlaOO9Ha09h3b2zzN
0vGIJpuvk2iSbuaajIWgga7j9z7o2DjVx9QjmGw02mJIPXtDUHhmXcooMLsn//Zm
aaBGzK7EYR1SGb/g4nbe1Tsl+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfrhpXp
tvUccHPQGQIBGm5n7625MB8GA1UdIwQYMBaAFK8tRTvrv99fKbY6wWdUx40bD8uI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82ODEyREY5MjA0
RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMxOHB0anJCWjFUSGpSc1B5
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3J5MUZPLXVfMzE4cHRqckJaMVRIalJzUHk0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTdCQS82ODEyREY5MjA0RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMx
OHB0anJCWjFUSGpSc1B5NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBaH9jxp7AjNoEpkAzxcz2YKBtyF4PZ2mwwRyCN03p7xl/buVY7UMSW
Ko6oZbD/n7NVSaUZ/1u80Gb3wDtRkmIEWfQIau0Ok7phW6yU52YKkLLMTaLLJqGJ
3OcaP1I2FnhuZbfVpaGFRs0X8TH5+Mp/QxiKraLgTvXUHNMo8cFAcsIV+P/Suil3
MORDFMzT+/rii+0q8IgLue+l3A+s/XLXDOd0PgEM3tMdyoKAfHNz3n19FeTaS9YE
GlS+pHpil+Qps2mdB7WIV9OlZ+e80UO+4rN/l1QeyiwZv0pBhHdAAs51OJkEP2so
G4E6yi7Anb/ypBxPTnvpgx4MI+8oEA1q
-----END CERTIFICATE-----
Generated at Sun Jan 18 03:14:32 2026 by rpki-client