This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
File: YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft (raw, json)
Hash identifier: uG3K/Oe7n1kvJb5H+SXFWONOpBOUkFyMFy4oHHgOAlE=
Subject key identifier: F6:A9:A7:EC:BD:47:E8:E4:55:1B:18:60:24:BE:C4:D7:E9:0A:50:F4
Authority key identifier: 62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
Certificate issuer: /CN=A9182509/serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
Manifest number: 08
Signing time: Fri 09 Jan 2026 07:18:42 +0000
Manifest this update: Fri 09 Jan 2026 07:18:41 +0000
Manifest next update: Fri 16 Jan 2026 07:18:41 +0000
Files and hashes: 1: YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl (hash: Lb3nkZWRSIm5h0SS2PBLz0ok1E/axXwzpTh3O0JhL68=)
2: F50431A0E48511F0BEFBEDFF436F56BC.roa (hash: yobUiX8bmVSBMajQKQhWppuaywNIixpGXvwM94nK4cU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Jan 2026 07:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182509, serialNumber=62A23F33E90B72060553719514D0C5ABC2E23447
Validity
Not Before: Jan 9 07:18:41 2026 GMT
Not After : Jan 16 07:18:41 2026 GMT
Subject: CN=6960abd1-d6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:9c:66:c3:50:77:2d:8b:d6:05:6f:44:a3:
f1:dc:4b:3b:a3:07:dd:b8:11:a3:12:ee:4f:e3:da:
e1:1f:6c:d4:f5:60:e4:bb:79:f7:83:24:4b:f7:87:
c1:9e:b7:fb:e6:a8:8f:df:98:7d:ab:da:2b:5a:93:
94:69:34:95:f9:ff:36:2e:8f:b3:f3:08:71:c4:9b:
44:31:e5:c2:3b:ee:ec:97:47:22:ee:52:1c:a5:d7:
bd:d9:59:f5:a5:02:9c:c4:c4:1e:2a:3e:4a:c8:65:
d6:53:94:a0:e4:c5:ec:fb:b0:31:d9:75:11:95:ce:
5c:0f:19:0c:e6:20:7f:8f:b7:93:bb:7c:de:da:01:
97:df:9c:61:29:f6:a0:a8:66:55:48:37:ea:fe:13:
c5:2f:df:3d:b4:c4:12:f2:08:1f:5e:fe:de:2c:53:
20:ac:57:b6:c2:54:40:d6:ef:8d:22:7b:1b:f5:83:
11:13:83:da:de:29:75:92:90:b0:2a:7e:5a:2a:f8:
75:43:50:24:d5:6a:77:8d:ec:7f:10:c2:11:24:f6:
b9:19:09:72:5d:9f:a5:d8:61:1e:ef:0b:73:de:c4:
dc:49:0e:f0:df:2b:3a:4c:29:7c:1f:97:b5:2b:5a:
1e:fe:23:13:02:00:04:13:70:ba:66:f1:ec:52:5f:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A9:A7:EC:BD:47:E8:E4:55:1B:18:60:24:BE:C4:D7:E9:0A:50:F4
X509v3 Authority Key Identifier:
keyid:62:A2:3F:33:E9:0B:72:06:05:53:71:95:14:D0:C5:AB:C2:E2:34:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YqI_M-kLcgYFU3GVFNDFq8LiNEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182509/9B1CE212E48111F0AC467BC1426F56BC/YqI_M-kLcgYFU3GVFNDFq8LiNEc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:33:ca:90:8b:07:72:ce:e0:eb:25:94:11:da:ba:06:a1:9b:
20:05:e7:f2:1a:6f:c5:27:1e:6c:ac:be:65:19:c7:fe:4f:0f:
e0:ce:b8:cc:2d:f2:05:5d:44:aa:e7:00:f0:1d:7d:41:a8:aa:
5a:0d:cf:82:a8:14:cb:bc:cb:fa:63:3e:bb:1b:a2:82:e4:a1:
c7:4d:62:67:1c:2a:0d:b1:41:08:ab:2c:ae:38:6e:19:57:f3:
83:da:f3:e5:e6:fa:a0:97:9c:75:05:9a:ec:15:86:da:01:8c:
5f:29:b6:4e:1b:5d:d3:e4:3d:ab:3b:4a:72:42:a7:99:3c:3a:
69:b1:8e:e0:8f:22:29:4f:22:7a:1a:ae:b9:4f:18:a0:5d:59:
3b:92:a9:02:45:10:fd:d2:f2:a3:1b:d3:06:3e:92:a2:5d:d0:
ea:c8:73:7f:dd:2a:e0:4f:91:97:be:9e:b1:70:f5:cb:f2:b2:
94:70:69:34:44:31:73:3d:92:a2:9b:14:1f:56:48:41:d3:ad:
c1:1a:49:71:9b:1b:6e:21:6f:42:bb:73:22:20:8d:0a:06:5b:
e2:c4:ac:04:37:91:29:5f:e8:f0:6b:0b:e1:87:e3:5e:9c:bb:
44:ef:91:aa:21:7d:45:b8:35:41:c5:c3:f8:b2:d8:49:47:a0:
b5:57:4e:b3
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE4
MjUwOTExMC8GA1UEBRMoNjJBMjNGMzNFOTBCNzIwNjA1NTM3MTk1MTREMEM1QUJD
MkUyMzQ0NzAeFw0yNjAxMDkwNzE4NDFaFw0yNjAxMTYwNzE4NDFaMBgxFjAUBgNV
BAMMDTY5NjBhYmQxLWQ2ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnqZxmw1B3LYvWBW9Eo/HcSzujB924EaMS7k/j2uEfbNT1YOS7efeDJEv3h8Ge
t/vmqI/fmH2r2itak5RpNJX5/zYuj7PzCHHEm0Qx5cI77uyXRyLuUhyl173ZWfWl
ApzExB4qPkrIZdZTlKDkxez7sDHZdRGVzlwPGQzmIH+Pt5O7fN7aAZffnGEp9qCo
ZlVIN+r+E8Uv3z20xBLyCB9e/t4sUyCsV7bCVEDW740iexv1gxETg9reKXWSkLAq
floq+HVDUCTVaneN7H8QwhEk9rkZCXJdn6XYYR7vC3PexNxJDvDfKzpMKXwfl7Ur
Wh7+IxMCAAQTcLpm8exSX0MjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9qmn7L1H
6ORVGxhgJL7E1+kKUPQwHwYDVR0jBBgwFoAUYqI/M+kLcgYFU3GVFNDFq8LiNEcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgyNTA5LzlCMUNFMjEyRTQ4
MTExRjBBQzQ2N0JDMTQyNkY1NkJDL1lxSV9NLWtMY2dZRlUzR1ZGTkRGcThMaU5F
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWXFJX00ta0xjZ1lGVTNHVkZOREZxOExpTkVjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgy
NTA5LzlCMUNFMjEyRTQ4MTExRjBBQzQ2N0JDMTQyNkY1NkJDL1lxSV9NLWtMY2dZ
RlUzR1ZGTkRGcThMaU5FYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGIzypCLB3LO4OsllBHaugahmyAF5/Iab8UnHmysvmUZx/5PD+DOuMwt
8gVdRKrnAPAdfUGoqloNz4KoFMu8y/pjPrsbooLkocdNYmccKg2xQQirLK44bhlX
84Pa8+Xm+qCXnHUFmuwVhtoBjF8ptk4bXdPkPas7SnJCp5k8OmmxjuCPIilPInoa
rrlPGKBdWTuSqQJFEP3S8qMb0wY+kqJd0OrIc3/dKuBPkZe+nrFw9cvyspRwaTRE
MXM9kqKbFB9WSEHTrcEaSXGbG24hb0K7cyIgjQoGW+LErAQ3kSlf6PBrC+GH416c
u0TvkaohfUW4NUHFw/iy2ElHoLVXTrM=
-----END CERTIFICATE-----
Generated at Sun Jan 11 06:13:13 2026 by rpki-client