This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File: hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier: acyNj/SrGgmmf4Qm1aB+D2Ng9n7EzBtrNZDM4Df1veo=
Subject key identifier: 3E:84:06:D3:51:9E:64:D9:80:70:25:57:92:49:AA:42:BB:17:84:CD
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer: /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial: 018E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number: 018B
Signing time: Wed 21 Jan 2026 02:50:37 +0000
Manifest this update: Wed 21 Jan 2026 02:50:37 +0000
Manifest next update: Wed 28 Jan 2026 02:50:37 +0000
Files and hashes: 1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: I6wq8KHVu9E8gyPRoYzirWr6ljbRYJmmdE55TWb4R3E=)
2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: yPYfEAglEFMTRsLgPsxCH1JdVrrNynf96haAqk8oe5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Jan 2026 02:50:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398 (0x18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
Validity
Not Before: Jan 21 02:50:37 2026 GMT
Not After : Jan 28 02:50:37 2026 GMT
Subject: CN=69703efd-336d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:6f:06:bd:be:fa:2d:8a:60:45:ac:7b:04:
36:e3:44:06:f1:a6:34:8a:5f:78:a3:10:75:ee:3f:
cc:ae:27:18:b3:c8:d1:8b:4b:77:51:09:00:ee:7d:
1c:92:df:16:b3:21:f0:d4:b9:c5:4d:3c:1a:eb:24:
d2:cf:a4:d3:9c:d0:06:e1:2d:6f:8f:07:3f:79:f9:
7c:46:bc:5f:ba:93:b3:05:5a:28:db:a2:42:20:1a:
dc:f7:5c:d6:1e:20:14:2a:fd:d7:3e:67:7f:22:3c:
28:0a:91:ee:2b:4f:d7:28:19:ac:6a:2d:95:b8:90:
f2:d5:79:62:e8:66:4e:66:06:92:ae:64:cc:20:c9:
ec:3e:3c:55:f9:83:87:c2:05:30:75:5d:ac:d2:e1:
69:10:ce:63:b4:9b:0a:f5:91:24:5d:87:89:a9:a3:
ac:0f:4e:0f:4d:bd:40:26:84:41:42:b7:82:0d:7e:
d9:ff:21:79:11:c2:2e:c4:bb:04:32:ec:be:d9:0c:
44:8b:b3:f0:b7:6b:37:9a:08:a6:ed:cf:b8:7b:54:
44:bc:ac:13:07:d8:16:ab:43:79:01:99:a9:3c:f1:
bd:f9:a6:83:fd:e7:40:9f:29:e7:46:f8:ba:0c:f8:
11:bf:6d:77:fa:fd:24:ef:39:c1:8e:59:62:5a:10:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:84:06:D3:51:9E:64:D9:80:70:25:57:92:49:AA:42:BB:17:84:CD
X509v3 Authority Key Identifier:
keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:a3:13:02:fd:a8:fd:f9:a1:16:d1:08:ef:c0:3b:81:f2:6b:
9f:e3:1f:5a:03:c0:1f:a0:94:fc:1f:5e:ad:09:73:51:84:b4:
5e:4b:f6:1c:a4:3c:78:8a:c5:f2:f2:22:5e:3a:60:5a:a9:18:
59:c7:bb:12:55:21:a7:ab:0b:af:61:98:65:8c:3d:79:f2:3b:
51:e2:bd:9e:cc:9d:da:6e:08:0f:c3:b7:30:d1:48:df:de:81:
9c:00:b3:37:bf:ac:c6:e9:d5:43:17:e6:81:66:12:81:1a:7f:
97:1f:4d:b5:63:19:54:1e:0d:e0:e8:65:5b:d5:ff:36:b9:93:
12:6e:84:cb:60:2e:c2:69:3a:58:1b:89:86:74:d5:3e:47:b8:
ac:4c:47:cd:76:b7:06:c0:4e:c4:cc:11:de:4b:35:1a:70:c8:
e0:8d:c8:0c:89:9b:cf:bb:19:24:82:c8:53:e7:f8:f6:45:18:
c2:ba:99:99:92:c3:06:69:6b:f8:cc:d7:9e:b9:02:98:02:a9:
1e:03:d0:ec:9a:ca:3f:cb:f1:09:f4:cd:ef:ec:b1:c9:e2:4b:
fd:80:9a:a8:f3:85:a3:4a:b7:02:cc:75:dd:22:21:5f:ea:95:
d8:e1:89:6c:85:b0:79:83:58:39:63:80:9e:34:59:fa:36:3d:
ed:df:6b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 21:10:45 2026 by rpki-client